14 of 14 Remote/Hybrid Dynamic Application Security Testing Jobs in London

have a background in Application Security, DevSecOps or Product Security, with hands-on experience embedding application security into the SDLC If so, this could be an opportunity worth considering. Join a well-established health research organisation and charity supporting large-scale medical research. You will … controls and cloud security governance. Experience with KQL. Experience securing APIs, internet-facing services, Kubernetes, preferably AKS, and containerised environments. Experience with SAST, DAST, IAST and SCA. Knowledge of security automation, security-/policy-as-code and secure engineering practices. Familiarity with GitHub and GitHub Actions. Experience ...

Learn more at the company.com. Role Overview This is a transformational role. The Director is expected to lead the organization from fragmented, task-based security handling into a mature, agile program — modernizing how security is embedded across engineering, redefining operational efficiency, and setting how the cybersecurity function operates … across application, cloud, and infrastructure layers — risk-based prioritization, engineering ownership models, and remediation SLAs. Oversee application security testing — SAST, DAST, SCA — and the offensive security program including pen testing and red team engagements. Own cloud security posture across the estate — CSPM, container ...

product decisions from day one—not after the fact Own and evolve our application security program including establish and maintain SAST/DAST scanning in CI/CD pipelines, conducting security code reviews for critical changes, and building automation that catches vulnerabilities before they reach production Partner … review code across multiple languages, understanding both business logic and security implications Knowledge of security tools and methodologies including SAST/DAST solutions, vulnerability management platforms, security testing frameworks, and DevSecOps practices—you know which tools to use and when automation beats manual review Excellent communication ...

clients in three continents with headquarters in the UK. What is the role? The role is accountable for defining, operating and evidencing the information security governance framework. Technology and Engineering teams remain responsible for implementing and operating technical controls, subject to oversight, assurance and challenge from the Information Security … Technology teams to embed security into the software development lifecycle, including secure design reviews, threat modelling, secure coding standards, dependency scanning, SAST/DAST tooling, secrets management, application/API penetration testing, vulnerability remediation tracking and release security governance. Support DORA-related client and contractual obligations ...

areas including IAM, zero‐trust networking, secrets management, RBAC, pod security and encryption. Embed shift‐left security into engineering workflows, integrating SAST, DAST, dependency scanning and SCA into our CI/CD pipelines. Partner directly with Engineering and Product teams on architectural decisions, technical trade‐offs and secure … including IAM, RBAC, network segmentation, secrets management, image scanning and pod security. Experience integrating security tooling into CI/CD environments, including SAST, DAST, SCA and dependency scanning. Experience with infrastructure‐as‐code security and technologies such as Terraform, Helm or GitOps. Understanding of application ...

doing: Were on a mission to build a tech-forward, secure environment that empowers developers rather than putting roadblocks in their way. As an Application Security Engineer, youll act as a core technical guide across our software development lifecyclehelping us embed security directly into our code … mentor. Integrate security assessments, code reviews, and penetration testing seamlessly into the SDLC. Evaluate, implement, and run modern security tooling (SAST, DAST, IAST) to streamline vulnerability checks. Research emerging AI and LLM threat classes to design proactive, cutting-edge defensive architectures. Participate in incident response investigations ...

secure AI software development, helping millions of developers develop fast and stay secure as AI transforms how software is built. Our AI-native Developer Security Platform integrates seamlessly into development and security workflows, making it easy to find, fix, and prevent vulnerabilities — from code and dependencies to containers … market efforts. The Solution Architect is first and foremost a subject matter expert in Application Security testing (SAST, SCA, DAST, etc) and/or agentic software development & building AI-native applications. You will partner with pre-sales teams and leverage this technical expertise to define “big picture ...

over 90 million wallet holders and more than 40 million verified users, facilitating over $1 trillion in crypto transactions. You will operate the Product Security programe for the company.com’s internally-developed products across Consumer, OTC and MRE lines. This is a senior, hands-on role: you’ll design … is integrated from the design phase. Secure SDLC Operator: Operate and improve the secure development lifecycle. This includes orchestrating SAST/SCA/DAST, streamlining SARIF ingestion, PR review standards, CI/CD security automation, and vulnerability triage workflows. AI-Driven SDLC Innovation: Research, architect, and safely embed ...

scalable, accurate, and enterprise-grade integrations. Our platform combines 25,000 pre-mapped actions on 200 connectors, an AI-powered integration development toolkit, plus security by design: a real‐time architecture, managed authentication and permissions, and end‐to‐end observability. Join us on our fast trajectory to build … Lambda, KMS, GuardDuty, Security Hub, Inspector), Cloudflare (Workers, WAF, Zero Trust) IaC: AWS CDK, Terraform Security tooling: Aikido (SAST, DAST, container scanning, pen testing), 1Password, GitHub (org‐level enforcement, Advanced Security) Compliance & ops: Drata, Iru, EasyLlama Observability & IR: Datadog, Sentry, Logfire, Incident.io Languages: TypeScript (Node.js), Python ...

Head of Security Engineering (DevSecOps & CISO) ABOUT the company the company is a prediction market exchange for sports and political trading, having handled over $50 billion in volume since 2010. We're upending sports betting with the fairest prices, the best technology, and a superior customer experience — powered … security incidents, including post-incident root cause analysis and corrective actions. Work with Engineering teams to build security into the SDLC — SAST, DAST, SCA, container/IaC scanning in CI/CD — without becoming a delivery bottleneck Implement controls across AWS, Kubernetes, containers, and IaC, hardening identity, secrets ...

Consultant role is for a practical hands-on engineer who can set up projects, automate pipelines, support cloud environments and collaborate with development, operations, security and client teams to improve delivery speed, resilience and control. Key responsibilities Set up and configure new projects in Azure DevOps, GitHub, GitLab … deployment troubleshooting PowerShell, Bash, Python or Azure CLI for automation, remediation, deployment support and operational tooling Security & DevSecOps SonarQube or similar, SAST/DAST/SCA concepts, secrets management, policy-as-code awareness and secure SDLC practices Monitoring & operations Azure Monitor, Application Insights, Log Analytics, Grafana, Prometheus ...

identifying bottlenecks in the secure software development lifecycle and building automated solutions to resolve them. Architecting and evolving standardized deployment patterns that bake in security, compliance, and observability, allowing product teams to focus on delivering customer functionality. Ensuring high availability, performance, and seamless integration of our self-hosted engineering … modern deployment methodologies (such as GitOps) to ensure declarative, reproducible, and audited state management across all environments. Owning automated security tooling (e.g. SAST, DAST, dependency scanning, container scanning, and secrets detection) to deliver security audit evidence for the platform Arondite aims to bring together individuals from diverse backgrounds ...

Config as Code: Terraform, Ansible, Bicep/ARM, Helm, Kustomize; GitOps via Argo CD and Flux Cloud & Orchestration: AWS, Azure, Docker, Kubernetes AI Inference & Application Infrastructure: Frontier and open-weight models via Anthropic, Azure OpenAI, and Amazon Bedrock; model gateways and routing, retrieval and hybrid search, document ingestion, tool … OpenTelemetry, including GenAI tracing and token, latency, and cost telemetry Platform Security & Policy-as-Code: HashiCorp Vault, OPA/Conftest, SAST/DAST Developer Portal & Self-Service: Internal developer portal, CLIs/SDKs, and APIs Responsibilities include: Developer Experience & Self-Service Enablement Build and maintain self-service tooling, CLIs ...

Oxford Dynamics is at an inflection point. We operate in some of the most complex and high-stakes environments in the world defence - national security, AI and robotics. The decisions we make now will define not just how fast we grow, but who we become. You will work closely … Cloud, CloudFormation), containerisation (Docker, Docker Compose) and Linux systems. Solid CI/CD engineering with GitHub Actions and Argo CD. Experience integrating SAST and DAST best practices. Scripting in Bash and Python or Go for automation Demonstrated success delivering cloud cost-optimisation and high-security solutions for enterprise clients ...