1 to 25 of 33 Remote/Hybrid Static Application Security Testing Jobs in London

have a background in Application Security, DevSecOps or Product Security , with hands-on experience embedding application security into the SDLC If so, this could be an opportunity worth considering. Join a well-established health research organisation and charity supporting large-scale medical research. You will … controls and cloud security governance. Experience with KQL. Experience securing APIs, internet-facing services, Kubernetes, preferably AKS, and containerised environments. Experience with SAST, DAST, IAST and SCA. Knowledge of security automation, security-/policy-as-code and secure engineering practices. Familiarity with GitHub and GitHub Actions. ...

including automated testing and policy enforcement Design and implement application security controls, including: Static Application Security Testing (SAST) Dynamic Application Security Testing (DAST) Software Composition Analysis (SCA)/dependency scanning Secrets and credentials scanning Work with engineering teams to ensure … integrating DevSecOps tooling within CI/CD environments (e.g. GitLab pipelines) Experience with application security testing tools and practices, including: SAST, DAST, SCA/dependency scanning andSecrets/credentials scanning. Experience contributing to security design reviews for applications and APIs Experience supporting or participating in penetration ...

including automated testing and policy enforcement Design and implement application security controls, including: Static Application Security Testing (SAST) Dynamic Application Security Testing (DAST) Software Composition Analysis (SCA)/dependency scanning Secrets and credentials scanning Work with engineering teams to ensure … integrating DevSecOps tooling within CI/CD environments (e.g. GitLab pipelines) Experience with application security testing tools and practices, including: SAST, DAST, SCA/dependency scanning and Secrets/credentials scanning. Experience contributing to security design reviews for applications and APIs Experience supporting or participating ...

including automated testing and policy enforcement Design and implement application security controls, including: Static Application Security Testing (SAST) Dynamic Application Security Testing (DAST) Software Composition Analysis (SCA)/dependency scanning Secrets and credentials scanning Work with engineering teams to ensure … integrating DevSecOps tooling within CI/CD environments (e.g. GitLab pipelines) Experience with application security testing tools and practices, including: SAST, DAST, SCA/dependency scanning and Secrets/credentials scanning. Experience contributing to security design reviews for applications and APIs Experience supporting or participating ...

findings and work with developers on remediation. Monitor and troubleshoot security tooling and CI/CD pipelines, investigating failures and root causes. Use SAST, DAST, SCA and other automated security tooling to support secure software development. Conduct threat modelling and secure design reviews for new features, services … code and interpreting findings from security tools. Worked directly with software engineers to prioritise and remediate security issues. Hands‐on experience with SAST, DAST, SCA or similar security tooling within CI/CD environments. Practical knowledge of threat modelling and secure software development. Enough coding or scripting ...

asthe function matures. Key Responsibilities Vulnerability Management & Security Tooling Support the rollout and operation of application security tooling across engineeringrepositories, including SAST, SCA and secrets detection. Triage and classify security findings across repos, driving remediation of the secrets backlog Manage the day-to-day operation … recommendations to engineering teams. Working proficiency in Python (able to read, modify, and write scripts used for internal tooling) Practical experience with DAST/SAST/SCA/secrets scanning tools (Aikido, Snyk, Semgrep,Checkmarx, or similar) Experience with Prisma Cloud or a comparable cloud-native security platform Comfortable ...

able to interact and collaborate in person. About Engineering at Engine by Starling - https://enginebystarling.com/careers/engineering/As a Security Engineer at Engine, you'll be working on helping to keep our infrastructure secure and compliant and our staff safe and productive. … lifecycle Experience performing secure code reviews and security approvals, including the use of static and dynamic application security testing (SAST/DAST) tools Experience in cryptography management and enhancements Relevant security certifications such as ISC2 CC, CISSP, CCSP, CISM, AWS Security Specialty ...

considerations shape product decisions from day one—not after the fact Own and evolve our application security program including establish and maintain SAST/DAST scanning in CI/CD pipelines, conducting security code reviews for critical changes, and building automation that catches vulnerabilities before they reach … read and review code across multiple languages, understanding both business logic and security implications Knowledge of security tools and methodologies including SAST/DAST solutions, vulnerability management platforms, security testing frameworks, and DevSecOps practices—you know which tools to use and when automation beats manual review ...

able to interact and collaborate in person. About Engineering at Engine by Starling — https://enginebystarling.com/careers/engineering/As a Security Engineer at Engine, you'll be working on helping to keep our infrastructure secure and compliant and our staff safe and productive. … lifecycle Experience performing secure code reviews and security approvals, including the use of static and dynamic application security testing (SAST/DAST) tools Experience in cryptography management and enhancements Relevant security certifications such as ISC2 CC, CISSP, CCSP, CISM, AWS Security Specialty ...

considerations shape product decisions from day one—not after the fact Own and evolve our application security program including establish and maintain SAST/DAST scanning in CI/CD pipelines, conducting security code reviews for critical changes, and building automation that catches vulnerabilities before they reach … both technical and non-technical audiences—you can explain why something matters and motivate teams to actionKnowledge of security tools and methodologies including SAST/DAST solutions, vulnerability management platforms, security testing frameworks, and DevSecOps practices—you know which tools to use and when automation beats manual ...

TREE business. This is a hands-on role with a wide range of responsibilities including monitoring, detection, response and remediation of security risks, threats and vulnerabilities. The ultimate goal is to holistically improve Y TREE’s security posture to meet the demands of its clients and its regulators. … enhance Y TREE’s internal capabilities for routine security testing activities, and monitor/enhance security on CI/CD pipelines (SAST, DAST and SCA testing). Risk & Remediation Tracking: Maintain a register of security risks and remediations; work closely with Technology, Risk, and Compliance ...

grow your career. Engineering at Brex Engineering at Brex is about building systems that scale with speed and intention. Our teams span Software, Data, Security, and IT, and operate with high autonomy and deep collaboration. We tackle hard technical problems, own our outcomes, and push for excellence at every … insecure designs, work with engineering and product to design secure product features Maintain and build internal tools to automate security efforts, perform SAST and DAST testing of the Brex platform, and support secure development practices Build and contribute to a culture of collaborative security excellence through technical ...

love to hear from you About the role We're a regulated payments fintech operating across multiple European markets, scaling into banking-licence territory. Security Engineering is being rebuilt around a joint operating model with our product, platform, and infrastructure teams. We're hiring a Principal Security Engineer … when they do. Pipeline-embedded controls. Work with the platform team to extend policy-as-code and build upon existing pipeline security toolchain (SAST, SCA, secrets, or DAST for example). Checks that run in the pipeline and produce signal engineers trust, not noise they learn to ignore. Threat ...

Technology Delivery Lead: Cyber Security UK - London Technology Delivery Lead: Cyber Security Location: London (Hybrid) | Practice Area: Technology & Engineering | Type: Permanent Lead the delivery of security initiatives that safeguard the future of digital finance. The Role As a Security Delivery Lead at Capco, you’ll lead … human judgement and an understanding of responsible use, review and escalation Bonus Points For Familiarity with DevSecOps practices and security tooling such as SAST, SCA, DAST, container scanning, SIEM, firewalls or IAM solutions Experience delivering Zero Trust, cloud security, security transformation or regulatory remediation initiatives Relevant certifications ...

production environments. Security & Quality Embed security and quality directly into the standard pipeline. You Will Work With Technologies And Practices Including SonarQube SAST DAST Dependency scanning CVE/vulnerability scanning Container/image scanning Image signing Security and quality thresholds Automated quality gates The objective … environments Automation & Scripting PowerShell Python Bash or other scripting languages beneficial Observability Prometheus Grafana Datadog Security & Software Supply Chain SonarQube Snyk or equivalent SAST DAST Dependency/CVE scanning Image/container signing Software supply-chain security Application Technologies The Pipelines Will Primarily Support C#/.NET ...

looking for a Senior Application Security Engineer to join our expanding Information Security team. If you are a hands‐on AppSec expert who enjoys working deep in the SDLC, partnering with talented engineers and building security into fast‐moving delivery pipelines, this role gives … following skills and experience Proficient in writing Terraform, Python and ideally KQL. Significant hands‐on experience with implementing and operating code scanners including SAST, DAST, IAST and SCA. Experience of automating security capabilities and delivering security or policy as code using tools such as OPA or Azure Policy. ...

platform (from CI/CD pipelines to multi‐tenant APIs to incident response on authentication flows). Responsibilities Own the secure SDLC: drive SAST, dependency scanning, secrets detection, and PR‐blocking standards across every repository. Harden our AWS and Cloudflare estate: IAM, secrets, network segmentation, KMS, WAF, GuardDuty, and zero … infra: AWS (ECS, RDS, Lambda, KMS, GuardDuty, Security Hub, Inspector), Cloudflare (Workers, WAF, Zero Trust) IaC: AWS CDK, Terraform Security tooling: Aikido (SAST, DAST, container scanning, pen testing), 1Password, GitHub (org‐level enforcement, Advanced Security) Compliance & ops: Drata, Iru, EasyLlama Observability & IR: Datadog, Sentry, Logfire, Incident.io ...

Cleared Cloud Security Engineer Location: UK – Fully Remote Contract: Up to 12 months Clearance: Active UK SC Clearance required Rate: Up to £480/day Outside IR35 We are looking for an experienced SC Cleared Cloud Security Engineer to join a hands-on cloud security engineering team … security guardrails, including Service Control Policies, AWS Config, Security Hub and GuardDuty Integrate security testing into GitHub Actions pipelines, including SAST, dependency scanning, IaC scanning and secrets detection Triage and address security findings identified through CI/CD security tooling Implement secrets ...

innovation and ready to make an impact at scale, we’d love to hear from you. Reporting to the CISO, you'll own the security roadmap for Pigment's product, infrastructure, and CI/CD environment, and you'll build much of it yourself. This is a hands … pipeline. AI-powered security reviews reason about a diff semantically rather than pattern-matching it, which is genuinely different from classic SAST - but it's not a drop-in replacement, and figuring out the split between AI review, traditional SAST and SCA is an open question we'd like ...

partnering with a leading UK financial services organisation to hire an Application Security Engineer. You will focus on secure code reviews, SAST/DAST, vulnerability assessments and embedding security throughout the CI/CD lifecycle. The role requires experience with OWASP Top 10, Veracode, DevSecOps, and cloud … security across Azure/AWS, plus Kali Linux for manual testing. Hybrid work in London, Manchester or Glasgow with in-office presence ~1 day per week. #J-18808-Ljbffr ...

team of great engineers, delivery managers and architects on several topics i.e., Cloud Platform Design, On‐prem to Cloud Migration, Automated Deployment, Infrastructure Provisioning, Security Testing and many more. You will work on different Platform Engineering, Platform Operations and Platform Security projects and collaborate with Product, Architecture … with WAF, security logging, monitoring and alerting, privileged access management, secrets management and vulnerability management. You’ll also know security scanning tools (SAST, DAST, open‐source and container scanning) and how to apply security controls across data, infrastructure and applications. Resilience and delivery: Experience with business continuity ...

platform deployment automation and operational controls that underpin entitlement authorization and event driven services The successful candidate will play a critical role in embedding security reliability observability and quality into the software delivery lifecycle enabling engineering teams to build test deploy and operate applications through consistent and automated pathways.Hybrid … container networking and runtime configurationsImplement and enhance platform observability through metrics dashboards alerting structured logging and distributed tracingIntegrate security and quality controls including SAST container scanning dependency scanning code quality analysis and vulnerability managementAutomate secure configuration management secrets handling certificate deployment and compliance evidence generationDesign deployment resilience strategies including ...

Security Engineer Office location; UK Wide | Hybrid, London, Manchester, Leeds Main purpose of the role: ITV is currently seeking a skilled Security Engineer to join our Security Engineering team. This role will be embedded with one of our devolved product teams, and will involve promoting and embedding … that our Cyber Security team provides to the business. You will also support the implementation of commercial security tooling, such as SIEM, SAST, and CNAPP. This is a fantastic opportunity to make a real difference to our ‘More than TV’ strategy and play a critical role in securing ...

level DevOps Engineer to help operate and evolve our AWS-based infrastructure. You’ll work at the intersection of infrastructure automation, application delivery, database operations, and security — using Terraform and GitOps workflows to manage cloud resources, GitHub Actions to power CI/CD, and Python to build … observability across infrastructure and applications (metrics, logs, traces, dashboards, and alerting). Apply DevSecOps practices by embedding security checks into the development lifecycle (SAST/DAST, dependency scanning, container/image scanning, IaC scanning) rather than treating security as a separate gate. Contribute to a cloud security ...

dependencies, build agents, artefact repositories and target environments Migrating applications from legacy deployment tooling onto Octopus Deploy Defining and embedding pipeline security controls - SAST, SCA, dependency scanning, secrets detection and artefact scanning (GitHub CodeQL, Dependabot, JFrog Xray and Curation) Managing software supply-chain controls: approved repositories, open-source governance … working knowledge of Bash/shell scripting Good understanding of Git workflows, artefact repositories, package versioning and environment promotion Experience implementing secure coding controls (SAST, SCA, secrets detection) and a good grasp of secure development principles, including authentication, secrets management, certificates and TLS Windows Server and on-premises hosting knowledge ...