7 of 7 Static Application Security Testing Jobs in London

Senior Cyber Security Analyst (OWASP/SAST/DAST - Banking Client Application Security | Secure Design | Threat Modelling | DevSecOps Locations: London | Paris | Brussels | Amsterdam Rate: Flexible Duration: 12 months We are looking for a Cyber Security Analyst specialising in Application Security and Secure Architecture … implementing secure coding practices aligned with OWASP guidelines . Security Testing & DevSecOps Define and review security testing activities including SAST, DAST and software composition analysis (SCA) . Work with engineering teams to integrate security scanning into CI/CD pipelines . Analyse vulnerability scan results ...

Cloudflare Chef , Ansible and Redhat IDM Docker (Dockerfile, docker-compose, docker-cli) Github Administration, Github Actions (Workflows), AWS Code Build Github Advance Security (SAST, DAST) Awareness about AWS Sec Tools and KMS management Key Duties Github Administration, Github Actions (Workflows), AWS Code BuildSolution Delivery Design, deliver, and support secure … scalable AWS infrastructure using services like EC2, S3, ECS, and FARGATE Security & Compliance Integrate SAST (Static Application Security Testing) and DAST (Dynamic Application Security Testing) tools into CI/CD pipelines to enforce secure development practices Infrastructure Automation Automate infrastructure provisioning using ...

Cloud Security Pre-Sales Consultant - Cloud, Security, AWS, AzureSalary: £60,000 - £65,000 (Depending on Experience)Location: London/Hybrid (willingness to travel on-site required)Company OverviewA forward-thinking and entrepreneurial cloud security company, partnering with major organisations and continuing to grow rapidly, is offering … Zero Trust principles.Network & Infrastructure SecurityCloud-native firewalls, WAFs, VPN, ZTNA, API security fundamentals.Container & DevSecOps SecurityBasic exposure to Kubernetes (AKS, EKS, GKE), container scanning, SAST/DAST, IaC security.SIEM & Endpoint SecuritySplunk, Microsoft Sentinel, Elastic Security, CrowdStrike, Defender XDR.Certifications (Nice to Have, Not Essential)Security+, CySA+, CEH, CCSP, CISM, CISSP ...

Cloud being advantageous. Developing Infrastructure as Code (IaC) and Configuration Management (CM) using tools such as Terraform and Ansible to enhance infrastructure deployments and security configurations. Applying security best practices and compliance benchmarks to cloud infrastructure with IaC and CM tools, using AWS security services to standardise … Kubernetes, Lambda, EKS, and ECS - with experience of Kubernetes/EKS preferred. Implementing and maintaining security controls within the delivery pipeline, including SAST, vulnerability scanning, and code linting tools. Leveraging AWS services like CloudWatch, Athena, Config and CloudTrail to monitor and help secure cloud infrastructure. Supporting ongoing software development ...

maintain CI/CD pipelines and automate build, deployment and environment provisioning. - Monitoring and alerting implementation (Azure Monitoring, App Insights, Log Analytics) - Plan testing and release readiness with engineering team, business and external partners - Work closely with Engineering leads and security team to ensure solutions delivered is aligned … Proven hands-on experience with BICEP and ARM - Experience building and securing CI/CD pipelines in Azure DevOps - Integration of security tooling (SAST, DSAT, dependency scanning, secret scanning) and security remediation planning and execution - Identity and access management - Experience of DevSecOps framework design - Experience of incident response ...

Azure technology estate. This is a hands-on contract opportunity suited to someone with strong Azure DevSecOps expertise who enjoys working collaboratively across engineering, security, cloud operations, and external partners to deliver secure and reliable platforms. Location: London - Hybrid (minimum 3 days per week onsite) Rate: Competitive (dependent …/CD pipelines within Azure DevOps Implement DevSecOps frameworks and best practices across the Azure environment Integrate security tooling into pipelines including SAST, DAST, dependency scanning, and secret scanning Develop and maintain Infrastructure as Code using BICEP and ARM Enable secure, automated, and repeatable deployment pipelines across Azure services ...

DevOps Technical Depth (essential): CI/CD pipeline architecture and integrations Git-based platforms (GitHub, GitLab, Bitbucket) DevSecOps tooling and security integrations SCA, SAST, SBOM management Container security Strong understanding of modern cloud and distributed systems Highly desirable: Background in software development Exposure to MLOps You must … equally credible in front of: Heads of DevOps Platform Engineering teams Security leaders C-level technical stakeholders Why This Role Stands Out Global enterprise exposure Complex, intellectually challenging sales cycles Cutting-edge DevSecOps and software supply chain technology High-calibre peer group Strong career progression potential This ...