1 to 25 of 108 Static Application Security Testing Jobs in England

have a background in Application Security, DevSecOps or Product Security , with hands-on experience embedding application security into the SDLC If so, this could be an opportunity worth considering. Join a well-established health research organisation and charity supporting large-scale medical research. You will … controls and cloud security governance. Experience with KQL. Experience securing APIs, internet-facing services, Kubernetes, preferably AKS, and containerised environments. Experience with SAST, DAST, IAST and SCA. Knowledge of security automation, security-/policy-as-code and secure engineering practices. Familiarity with GitHub and GitHub Actions. ...

tooling and capabilities. Provide technical leadership for secure development technologies including Software Composition Analysis (SCA), Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), container security, code signing and secret detection. Integrate security tooling into CI/CD pipelines … security programmes and tooling. Strong knowledge of application security practices, secure coding principles and vulnerability management. Experience working with SCA, SAST, DAST and related application security technologies. Strong experience integrating security into CI/CD pipelines and DevSecOps environments. Experience with automation ...

tooling and capabilities. Provide technical leadership for secure development technologies including Software Composition Analysis (SCA), Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), container security, code signing and secret detection. Integrate security tooling into CI/CD pipelines … security programmes and tooling. Strong knowledge of application security practices, secure coding principles and vulnerability management. Experience working with SCA, SAST, DAST and related application security technologies. Strong experience integrating security into CI/CD pipelines and DevSecOps environments. Experience with automation ...

tooling and capabilities. Provide technical leadership for secure development technologies including Software Composition Analysis (SCA), Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), container security, code signing and secret detection. Integrate security tooling into CI/CD pipelines … security programmes and tooling. Strong knowledge of application security practices, secure coding principles and vulnerability management. Experience working with SCA, SAST, DAST and related application security technologies. Strong experience integrating security into CI/CD pipelines and DevSecOps environments. Experience with automation ...

including automated testing and policy enforcement Design and implement application security controls, including: Static Application Security Testing (SAST) Dynamic Application Security Testing (DAST) Software Composition Analysis (SCA)/dependency scanning Secrets and credentials scanning Work with engineering teams to ensure … integrating DevSecOps tooling within CI/CD environments (e.g. GitLab pipelines) Experience with application security testing tools and practices, including: SAST, DAST, SCA/dependency scanning andSecrets/credentials scanning. Experience contributing to security design reviews for applications and APIs Experience supporting or participating in penetration ...

including automated testing and policy enforcement Design and implement application security controls, including: Static Application Security Testing (SAST) Dynamic Application Security Testing (DAST) Software Composition Analysis (SCA)/dependency scanning Secrets and credentials scanning Work with engineering teams to ensure … integrating DevSecOps tooling within CI/CD environments (e.g. GitLab pipelines) Experience with application security testing tools and practices, including: SAST, DAST, SCA/dependency scanning and Secrets/credentials scanning. Experience contributing to security design reviews for applications and APIs Experience supporting or participating ...

including automated testing and policy enforcement Design and implement application security controls, including: Static Application Security Testing (SAST) Dynamic Application Security Testing (DAST) Software Composition Analysis (SCA)/dependency scanning Secrets and credentials scanning Work with engineering teams to ensure … integrating DevSecOps tooling within CI/CD environments (e.g. GitLab pipelines) Experience with application security testing tools and practices, including: SAST, DAST, SCA/dependency scanning and Secrets/credentials scanning. Experience contributing to security design reviews for applications and APIs Experience supporting or participating ...

Application Security Engineer - Manchester (3 days per week onsite) As an Application Security Engineer the focus of your role is to safeguard software applications from cyber threats by embedding security into every phase of the development lifecycle. You will bridge the gap between development … solutions, utilising both grey box and black box methodologies. Grey Box Testing: Conduct Static Application Security Testing (SAST), dependency scanning, secrets scanning, and configuration reviews. Black Box Testing: Perform Dynamic Application Security Testing (DAST), API fuzzing, authentication testing, and rate ...

Application Security Engineer - Manchester (3 days per week onsite) We are Oliver James, a global recruitment & consulting group that has been introducing talented people to great organisations since 2002. As a business, we are achieving year-on-year growth of 30%, operate across 30 countries and open … solutions, utilising both grey box and black box methodologies. Grey Box Testing: Conduct Static Application Security Testing (SAST), dependency scanning, secrets scanning, and configuration reviews. Black Box Testing: Perform Dynamic Application Security Testing (DAST), API fuzzing, authentication testing, and rate ...

findings and work with developers on remediation. Monitor and troubleshoot security tooling and CI/CD pipelines, investigating failures and root causes. Use SAST, DAST, SCA and other automated security tooling to support secure software development. Conduct threat modelling and secure design reviews for new features, services … code and interpreting findings from security tools. Worked directly with software engineers to prioritise and remediate security issues. Hands‐on experience with SAST, DAST, SCA or similar security tooling within CI/CD environments. Practical knowledge of threat modelling and secure software development. Enough coding or scripting ...

security design reviews for new applications, APIs, integrations, and significant technology changes Select, implement, and manage application security tooling including SAST, DAST, SCA, and secrets detection platforms Review security testing results, assess risk, and provide clear recommendations to engineering teams on remediation and resolution activities … principles, secure coding practices, and common vulnerability classes including the OWASP Top 10 Hands‐on experience with application security tooling including SAST, DAST, SCA, secrets management, and vulnerability assessment tools Experience integrating security controls into CI/CD pipelines and cloud‐native development environments Strong understanding ...

place Assess the security posture of our applications and APIs through code reviews and static and dynamic security testing (SAST/DAST), and manage third-party penetration tests, from scoping with engineering teams and architects through to tracking remediation Strengthen the security … secure approaches to authentication and authorisation, such as OAuth 2.0 and OpenID Connect Hands‐on experience with security testing tools such as SAST, DAST and vulnerability scanning solutions, ideally including mobile app security testing and API security testing tools Practical experience with threat modelling ...

Application Security Manager (Product Security) Salary: Circa £100,000 Locations: Bristol, Birmingham, Norwich, York, Leeds, Sheffield or Leatherhead Are you someone who is passionate about building secure products and embedding security into the way technology is delivered? We're looking for an experienced security leader … security architecture reviews. Hands-on knowledge of Product Security and Application Security tooling, including leveraging AI for AppSec alongside traditional SAST, DAST, SCA, Infrastructure as Code (IaC) scanning and secrets management/scanning. Understanding of cloud-native technologies, CI/CD pipelines, automated security controls ...

CISO Bring consistent security tooling into every pipeline, including credential scanning, software composition analysis (SCA), static application security testing (SAST) and dynamic application security testing (DAST) Configure that tooling to our standards so it helps engineers rather than creating noise they learn … coding tools in your day-to-day work Fluent written and spoken English Nice to haves Experience introducing security tooling, such as SAST, DAST, SCA or secret scanning, into an enterprise DevOps experience in a regulated enterprise, such as financial services Experience building AI agents or LLM-based automation ...

asthe function matures. Key Responsibilities Vulnerability Management & Security Tooling Support the rollout and operation of application security tooling across engineeringrepositories, including SAST, SCA and secrets detection. Triage and classify security findings across repos, driving remediation of the secrets backlog Manage the day-to-day operation … recommendations to engineering teams. Working proficiency in Python (able to read, modify, and write scripts used for internal tooling) Practical experience with DAST/SAST/SCA/secrets scanning tools (Aikido, Snyk, Semgrep,Checkmarx, or similar) Experience with Prisma Cloud or a comparable cloud-native security platform Comfortable ...

client is a global legal and business information company. Senior Cloud & AI Security Enablement Engineer Enthusiastic about securing cloud platforms and AI-driven solutions in a rapidly evolving technology landscape? Do you enjoy designing security frameworks, enabling secure development practices, and partnering with engineering teams to build resilient … , vulnerability management, and secure CI/CD. Experience with infrastructure-as-code and cloud security tooling such as CSPM, CNAPP, IaC scanning, SAST, SCA, secrets scanning, or policy-as-code. Ability to translate security standards and architecture requirements into practical implementation patterns. Familiarity with generative ...

Security Design Engineer (ServiceMesh) - 6 Month Contract - INSIDE IR35 - London, Sheffield, Manchester, Birmingham - No Sponsorship Available Project Overview We are looking for an experienced Network Security Architect/Security Design Architect to support a major security transformation programme within a complex enterprise environment for a Tier … Software Development Lifecycle (SDLC) Secure-by-design principles Application Security API security Microservices security CI/CD pipelines Threat modelling SAST/DAST/SCA Authentication and authorisation PKI/certificate management Secrets management The individual does not need to be a career Software Engineer ...

able to interact and collaborate in person. About Engineering at Engine by Starling - https://enginebystarling.com/careers/engineering/As a Security Engineer at Engine, you'll be working on helping to keep our infrastructure secure and compliant and our staff safe and productive. … lifecycle Experience performing secure code reviews and security approvals, including the use of static and dynamic application security testing (SAST/DAST) tools Experience in cryptography management and enhancements Relevant security certifications such as ISC2 CC, CISSP, CCSP, CISM, AWS Security Specialty ...

application security. Carry out ongoing manual security assessments, coordinate third-party engagements where needed, and turn findings into clear, prioritised actions. Review SAST, DAST and SCA outputs, driving remediation through to closure and keeping tracking, ownership and prioritisation firmly on course. Provide on-demand application security … GitHub Actions, with the confidence to bring security into delivery without slowing everyone down. Practical experience with security tooling and practices including SAST, DAST, SCA, container scanning, vulnerability management, SBOM tooling such as CycloneDX, IaC security across Terraform, Bicep, Ansible and tools such as Trivy, plus Policy ...

considerations shape product decisions from day one—not after the fact Own and evolve our application security program including establish and maintain SAST/DAST scanning in CI/CD pipelines, conducting security code reviews for critical changes, and building automation that catches vulnerabilities before they reach … read and review code across multiple languages, understanding both business logic and security implications Knowledge of security tools and methodologies including SAST/DAST solutions, vulnerability management platforms, security testing frameworks, and DevSecOps practices—you know which tools to use and when automation beats manual review ...

able to interact and collaborate in person. About Engineering at Engine by Starling — https://enginebystarling.com/careers/engineering/As a Security Engineer at Engine, you'll be working on helping to keep our infrastructure secure and compliant and our staff safe and productive. … lifecycle Experience performing secure code reviews and security approvals, including the use of static and dynamic application security testing (SAST/DAST) tools Experience in cryptography management and enhancements Relevant security certifications such as ISC2 CC, CISSP, CCSP, CISM, AWS Security Specialty ...

considerations shape product decisions from day one—not after the fact Own and evolve our application security program including establish and maintain SAST/DAST scanning in CI/CD pipelines, conducting security code reviews for critical changes, and building automation that catches vulnerabilities before they reach … both technical and non-technical audiences—you can explain why something matters and motivate teams to actionKnowledge of security tools and methodologies including SAST/DAST solutions, vulnerability management platforms, security testing frameworks, and DevSecOps practices—you know which tools to use and when automation beats manual ...

TREE business. This is a hands-on role with a wide range of responsibilities including monitoring, detection, response and remediation of security risks, threats and vulnerabilities. The ultimate goal is to holistically improve Y TREE’s security posture to meet the demands of its clients and its regulators. … enhance Y TREE’s internal capabilities for routine security testing activities, and monitor/enhance security on CI/CD pipelines (SAST, DAST and SCA testing). Risk & Remediation Tracking: Maintain a register of security risks and remediations; work closely with Technology, Risk, and Compliance ...

Surface Management, this leader owns the strategy, execution and evolution of enterprise exposure management capabilities spanning vulnerability operations, exposure validation, aligning with secure development (SAST/SCA/DAST) and risk intelligence, with a relentless focus on prioritization, business impact, mitigation strategies and measurable risk reduction. The role partners closely … resolution. Secure Development & Software Supply Chain (Partner to Application Security) Partner with Application Security and Business Technology leadership to embed SAST, DAST and SCA coverage and the broader application security toolchain (e.g., secrets detection, container and infrastructure-as-code scanning) - contributing risk-based prioritization ...

grow your career. Engineering at Brex Engineering at Brex is about building systems that scale with speed and intention. Our teams span Software, Data, Security, and IT, and operate with high autonomy and deep collaboration. We tackle hard technical problems, own our outcomes, and push for excellence at every … insecure designs, work with engineering and product to design secure product features Maintain and build internal tools to automate security efforts, perform SAST and DAST testing of the Brex platform, and support secure development practices Build and contribute to a culture of collaborative security excellence through technical ...