1 to 25 of 26 Dynamic Application Security Testing Jobs in England

INFORMATION SECURITY SPECIALIST (APPLICATION SECURITY) Manchester or Stoke-on-Trent (Hybrid) KEY POINTS * Application Security focused role * Hybrid working - Manchester or Stoke-on-Trent * Secure Development Lifecycle, AppSec tooling, CI/CD integration * Salary up to £80,000 DOE ABOUT THE CLIENT Due to continued … skills) your application to our client in conjunction with this vacancy only. KEY SKILLS Application Security, AppSec, OWASP, Threat Modelling, SAST, DAST, CI/CD Security, Secure SDLC, Penetration Testing, Code Review, Supply Chain Security, Automation, AI Security ...

demonstrable leadership capacity.• Strong technical grounding in application security, cloud security, and DevSecOps.• Hands-on experience with SCA, SAST, DAST, CSPM, CNAPP • Excellent practical familiarity with industry frameworks such as OWASP and NIST.• Proven ability to drive organisational change and influence senior stakeholders.• Excellent communication and documentation … services Keyword Terminology Application Security, Product Security, AppSec, Cloud Security, DevSecOps, Secure-by-Design, SDLC Security, OWASP, NIST, SAST, DAST, SCA, CSPM, CNAPP, CISSP, CISM, CISA, Security Frameworks, GDPR, ISO 27001, Risk Management, Security Governance ...

security controls across cloud infrastructure using Infrastructure as Code, with a security-first mindset. Automate security testing processes, including SAST, DAST and IAST, enabling early detection and remediation of vulnerabilities. Conduct and support regular automated security assessments, vulnerability scans and remediation planning. Build and maintain … Deep knowledge of securing AWS-based environments, container platforms (Docker, Kubernetes) and cloud-native services. Experience implementing and managing security tools including SAST, DAST, vulnerability scanners and container security tools. Strong scripting and automation skills using Bash, Python or similar languages. Experience with monitoring, logging and SIEM platforms ...

client is a leading international financial services organisation seeking a senior Cybersecurity professional to take ownership of information security, cybersecurity and data security across the business. This role acts as the first line of defence within IT and plays a critical part in safeguarding systems, data and infrastructure … optimise network and firewall policies to ensure effectiveness and necessity • Oversee application security across development and testing phases, including SAST and DAST • Monitor and assess data leakage risks and strengthen encryption controls for data at rest, in transit and in use Key Skills and Experience • Minimum ...

Contract Role AppSec Engineer/Application Security Engineer London/Manchester/Glasgow/Hybrid 12 months initial Inside IR35 Role Overview: Job Title: AppSec Engineer/Application Security Engineer Location: Hybrid 2 days onsite per week (London/Manchester/Glasgow) Contract Type: Contract Duration … IR35) Sector: Banking Key Skills & Experience AppSec Engineer, experience with: The software security landscape: CVEs, CWEs, common software vulnerability types SAST, SCA, and DAST, including the strengths and weaknesses of each At least one programming language (e.g. Java, Go) At least one major cloud provider (e.g. AWS, GCP, Azure ...

Contract Role – AppSec Engineer/Application Security Engineer – London/Manchester/Glasgow/Hybrid – 12 months initial – Inside IR35 Role Overview: Job Title: AppSec Engineer/Application Security Engineer Location: Hybrid – 2 days onsite per week (London/Manchester/Glasgow) Contract Type: Contract Duration … IR35) Sector: Banking Key Skills & Experience AppSec Engineer, experience with: The software security landscape: CVEs, CWEs, common software vulnerability types SAST, SCA, and DAST, including the strengths and weaknesses of each At least one programming language (e.g. Java, Go) At least one major cloud provider (e.g. AWS, GCP, Azure ...

Product Security Specialist (PSS) at HL, you will be a key member of a collaborative team of security professionals dedicated to safeguarding HL's products and services. In this role, you will serve as the primary security contact for assigned product teams/squads, providing expert guidance … Knowledge of security principles, practices, and frameworks, such as OWASP, NIST, and ISO. Awareness of security tools and technologies, such as SAST, DAST, IAST, SCA, WAF, IDS, IPS. Experience in conducting threat modelling and risk assessments. Interview process The interview process for this role is two stages including ...

proactive, hands-on Security Consultant looking to make a real impact in a major technology transformation? Here's your chance to join a leading UK Bank on an exciting 6-month contract, helping modernise their tech stack while maintaining trust and security at every step. About the Role … someone with a blend of technical expertise and delivery mindset: Hands-on application security experience: secure coding, threat modelling, SAST/DAST tooling. Strong knowledge of SDLC and CI/CD integration, with experience securing software throughout its lifecycle. Pragmatic, delivery-focused, and able to take ownership ...

Senior Security Engineer/DevSecOps Engineer Location: Multiple locations across the UK (hybrid & flexible)Salary: Up to £85,000 + comprehensive benefits package The Opportunity A large-scale digital organisation is undertaking a significant technology transformation, building modern cloud platforms that support millions of users across consumer and enterprise … native workflows Knowledge of secure development frameworks and practices (e.g. OWASP-based approaches) Experience with application security tooling such as SAST, SCA, DAST, or container security Understanding of cloud networking, identity, access management, and secure integrations Ways of Working Comfortable working as part of a cross-functional ...

Senior Security Engineer/DevSecOps Engineer Location: Multiple locations across the UK (hybrid & flexible)Salary: Up to £85,000 + comprehensive benefits package The Opportunity A large-scale digital organisation is undertaking a significant technology transformation, building modern cloud platforms that support millions of users across consumer and enterprise … native workflows Knowledge of secure development frameworks and practices (e.g. OWASP-based approaches) Experience with application security tooling such as SAST, SCA, DAST, or container security Understanding of cloud networking, identity, access management, and secure integrations Ways of Working Comfortable working as part of a cross-functional ...

Senior Security Engineer/DevSecOps Engineer Location: Multiple locations across the UK (hybrid & flexible)Salary: Up to £85,000 + comprehensive benefits package The Opportunity A large-scale digital organisation is undertaking a significant technology transformation, building modern cloud platforms that support millions of users across consumer and enterprise … native workflows Knowledge of secure development frameworks and practices (e.g. OWASP-based approaches) Experience with application security tooling such as SAST, SCA, DAST, or container security Understanding of cloud networking, identity, access management, and secure integrations Ways of Working Comfortable working as part of a cross-functional ...

Security Engineer Salary: Up to £85,000 (depending on experience) Locations: London, Leeds, Middlesbrough, Bristol or Bournemouth Working Pattern: Hybrid - two days per week in one of the above offices Overview: An established enterprise organisation is undertaking enhancements to its digital platforms as part of an ongoing modernisation strategy.As … concepts (VPNs, subnets, regions/zones) and integration technologies Hands-on experience with SAST and SCA tools such as Snyk and Checkmarx Experience with DAST tools such as OWASP ZAP or Qualys DAST (preferred), ideally working with HTTP APIs Ability to manage and support large-scale software estates, including build ...

looking for a hands-on DevSecOps Engineer to take ownership of application and cloud security across a modern, Azure-first product environment. This is a product-focused security role, sitting at the intersection of development, DevOps and security, helping teams understand why vulnerabilities exist … education. The role: Act as the DevSecOps lead, owning application and cloud security practices across the business Analyse outputs from SAST and DAST tools (e.g. Snyk, BrightSec), understanding vulnerabilities at a low level and advising development teams on remediation Work closely with DevOps to ensure secure configuration ...

immediately available Test Manager with experience in connected vehicle ecosystems, IoT, or automotive software testing? This role provides leadership and oversight across all test activities, from planning through execution to sign-off, with accountability for ensuring that solutions are robust, reliable, and fit for purpose. The Test Manager will … systems and microservices architectures. Working knowledge of OWASP standards, common security vulnerabilities, and experience conducting or coordinating security testing including SAST, DAST, and penetration testing. Understanding of authentication and authorization frameworks (OAuth, JWT, SAML) and familiarity with secure coding practices and threat modelling Experience in test automation ...

Security Engineer £50,000 to 67,000 GBP Bonus Hybrid WORKING Location: Manchester, North West - United Kingdom Type: Permanent Security Engineer - API, IAM & Automation Locations: Glasgow, Greater Manchester or Northampton (Hybrid) Salary: Up to £67,000 base + bonus (DOE) The Role We're looking for a Security … Security Engineering, DevSecOps, SRE, or Platform Engineering. Desirable Experience integrating security into CI/CD pipelines. Knowledge of vulnerability scanning (SAST, DAST, SCA). Familiarity with container and Kubernetes security. This is an opportunity to play a key role in shaping secure-by-design engineering practices across ...

Senior Product Security Engineer Financial Services | 6-month Contract | Inside IR35 London - 2 days onsite per week My client, a leading Payments company is looking for a Senior Product Security Engineer to join their evolving cyber security function. This is a key role focused on embedding security … incidents and systemic issues Act as Incident Commander or Investigation Lead during security events Partner with CI/CD teams to integrate SAST, DAST, SCA and other security controls Collaborate with product, engineering and compliance stakeholders to deliver security initiatives What You'll Bring Strong expertise ...

have an exciting opportunity for a Software Security Engineer to join our Global Healthcare client. As a Security Engineer, you’ll provide hands-on technical expertise to guide software development, delivery and continuous improvement focusing on risk and security. You’ll help evolve our client’s new Digital … design (VPNs, subnets, regions/zones etc), and integration related technologies (Auth0, APIM) Expertise with SAST & SCA systems such as Snyk, Checkmarx Experience with DAST systems such as OpenZAP, Qualys DAST (preferred) ideally with HTTP APIs Ability to manage large scale software estates from a operational perspective (build, release, monitoring ...

Senior Product Security Engineer** (Contract) Duration: 8 Months (Possibility for extension) Location: London/Hybrid (2 days per week on site) Rate: A highly competitive Umbrella Day Rate is available for suitable candidates Role Overview As a Senior Product Security Engineer, you will be an essential partner … assessments, and regulatory compliance. Technical Proficiency: Experience working with CI/CD teams to implement security technologies in the pipeline, including SAST, DAST, and SCA tools. Collaborative Spirit: A track record of partnering with cross-functional teams to deliver impactful security initiatives. Candidates will need to show ...

Security Architect Requirement Rate; Flexible Location; Remote - adhoc travel to London Duration; 6 month initial You will be supporting a Legacy Application program in upgrading hundreds of business applications across Wintel, Linux and cloud environments. Core Competencies Legacy System Modernisation: Proven experience in upgrading legacy applications while maintaining … Cloud (AWS/Azure/GCP): Designing IAM policies, encryption (FIPS 140-validated modules), and network segmentation for hybrid environments. DevSecOps: Integrating SAST/DAST tools into CI/CD pipelines and automating compliance checks. Security Documentation Threat Modeling: Using frameworks to identify risks in legacy-to-modern transitions. ...

reusable modules, guardrails, andpolicyascodeto support secure, consistent cloud adoption. Applyendtoendsecurity across identity, networking, encryption, secrets, MFA, andzerotrust. Implement automated security scanning (SAST/DAST), dependency checks, and secure pipeline patterns, aligning platforms withorganisationaland regulatory standards. Work across the full project lifecycle. About You: Experienced in designing and building secure … Experience of the following would be advantageous: Consulting or client facing project leadership experience Experience with .NET of Python Familiar with cloud-native security tooling If you are looking to join a leading consultancy specialising in Digital, Security and AI solutions then this is the role for you. ...

appoint a Senior Azure Cloud Engineer. This is a hands-on senior role where youll take ownership of Azure infrastructure, DevOps practices, and cloud security, working closely with architects and development teams in an agile environment. The platform is API-driven and operates at scale, so reliability, performance … Proven Infrastructure-as-Code expertise (Terraform, Bicep/ARM) Experience with Azure DevOps, GitHub, and CI/CD pipelines Familiarity with DevSecOps, SAST/DAST, and cloud monitoring Confident communicator with a pragmatic, delivery-focused mindset This is an opportunity to join a business where cloud engineering is central ...

Senior Azure Cloud Engineer. This is a hands-on senior role where you’ll take ownership of Azure infrastructure, DevOps practices, and cloud security, working closely with architects and development teams in an agile environment. The platform is API-driven and operates at scale, so reliability, performance, and security … Proven Infrastructure-as-Code expertise (Terraform, Bicep/ARM) Experience with Azure DevOps, GitHub, and CI/CD pipelines Familiarity with DevSecOps, SAST/DAST, and cloud monitoring Confident communicator with a pragmatic, delivery-focused mindset This is an opportunity to join a business where cloud engineering is central ...

continuous evolution of our enterprise API Platform. This role is fully hands-on , combining deep expertise in Azure cloud services, Kubernetes, Terraform, API security, and distributed systems with the ability to guide, review, and contribute to .NET Core API development practices . The architect will define and maintain … APIM deployments, testing, API versioning, and documentation automation. Establish CI/CD pipelines for Terraform, .NET API builds, image scanning, SAST/DAST, compliance enforcement. 8. Hands-On .NET Core API Integration & Code Reviews Review .NET Core API implementations to ensure correct API design , platform alignment, and cloud-native ...

Apply industry best engineering practices: TDD, well-structured and clean code with linting, domain driven design, security-first design (secrets management, rotation, SAST, DAST), comprehensive observability (structured logging, metrics, tracing), containerisation & orchestration (Docker, Kubernetes), automated CI/CD pipelines (Ex: GitHub Actions, Jenkins) AI Assisted Development, Context Engineering & Innovation …/Azure with the ability to architect distributed systems A ‘no-compromise’ attitude with engineering best practices such as clean code, TDD, containerisation, security, CI/CD, scalability, performance and cost optimisation Active user of AI-assisted development tools (Claude Code, GitHub Copilot, Cursor) with demonstrable experience using structured ...

Contract Role – Senior Golang/Java Security Engineer – London/Manchester/Glasgow/Hybrid – 12 months initial – Inside IR35 Role Overview: Job Title: Senior Golang/Java Security Engineer Location: Hybrid – 2 days onsite per week (London/Manchester/Glasgow) Contract Type: Contract Duration: 12 months … Security Engineer experience with: Golang/Go or Java The software security landscape: CVEs, CWEs, common software vulnerability types SAST, SCA, and DAST, including the strengths and weaknesses of each At least one major cloud provider (e.g. AWS, GCP, Azure) REST API design HTTP Authentication Linux ...