1 to 25 of 36 Dynamic Application Security Testing Jobs in London

have a background in Application Security, DevSecOps or Product Security, with hands-on experience embedding application security into the SDLC If so, this could be an opportunity worth considering. Join a well-established health research organisation and charity supporting large-scale medical research. You will … controls and cloud security governance. Experience with KQL. Experience securing APIs, internet-facing services, Kubernetes, preferably AKS, and containerised environments. Experience with SAST, DAST, IAST and SCA. Knowledge of security automation, security-/policy-as-code and secure engineering practices. Familiarity with GitHub and GitHub Actions. Experience ...

outcomes across both internal IT systems and customer-facing solutions. Strong knowledge of application security principles and practices Experience with SAST, DAST and software composition analysis tools Knowledge of secure coding practices across languages such as Java, C, C++ Experience with CI/CD pipelines and DevSecOps … control environments Familiarity with NIST frameworks, particularly NIST CSF and NIST SSDF, demonstrated through training or experience Relevant vendor certifications linked to SAST, DAST, SCA or pipeline tooling where used in the organisation Evidence of continuous professional development in secure coding, software assurance or emerging technologies such as AI security ...

level supporting multiple workstreams and release pipelines. Ability to oversee the delivery and operation of application and container security services, including SAST, DAST, SCA, RASP, perimeter scanning, and associated security testing capabilities. Experience of supporting Red Team and penetration testing activities, including test planning, scheduling … Penetration Testing Veracode & SonarQube ATS Optimization Keywords Hard Skills Application Security Vulnerability Management Security Testing Secure Coding Practices SAST DAST SCA RASP Perimeter Scanning Risk-Based Prioritization Soft Skills Leadership Coaching Stakeholder Reporting Collaboration People Management Industry Keywords Application Security Strategy Security ...

implement, and communicate vulnerability mitigation strategies Handle externally reported vulnerabilities Drive the static and dynamic application security testing (SAST/DAST) programme Advise development teams on secure SDLC best practices What we are looking for: 5+ years' experience as an Information Security Researcher or Engineer … risks, and cloud-native application architecture Proven experience in application penetration testing and security code review Experience with SAST, DAST, IAST, and SCA tools and processes Solid understanding of CI/CD pipelines and DevSecOps principles This is an exciting opportunity for an experienced Senior ...

measures to prevent security incidents - Implement and manage SAST/SCA tooling across application repositories to identify source code risks - Scale automated DAST solutions across applications to maximise testing coverage - Carry out penetration testing on internally developed applications Required Skills/Experience: - Experienced in application security focussing on red, blue or purple team activities - Experienced in software development or experience contributing to Open-Source projects - Experienced with DAST tools such as Burp Suite, OWASP Zap or similar - Experience with SAST/SCA tools such as Snyk, Veracode, Checkmarx or similar - Proficient ...

Tripadvisor, Inc. (Nasdaq: TRIP), include a portfolio of travel brands and businesses, including Tripadvisor, Viator, and TheFork. We are looking for an experienced Senior Application Security Engineer to join our growing team at Tripadvisor Experiences. In this role, you will take a lead position in securing the applications … , including expertise in secure coding practices, threat modelling, vulnerability assessments, and incident response. Hands-on experience with security testing tools (SAST, DAST) and their integration into development pipelines. Strong understanding of advanced security concepts such as encryption, secure software design, identity management, and API security. Experience ...

Learn more at the company.com. Role Overview This is a transformational role. The Director is expected to lead the organization from fragmented, task-based security handling into a mature, agile program — modernizing how security is embedded across engineering, redefining operational efficiency, and setting how the cybersecurity function operates … across application, cloud, and infrastructure layers — risk-based prioritization, engineering ownership models, and remediation SLAs. Oversee application security testing — SAST, DAST, SCA — and the offensive security program including pen testing and red team engagements. Own cloud security posture across the estate — CSPM, container ...

Security/Python/DevSecOps/Azure/Security Engineer Role: Senior Application Security Engineer Remote UK | 1 day per week in London Salary: Up to £85,000 We’re looking for a Senior Application Security Engineer to join our security team … secure applications and platforms. The role Embed security into the SDLC and CI/CD pipelines, including GitHub Actions. Implement and operate SAST, DAST, IAST and SCA tooling. Secure applications, APIs, Kubernetes and containers. Develop security and policy-as-code capabilities using tools such as OPA. Help secure ...

product decisions from day one—not after the fact Own and evolve our application security program including establish and maintain SAST/DAST scanning in CI/CD pipelines, conducting security code reviews for critical changes, and building automation that catches vulnerabilities before they reach production Partner … review code across multiple languages, understanding both business logic and security implications Knowledge of security tools and methodologies including SAST/DAST solutions, vulnerability management platforms, security testing frameworks, and DevSecOps practices—you know which tools to use and when automation beats manual review Excellent communication ...

clients in three continents with headquarters in the UK. What is the role? The role is accountable for defining, operating and evidencing the information security governance framework. Technology and Engineering teams remain responsible for implementing and operating technical controls, subject to oversight, assurance and challenge from the Information Security … Technology teams to embed security into the software development lifecycle, including secure design reviews, threat modelling, secure coding standards, dependency scanning, SAST/DAST tooling, secrets management, application/API penetration testing, vulnerability remediation tracking and release security governance. Support DORA-related client and contractual obligations ...

areas including IAM, zero‐trust networking, secrets management, RBAC, pod security and encryption. Embed shift‐left security into engineering workflows, integrating SAST, DAST, dependency scanning and SCA into our CI/CD pipelines. Partner directly with Engineering and Product teams on architectural decisions, technical trade‐offs and secure … including IAM, RBAC, network segmentation, secrets management, image scanning and pod security. Experience integrating security tooling into CI/CD environments, including SAST, DAST, SCA and dependency scanning. Experience with infrastructure‐as‐code security and technologies such as Terraform, Helm or GitOps. Understanding of application ...

doing: Were on a mission to build a tech-forward, secure environment that empowers developers rather than putting roadblocks in their way. As an Application Security Engineer, youll act as a core technical guide across our software development lifecyclehelping us embed security directly into our code … mentor. Integrate security assessments, code reviews, and penetration testing seamlessly into the SDLC. Evaluate, implement, and run modern security tooling (SAST, DAST, IAST) to streamline vulnerability checks. Research emerging AI and LLM threat classes to design proactive, cutting-edge defensive architectures. Participate in incident response investigations ...

doing: Were on a mission to build a tech-forward, secure environment that empowers developers rather than putting roadblocks in their way. As an Application Security Engineer, youll act as a core technical guide across our software development lifecyclehelping us embed security directly into our code … mentor. Integrate security assessments, code reviews, and penetration testing seamlessly into the SDLC. Evaluate, implement, and run modern security tooling (SAST, DAST, IAST) to streamline vulnerability checks. Research emerging AI and LLM threat classes to design proactive, cutting-edge defensive architectures. Participate in incident response investigations ...

Founding Security Engineer (Application & Infrastructure) Build the shield that makes Enterprise Superintelligence trustworthy London/Remote • Full-time • Pavo Labs About Pavo Pavo is building Enterprise Superintelligence: compounding systems that take ownership of business outcomes and work with humans to deliver them. We believe that while foundation models … Secure SDLC & DevSecOps: Embed security into our CI/CD pipelines without slowing down our high-velocity engineering team. Integrate automated SAST/DAST scanning, dependency management (SCA), and secret detection into our daily workflow. Cloud & Infrastructure Hardening: Work closely with Systems Engineers to secure our Kubernetes clusters ...

secure AI software development, helping millions of developers develop fast and stay secure as AI transforms how software is built. Our AI-native Developer Security Platform integrates seamlessly into development and security workflows, making it easy to find, fix, and prevent vulnerabilities — from code and dependencies to containers … market efforts. The Solution Architect is first and foremost a subject matter expert in Application Security testing (SAST, SCA, DAST, etc) and/or agentic software development & building AI-native applications. You will partner with pre-sales teams and leverage this technical expertise to define “big picture ...

over 90 million wallet holders and more than 40 million verified users, facilitating over $1 trillion in crypto transactions. You will operate the Product Security programe for the company.com’s internally-developed products across Consumer, OTC and MRE lines. This is a senior, hands-on role: you’ll design … is integrated from the design phase. Secure SDLC Operator: Operate and improve the secure development lifecycle. This includes orchestrating SAST/SCA/DAST, streamlining SARIF ingestion, PR review standards, CI/CD security automation, and vulnerability triage workflows. AI-Driven SDLC Innovation: Research, architect, and safely embed ...

.Cyber Security Business Information Officer (BISO) page is loaded## Cyber Security Business Information Officer (BISO)locations: Oxford: Londontime type: Full timeposted on: Posted Todayjob requisition id: R112581**About Our Team**The Business Information Security Office (BISO) team partners with business, product, and technology leaders to deliver measurable … security experience (AWS, Azure, GCP; secure SDLC).* Hands‐on knowledge of security tooling (SIEM, SOAR, EDR/XDR, CSPM, SAST/DAST).* Experience embedding security into CI/CD pipelines and DevSecOps practices.* Proven capability in risk assessments, threat modeling, and control gap analysis.* Experience ...

## .Cyber Security Business Information Officer (BISO) page is loaded## Cyber Security Business Information Officer (BISO)locations: Oxford: Londontime type: Full timeposted on: Posted Todayjob requisition id: R112581**About Our Team**The Business Information Security Office (BISO) team partners with business, product, and technology leaders to deliver … security experience (AWS, Azure, GCP; secure SDLC).* Hands‐on knowledge of security tooling (SIEM, SOAR, EDR/XDR, CSPM, SAST/DAST).* Experience embedding security into CI/CD pipelines and DevSecOps practices.* Proven capability in risk assessments, threat modeling, and control gap analysis.* Experience ...

Internet of Things. Reply’s services include Consulting, System Integration, and Digital Services. Role Overview: We are looking for a hands-on Cloud Security Engineer to join our growing cybersecurity practice. This is an engineering-first role so we are looking for someone who builds, configures, and secures cloud … Terraform), including reusable, security-hardened modules and reference patterns Integrate security tooling and automated controls intoCI/CD pipelines, including SAST/DAST tooling, secrets scanning, and policy-as-code enforcement Conduct threat modelling exercises, cloud security posture reviews, and risk assessments for cloud platforms and workloads ...

scalable, accurate, and enterprise-grade integrations. Our platform combines 25,000 pre-mapped actions on 200 connectors, an AI-powered integration development toolkit, plus security by design: a real‐time architecture, managed authentication and permissions, and end‐to‐end observability. Join us on our fast trajectory to build … Lambda, KMS, GuardDuty, Security Hub, Inspector), Cloudflare (Workers, WAF, Zero Trust) IaC: AWS CDK, Terraform Security tooling: Aikido (SAST, DAST, container scanning, pen testing), 1Password, GitHub (org‐level enforcement, Advanced Security) Compliance & ops: Drata, Iru, EasyLlama Observability & IR: Datadog, Sentry, Logfire, Incident.io Languages: TypeScript (Node.js), Python ...

Architect experts within the Enterprise Technology team, part of Bain’s digital capabilities practice. This is a multidisciplinary group that helps clients modernise their security strategy, architecture, and programmes. The work centres on aligning cybersecurity with business goals, and in practice that means designing enterprise-wide security architectures … security work. Experience managing or mentoring junior cyber staff in a professional services environment. DevSecOps experience: implementing security gates (SAST/DAST) into CI/CD pipelines. Infrastructure as Code (Terraform, Bicep) and scripting (PowerShell, Python) for security automation. #J-18808-Ljbffr ...

Head of Security Engineering (DevSecOps & CISO) ABOUT the company the company is a prediction market exchange for sports and political trading, having handled over $50 billion in volume since 2010. We're upending sports betting with the fairest prices, the best technology, and a superior customer experience — powered … security incidents, including post-incident root cause analysis and corrective actions. Work with Engineering teams to build security into the SDLC — SAST, DAST, SCA, container/IaC scanning in CI/CD — without becoming a delivery bottleneck Implement controls across AWS, Kubernetes, containers, and IaC, hardening identity, secrets ...

source control and continuous integration tools as part of a team Security Practices: An understanding of application security controls like SAST, DAST, Penetration Testing, etc. Quality Focus: A DevSecOps mindset with focus on delivering value quickly and frequently What will you be doing? Deep Technical Expertise … entity framework code first data with Azure SQL or a NoSQL Databases Enterprise Expertise: Build resilient Microservice integrated via a Cloud message bus Security Practices: Comply with secure coding & infrastructure standards and policies Continuous Delivery: Assist with supporting your application using modern DevSecOps tools Quality Focus: Continuously improve ...

Tripadvisor Experiences in London is seeking a Senior Application Security Engineer to lead security across our platform. You will design and implement advanced security measures, mentor junior engineers … shape security practices across products and infrastructure. The role requires hands-on expertise in threat modelling, vulnerability assessments, secure coding, SAST/DAST, and cloud security, with a track record of guiding teams and collaborating with product and engineering to embed #J-18808-Ljbffr ...

Senior DevSecOps Architect, you’ll collaborate with top cybersecurity and engineering talent, solving complex challenges and enabling safe, secure innovation. Your passion for security and drive to make a real impact are valued here. Grow your skills in a dynamic environment designed for achievers. Help us build products … Hands‐on experience in integrating a comprehensive DevSecOps tooling stack, including SAST, SCA, RASP, IAST, container and image scanning, secrets detection, and AI‐powered DAST solutions. Experience implementing and managing SBOMs to track internal, third‐party risk and supply chain security. Ability to solve design and functionality problems independently. Strong ...