26 to 50 of 54 Dynamic Application Security Testing Jobs in England

## .Cyber Security Business Information Officer (BISO) page is loaded## Cyber Security Business Information Officer (BISO)locations: Oxford: Londontime type: Full timeposted on: Posted Todayjob requisition id: R112581**About Our Team**The Business Information Security Office (BISO) team partners with business, product, and technology leaders to deliver … security experience (AWS, Azure, GCP; secure SDLC).* Hands‐on knowledge of security tooling (SIEM, SOAR, EDR/XDR, CSPM, SAST/DAST).* Experience embedding security into CI/CD pipelines and DevSecOps practices.* Proven capability in risk assessments, threat modeling, and control gap analysis.* Experience ...

600+ leading international and independent schools), SchoolsBuddy (co-curricular & activity management), and Vectare (school transport management). We are looking for a Lead Security/DevSecOps Engineer on the Product Engineering team, with a great opportunity to be self-directed and level up security practices and capabilities. … SDLC (shift‐left): security requirements, design reviews, guardrails, and coding standards for an AI engineering reality. Select, deploy, and operationalise AppSec tooling (SAST, DAST, SCA/dependency and secrets scanning) integrated into CI/CD. Implement and operationalise secrets management: detection, rotation, and vault integration across CI/ ...

Internet of Things. Reply’s services include Consulting, System Integration, and Digital Services. Role Overview: We are looking for a hands-on Cloud Security Engineer to join our growing cybersecurity practice. This is an engineering-first role so we are looking for someone who builds, configures, and secures cloud … Terraform), including reusable, security-hardened modules and reference patterns Integrate security tooling and automated controls intoCI/CD pipelines, including SAST/DAST tooling, secrets scanning, and policy-as-code enforcement Conduct threat modelling exercises, cloud security posture reviews, and risk assessments for cloud platforms and workloads ...

scalable, accurate, and enterprise-grade integrations. Our platform combines 25,000 pre-mapped actions on 200 connectors, an AI-powered integration development toolkit, plus security by design: a real‐time architecture, managed authentication and permissions, and end‐to‐end observability. Join us on our fast trajectory to build … Lambda, KMS, GuardDuty, Security Hub, Inspector), Cloudflare (Workers, WAF, Zero Trust) IaC: AWS CDK, Terraform Security tooling: Aikido (SAST, DAST, container scanning, pen testing), 1Password, GitHub (org‐level enforcement, Advanced Security) Compliance & ops: Drata, Iru, EasyLlama Observability & IR: Datadog, Sentry, Logfire, Incident.io Languages: TypeScript (Node.js), Python ...

Architect experts within the Enterprise Technology team, part of Bain’s digital capabilities practice. This is a multidisciplinary group that helps clients modernise their security strategy, architecture, and programmes. The work centres on aligning cybersecurity with business goals, and in practice that means designing enterprise-wide security architectures … security work. Experience managing or mentoring junior cyber staff in a professional services environment. DevSecOps experience: implementing security gates (SAST/DAST) into CI/CD pipelines. Infrastructure as Code (Terraform, Bicep) and scripting (PowerShell, Python) for security automation. #J-18808-Ljbffr ...

Head of Security Engineering (DevSecOps & CISO) ABOUT the company the company is a prediction market exchange for sports and political trading, having handled over $50 billion in volume since 2010. We're upending sports betting with the fairest prices, the best technology, and a superior customer experience — powered … security incidents, including post-incident root cause analysis and corrective actions. Work with Engineering teams to build security into the SDLC — SAST, DAST, SCA, container/IaC scanning in CI/CD — without becoming a delivery bottleneck Implement controls across AWS, Kubernetes, containers, and IaC, hardening identity, secrets ...

appropriate Software Development Life Cycle (SDLC) and Deployment (DEPL) process when delivering changes to Cyber applications. Role Purpose You'll help Cybersecurity engineering and application teams meet the Bank's software delivery requirements by driving the adoption of SDLC and Deployment (DEPL) Controls across both internally developed applications … with QA/test management tools (e.g., qTest, Tricentis, Zephyr). Knowledge of application security testing/scanning concepts (SAST/DAST/MAST) and vulnerability management. Experience working with Jira/Confluence/ServiceNow/Excel Power Query/Google Data Studio. Ways of Working Comfortable ...

source control and continuous integration tools as part of a team Security Practices: An understanding of application security controls like SAST, DAST, Penetration Testing, etc. Quality Focus: A DevSecOps mindset with focus on delivering value quickly and frequently What will you be doing? Deep Technical Expertise … entity framework code first data with Azure SQL or a NoSQL Databases Enterprise Expertise: Build resilient Microservice integrated via a Cloud message bus Security Practices: Comply with secure coding & infrastructure standards and policies Continuous Delivery: Assist with supporting your application using modern DevSecOps tools Quality Focus: Continuously improve ...

measures. Relevant industry certification (IIBA certification, ITIL, Agile/SAFe ). Knowledge of application security testing/scanning concepts (SAST/DAST/MAST) and vulnerability management. Experience working with Jira/Confluence/ServiceNow/Excel Power Query/Google Data Studio. ...

Tripadvisor Experiences in London is seeking a Senior Application Security Engineer to lead security across our platform. You will design and implement advanced security measures, mentor junior engineers … shape security practices across products and infrastructure. The role requires hands-on expertise in threat modelling, vulnerability assessments, secure coding, SAST/DAST, and cloud security, with a track record of guiding teams and collaborating with product and engineering to embed #J-18808-Ljbffr ...

Senior DevSecOps Architect, you’ll collaborate with top cybersecurity and engineering talent, solving complex challenges and enabling safe, secure innovation. Your passion for security and drive to make a real impact are valued here. Grow your skills in a dynamic environment designed for achievers. Help us build products … Hands‐on experience in integrating a comprehensive DevSecOps tooling stack, including SAST, SCA, RASP, IAST, container and image scanning, secrets detection, and AI‐powered DAST solutions. Experience implementing and managing SBOMs to track internal, third‐party risk and supply chain security. Ability to solve design and functionality problems independently. Strong ...

Privacy Notice. This is a hybrid opportunity requires 3 days/week onsite in London. Overall profile we're hiring Senior DevSecOps Engineer Cloud Security Engineer DevSecOps Architecture Security Platform Engineer Ideal candidate summary: Someone with … 12+ years of experience who has: Deep DevSecOps implementation experience using AI GCP and Kubernetes expertise CI/CD security implementation SAST, DAST, SCA, SonarQube and Checkmarx hands-on experience Vulnerability management ownership Container and cloud security Security automation and compliance Ability to answer deep technical questions ...

patterns, zero-trust principles, and least-privilege access across AWS, Azure, or GCP environments. Embed security into CI/CD pipelines , integrating SAST, DAST, SCA, and infrastructure-as-code scanning so vulnerabilities are caught before they ship, not after. Support threat modelling and design reviews with engineering teams, using … Azure, or GCP, including IAM design, network security, and secrets management. Experience embedding security tooling into CI/CD pipelines (SAST, DAST, SCA, container/IaC scanning). Proficiency in at least one scripting/programming language (Python, Go, or similar) for building security automation and tooling. ...

Docker, etc), and cloud-based architectures. Knowledge of automated code scanning and security testing throughout the software development lifecycle (SCA, SAST, DAST, etc.), implementing IT security best practices (e.g., Azure Key Vault, Azure Active Directory). Expertise and experience working with AI to accelerate client delivery – GitHub … Claude preferred Microsoft Certified: DevOps Engineer Expert (AZ-400) About you Characteristics of who we are looking for: Be a leader and manage a dynamic team to drive project success and foster collaboration Be an adviser to emerging technologists on career growth opportunities, as well as provide performance reviews ...

love to hear from you. About AppCheck: AppCheck helps organisations identify and manage cyber risk across web applications, APIs and infrastructure. AppCheck develops information security software that provides clients with vulnerability detection and reporting services for web applications and hosted infrastructure. We provide unparalleled detection across … context. Prior experience in the cybersecurity industry in either a technical or commercial capacity; experience with automated security testing technologies such as DAST/SAST is an advantage but not a must. Experience of working with SaaS/reseller networks. Experience of driving product delivery for users ...

wide architectural vision across software systems and applications. This role ensures that technology solutions align with business needs while maintaining the highest standards of security, performance, scalability, and quality. As a trusted advisor to senior leadership, the role influences long‐term technology strategy, leads complex transformation initiatives (e.g., Micro … OWASP Top 10, WCAG, OAuth2, MFA, and secure identity patterns. Quality & Assurance: Proficient in unit testing frameworks; governance and execution of SAST, DAST, SCA, and penetration testing processes. #J-18808-Ljbffr ...

Consultant role is for a practical hands-on engineer who can set up projects, automate pipelines, support cloud environments and collaborate with development, operations, security and client teams to improve delivery speed, resilience and control. Key responsibilities Set up and configure new projects in Azure DevOps, GitHub, GitLab … deployment troubleshooting PowerShell, Bash, Python or Azure CLI for automation, remediation, deployment support and operational tooling Security & DevSecOps SonarQube or similar, SAST/DAST/SCA concepts, secrets management, policy-as-code awareness and secure SDLC practices Monitoring & operations Azure Monitor, Application Insights, Log Analytics, Grafana, Prometheus ...

DevSecOps Engineer Reading (Hybrid working available) Active SC Clearance required Up to £71 p/h Inside IR35 We're looking for an experienced security cleared Senior DevSecOps Engineer to play a key role in delivering secure digital platforms for high-profile Defence and Aerospace programmes. You'll lead … Templates or Ansible) Experience securing Kubernetes and containerised environments Knowledge of Zero Trust Architecture, IAM, RBAC and Privileged Access Management (PAM) Experience implementing SAST, DAST, SCA, container scanning and secrets management Strong scripting skills with PowerShell, Python or Bash Experience with SIEM, SOAR, logging and observability platforms Good understanding ...

there is a genuine use case. Production & Engineering You'll own solutions all the way into production, including: Infrastructure and deployment. AI evaluation and testing frameworks. MCP server implementation. Cloud deployment across AWS, Azure, Cloudflare or Vercel . Docker, Kubernetes and/or serverless architectures. TDD and robust software … engineering practices. Security, secrets management and SAST/DAST. Structured logging, monitoring, metrics and tracing. Automated CI/CD using tools such as GitHub Actions or Jenkins . Performance, scalability and cost optimisation. Operational ownership of the systems you build. Leadership & Mentoring Although this is an individual contributor role ...

maintain cyber defence use cases, correlation rules, and attack chain detections across disparate systems. Design, implement, and integrate SIEM solutions—particularly Microsoft Sentinel—into Security Operations. Perform threat hunting across endpoints, identities, networking, cloud, and collaboration platforms in the Microsoft ecosystem. Handle L2-level incidents leveraging Microsoft Sentinel … modelling, and vulnerability remediation within Azure-hosted environments. Create, run, and troubleshoot Azure Logic Apps, playbooks, and Sentinel automation components. Collaborate with business and security stakeholders to define and enhance security standards and improve security posture. . Technical Expertise Proven experience with Microsoft Sentinel (architecture, deployment, analytics ...

identifying bottlenecks in the secure software development lifecycle and building automated solutions to resolve them. Architecting and evolving standardized deployment patterns that bake in security, compliance, and observability, allowing product teams to focus on delivering customer functionality. Ensuring high availability, performance, and seamless integration of our self-hosted engineering … modern deployment methodologies (such as GitOps) to ensure declarative, reproducible, and audited state management across all environments. Owning automated security tooling (e.g. SAST, DAST, dependency scanning, container scanning, and secrets detection) to deliver security audit evidence for the platform Arondite aims to bring together individuals from diverse backgrounds ...

Config as Code: Terraform, Ansible, Bicep/ARM, Helm, Kustomize; GitOps via Argo CD and Flux Cloud & Orchestration: AWS, Azure, Docker, Kubernetes AI Inference & Application Infrastructure: Frontier and open-weight models via Anthropic, Azure OpenAI, and Amazon Bedrock; model gateways and routing, retrieval and hybrid search, document ingestion, tool … OpenTelemetry, including GenAI tracing and token, latency, and cost telemetry Platform Security & Policy-as-Code: HashiCorp Vault, OPA/Conftest, SAST/DAST Developer Portal & Self-Service: Internal developer portal, CLIs/SDKs, and APIs Responsibilities include: Developer Experience & Self-Service Enablement Build and maintain self-service tooling, CLIs ...

that moves fast, takes real ownership, and holds itself to a high standard of rigour and integrity. The Role You will own the entire security stack at Intropic. Cloud, endpoints, detection and response, compliance, IT, and the security of our growing AI agent usage all sit with you. … clusters specifically. Experience using AI agents for production security workflows. Ability to use SQL for detection and incident investigation. Having rolled out DAST or SAST in a production environment. #J-18808-Ljbffr ...

Oxford Dynamics is at an inflection point. We operate in some of the most complex and high-stakes environments in the world defence - national security, AI and robotics. The decisions we make now will define not just how fast we grow, but who we become. You will work closely … Cloud, CloudFormation), containerisation (Docker, Docker Compose) and Linux systems. Solid CI/CD engineering with GitHub Actions and Argo CD. Experience integrating SAST and DAST best practices. Scripting in Bash and Python or Go for automation Demonstrated success delivering cloud cost-optimisation and high-security solutions for enterprise clients ...

secure AWS cloud platforms using Infrastructure as Code. Developing robust CI/CD pipelines to enable faster, safer software delivery. Embedding DevSecOps principles and security tooling throughout the development lifecycle. Improving platform resilience, monitoring, observability and operational performance. Driving automation and adopting AI-assisted engineering to improve efficiency. Working … following: AWS Terraform Kubernetes (EKS would be advantageous) CI/CD pipelines and deployment automation Docker, containers and Linux DevSecOps, SAST/DAST and cloud security best practices Monitoring, logging and observability platforms Agile software delivery environments Why join? Build technology that has a genuine positive impact on society. ...