76 to 100 of 108 Static Application Security Testing Jobs in England

alert: The DevSecOps architect will enable delivery of: A published, adopted paved-road pipeline with a measurable proportion of the estate migrated onto it. Security controls automated into the pipeline with audit evidence generated automatically. Test automation strategy implementation, with coverage and gate compliance reported per release train. Governed … shift-left testing and service virtualisation to reduce dependency on scarce integrated environments. Security integration: Embed security controls into the pipeline: SAST, DAST, SCA, container and IaC scanning, secrets detection, and SBOM generation. Design the software supply chain security model — artefact provenance, signing, dependency governance, base ...

load for engineering teams, and improve release velocity. What You’ll Do Design, develop, and maintain CI/CD pipelines to automate software builds, testing, and releases. Build and maintain internal tooling to support the software development lifecycle (e.g., code quality analysis, dependency management, automated testing). Collaborate … coding assistants to accelerate authoring of CI/CD pipeline configurations, IaC scripts, and automation tooling. Apply AI-assisted security scanning (SAST) as an automated merge gate across engineering pipelines. Support delivery teams and partners to reduce the complexity of implementing IQGeo solutions. Participate in an on-call rotation. ...

Nothing, a London-based technology company, is seeking an experienced application security leader to own the security lifecycle for our backend services and cloud platforms. You will define … secure development standards and guide teams to build defensible architectures without slowing delivery. Lead threat modelling across authentication, data protection and public interfaces, implement SAST/DAST/SBOM tooling, and drive encryption and runtime defenses. #J-18808-Ljbffr ...

Halfords is seeking an Application Security Lead to own and shape the security capability across a diverse technology estate. You will work with development, architecture, product owners, and third parties to embed secure-by-design … principles and ensure appropriate controls are built into delivery processes. This role requires threat modelling, security design reviews, and hands-on tooling across SAST, DAST, and SCA. #J-18808-Ljbffr ...

Develop and maintain Infrastructure as Code (Terraform, YAML or equivalent). Automate deployment, configuration and operational processes to enable secure and repeatable releases. Embed security controls throughout the software development lifecycle (SDLC). Implement and maintain CI/CD pipelines, including security scanning and compliance checks. Manage platform … teams. Experience deploying and managing infrastructure using Terraform. Experience building and deploying containerised applications. Experience implementing application and infrastructure monitoring solutions. Experience with SAST, DAST and software supply chain security tooling (e.g. SonarQube, Trivy). Experience with on-premises DevOps toolchains and platforms. This role will require ...

comfortable engaging with clients, understanding their needs, and translating them into effective outcomes. The Role: We are seeking a highly skilled and motivated Security Cleared DevOps Engineer to join our team. The successful candidate will be responsible for designing, implementing, and maintaining secure, scalable, and automated infrastructure solutions across … Cloud Build, Artifact Registry and Cloud Deploy. Knowledge of GitOps practices and tools such as Argo CD or Flux. Experience implementing DevSecOps tooling, including SAST, DAST, container image scanning and dependency scanning. Familiarity with policy-as-code, automated compliance and security controls. Experience working in regulated, government, defence ...

youre comfortable engaging with clients, understanding their needs, and translating them into effective outcomes. The Role: We are seeking a highly skilled and motivated Security Cleared DevOps Engineer to join our team. The successful candidate will be responsible for designing, implementing, and maintaining secure, scalable, and automated infrastructure solutions … Cloud Build, Artifact Registry and Cloud Deploy. Knowledge of GitOps practices and tools such as Argo CD or Flux. Experience implementing DevSecOps tooling, including SAST, DAST, container image scanning and dependency scanning. Familiarity with policy-as-code, automated compliance and security controls. Experience working in regulated, government, defence ...

directly into release decisions. Drive shift-left testing, service virtualisation and greater automation across complex engineering environments. Embed automated security controls including SAST, DAST, SCA, container/IaC scanning, secrets detection and SBOM generation into delivery pipelines. Establish policy-as-code, software supply chain security and automated … such as Selenium, Playwright, Cypress, JUnit/pytest, Pact, JMeter or k6. Deep practical experience integrating security controls into CI/CD, including SAST/DAST/SCA, secrets management and software supply chain security. Strong experience across Azure DevOps, GitHub Actions, GitLab and/or Jenkins, alongside Kubernetes ...

Redgate is seeking a senior security engineer to embed security deeply into our product teams, defining requirements across the SDLC and leading threat modelling for new features. You’ll influence architecture, guardrails, and secure … default patterns, balancing risk with delivery velocity. Work across engineering and product squads in a hybrid role based in Cambridge. You’ll champion SAST/DAST, support AI security initiatives, and translate security findings into pragmatic engineering work #J-18808-Ljbffr ...

identifying bottlenecks in the secure software development lifecycle and building automated solutions to resolve them. Architecting and evolving standardized deployment patterns that bake in security, compliance, and observability, allowing product teams to focus on delivering customer functionality. Ensuring high availability, performance, and seamless integration of our self-hosted engineering … modern deployment methodologies (such as GitOps) to ensure declarative, reproducible, and audited state management across all environments. Owning automated security tooling (e.g. SAST, DAST, dependency scanning, container scanning, and secrets detection) to deliver security audit evidence for the platform Arondite aims to bring together individuals from diverse backgrounds ...

properly: IAM, service accounts, logging and org policy. AWS and Azure familiarity helps You can read code well enough to judge whether a SAST finding is real You’re genuinely fluent with AI tooling and you build with it rather than around it You write clearly, because most of what … properly: IAM, service accounts, logging and org policy. AWS and Azure familiarity helps You can read code well enough to judge whether a SAST finding is real You’re genuinely fluent with AI tooling and you build with it rather than around it You write clearly, because most of what ...

starting with the most painful parts: procurement – where a single purchase can drag on for months, trigger 50+ emails , and pull in Finance, Legal, Security, and IT just to get something approved. We’ve raised $75M from Khosla Ventures, Insight Partners, and Accel to change that. Our AI-native … Security Roadmap, leading implementations and experiments to level up Omnea’s security posture. Own Security Tooling. From safe-chain plugins to SAST/DAST tooling, we want someone who’s keen to get stuck in, onboard, and evolve our tooling to ensure our posture stays ...

Config as Code: Terraform, Ansible, Bicep/ARM, Helm, Kustomize; GitOps via Argo CD and Flux Cloud & Orchestration: AWS, Azure, Docker, Kubernetes AI Inference & Application Infrastructure: Frontier and open-weight models via Anthropic, Azure OpenAI, and Amazon Bedrock; model gateways and routing, retrieval and hybrid search, document ingestion, tool … Elastic/ELK, OpenTelemetry, including GenAI tracing and token, latency, and cost telemetry Platform Security & Policy-as-Code: HashiCorp Vault, OPA/Conftest, SAST/DAST Developer Portal & Self-Service: Internal developer portal, CLIs/SDKs, and APIs Responsibilities include: Developer Experience & Self-Service Enablement Build and maintain self ...

Senior DevOps Engineer Location: Newcastle Upon-Tyne Please Note: Any offer of employment is subject to satisfactory BPSS and SC security clearance which requires 5 years continuous UK address history (typically including no periods of 30 consecutive days or more spent outside of the UK) Accenture is a leading … pipelines supporting frequent, reliable deployments. Drive cloud cost optimisation and resource right‐sizing. Experience implementing security scanning in CI/CD with SAST and DAST Experience with deployment strategies such as Blue/Green or Canary Releases Proven track record of applying analytical and creative thought that translate into ...

patterns. Implement and maintain DevSecOps practices using Azure DevOps, building CI/CD pipelines with automated quality gates such as unit and integration tests, SAST/DAST where applicable, and dependency scanning. Drive observability and production excellence by implementing logging, metrics, and tracing, creating actionable alerts, defining SLOs and SLIs … maintaining high‐quality pull requests. Solid understanding of security, reliability, and operability in a regulated or enterprise environment. experience applying DevSecOps practices including SAST and DAST, and dependency scanning within CI/CD pipelines. Practical knowledge of modern identity and access management, including OAuth2 and OIDC. Additional Skills & Qualifications ...

building and publishing reusable packages, templates, or internal libraries — with proper versioning, documentation, and consumption patterns Strong understanding of security-first engineering: encoding SAST/DAST integration, secret management, and policy-as-code into central platform assets Ability to work autonomously on complex technical problems while collaborating closely with … skills, subagents, and MCP servers that become the standard AI tooling distributed to all client teams Implement golden path templates — project scaffolding, pipeline configuration, security guardrails, AI-native workflow defaults, etc. Maintain and evolve how platform assets reach engineering teams: versioning, distribution across the appropriate channels (version-controlled component ...

DevOps Engineer Location: Newcastle Upon Tyne Please Note: Any offer of employment is subject to satisfactory BPSS and SC security clearance which requires 5 years continuous UK address history (typically including no periods of 30 consecutive days or more spent outside of the UK) Accenture is a leading global … Vault, AWS Secrets Manager) Maintain scalable CI/CD pipelines supporting frequent, reliable deployments. Experience implementing security scanning in CI/CD with SAST and DAST Experience with deployment strategies such as Blue/Green or Canary Releases Proven track record of applying analytical and creative thought that translate ...

environment As a DevOps Engineer, you will: Work as part of a DevOps team to deliver environments and tools to support the development and testing of features by Accenture and Client Teams. Setup and configure tools such as Gitlab, Jenkins, SonarQube and performance/security/resilience testing … apart: Experience with DevSecOps practices, including Secrets management (e.g. HashiCorp Vault, AWS Secrets Manager) Experience implementing security scanning in CI/CD with SAST and DAST Experience with deployment strategies such as Blue/Green or Canary Releases Proven track record of applying analytical and creative thought that translate ...

have raised $60M in Series C funding from Wellington Management, CRV, Next47 and Y Combinator. About the role We're looking for a Lead Security Engineer to own and mature how Encord secures its people, identities, devices, and the SaaS and AI tools we run the business on. … remediation tracking, and SLAs. Experience building and improving detection and monitoring, centralising logs into a SIEM and defining meaningful alerts. Experience implementing and tuning SAST, DAST, SCA, and secrets scanning in CI/CD pipelines. Experience coordinating external penetration tests and bug reports, and driving fixes to closure with engineering ...

Security Architect L1 contractor to join our Sheffield-based security engineering team. You will embed security controls into DevSecOps workflows, integrating SAST into AI-generated code and securing CI/CD pipelines. The role focuses on implementing secrets scanning, secure code reviews, and security telemetry within … Claude Code environments, collaborating with engineering, security, and operations to protect client systems. #J-18808-Ljbffr ...

improving the way software is built, tested and deployed. You will work closely with development, infrastructure and cloud teams, helping to improve automation, reliability, security and overall engineering efficiency. What you will be doing Design, build and maintain Azure DevOps CI/CD pipelines across multiple environments. Automate build … remediate vulnerabilities across application code, CI/CD pipelines and Azure infrastructure. Integrate security tooling into development and deployment pipelines, including SAST, DAST and dependency scanning. Manage patching and updates across container images, Kubernetes components and Azure resources. Contribute to cloud platform governance, security standards and continuous ...

building and publishing reusable packages, templates, or internal libraries - with proper versioning, documentation, and consumption patterns Strong understanding of security-first engineering: encoding SAST/DAST integration, secret management, and policy-as-code into central platform assets Ability to work autonomously on complex technical problems while collaborating closely with … skills, subagents, and MCP servers that become the standard AI tooling distributed to all client teams Implement golden path templates - project scaffolding, pipeline configuration, security guardrails, AI-native workflow defaults, etc. Maintain and evolve how platform assets reach engineering teams: versioning, distribution across the appropriate channels (version-controlled component ...

maintainable and scalable standard Implement and oversee platform-level improvements and tools focused on performance, scalability and resilience Manage backend cybersecurity, ensuring compliance through SAST, SCA and DAST scans Develop and maintain monitoring solutions, tracking and delivering cost optimisation initiatives Provide infrastructure input into development planning and architecture discussions Collaborate … DevOps desirable) Familiarity with monitoring, automation and containerisation/orchestration (Docker/Kubernetes) Strong collaboration and problem‐solving abilities Knowledge of cybersecurity practices, including static and dynamic scanning standards Familiarity with modern DevOps pipelines and platform architecture Awareness of platform‐level monitoring, benchmarking and automation principles Degree in Computer ...

functional requirements. Operating at a strategic level, you’ll mentor engineers, build strong relationships with senior stakeholders, and influence the adoption of forward-thinking testing practices (such as AI-assisted testing) across our entire QA practice. Key aspects of the role include: Squad Leadership & Strategy: Partnering with cross … policy validation, rate limiting, and OAuth 2.0/Entra ID JWT authentication). Experience embedding DevSecOps and security quality gates (such as SonarQube SAST, DAST, or container scanning) within CI/CD pipelines. Exposure to service virtualisation (e.g., WireMock or policy stubs) and synthetic test data management to ensure ...

Orchestration). CI/CD & DevSecOps: GitLab CI/CD pipelines, on-premises GitLab server, GitLab Runner fleet, and shift-left security (SCA, SAST, DAST). Containers & GitOps: Docker-Compose on EC2, EKS, and ArgoCD. Artifact Management: Support for self-managed JFrog Artifactory & Xray. Scripting: Developing automation scripts, Docker ...