3 of 3 Remote/Hybrid Static Application Security Testing Jobs in the South East

application security. Carry out ongoing manual security assessments, coordinate third-party engagements where needed, and turn findings into clear, prioritised actions. Review SAST, DAST and SCA outputs, driving remediation through to closure and keeping tracking, ownership and prioritisation firmly on course. Provide on-demand application security … GitHub Actions, with the confidence to bring security into delivery without slowing everyone down. Practical experience with security tooling and practices including SAST, DAST, SCA, container scanning, vulnerability management, SBOM tooling such as CycloneDX, IaC security across Terraform, Bicep, Ansible and tools such as Trivy, plus Policy ...

managed identity patterns, and network segmentation with Private Link, Azure Firewall and WAF rules. Deliver the DevSecOps tooling in GitHub Actions or Azure Pipelines: SAST, SCA, secrets, container and IaC scanning, with tuned rules, reusable pipeline templates and feedback developers can act on. Implement supply chain controls: SBOM generation, artifact … Cloud, Key Vault, and networking with NSGs, Private Link, Azure Firewall and WAF. DevSecOps tooling in GitHub Actions or Azure Pipelines: integrating and tuning SAST, SCA, secrets, container and IaC scanners, and building reusable pipeline templates. Infrastructure as code with Terraform or Bicep, and PowerShell or Python to automate controls ...

improving the way software is built, tested and deployed. You will work closely with development, infrastructure and cloud teams, helping to improve automation, reliability, security and overall engineering efficiency. What you will be doing Design, build and maintain Azure DevOps CI/CD pipelines across multiple environments. Automate build … remediate vulnerabilities across application code, CI/CD pipelines and Azure infrastructure. Integrate security tooling into development and deployment pipelines, including SAST, DAST and dependency scanning. Manage patching and updates across container images, Kubernetes components and Azure resources. Contribute to cloud platform governance, security standards and continuous ...