8 of 8 Static Application Security Testing Jobs in the South West

including automated testing and policy enforcement Design and implement application security controls, including: Static Application Security Testing (SAST) Dynamic Application Security Testing (DAST) Software Composition Analysis (SCA)/dependency scanning Secrets and credentials scanning Work with engineering teams to ensure … integrating DevSecOps tooling within CI/CD environments (e.g. GitLab pipelines) Experience with application security testing tools and practices, including: SAST, DAST, SCA/dependency scanning andSecrets/credentials scanning. Experience contributing to security design reviews for applications and APIs Experience supporting or participating in penetration ...

Ripjar was founded by veterans of GCHQ to bring national security-grade intelligence tools to the fight against financial crime. Financial crime funds human trafficking, terrorism, corruption and sanctions evasion on a global scale, and the organisations on the front line need technology built to match the threat. Today … tools such as Bash, Python, JavaScript, and GitHub Actions. Knowledge of how to effectively use security testing and monitoring tooling, e.g. SAST and SIEM products. Knowledge of how to configure monitoring tooling for application and infrastructure metrics, e.g. Prometheus, Datadog, Open Telemetry Candidates with the following background ...

continuous innovation culture. What you’ll be doing As a DevOps Engineer at Ripjar you will be responsible for ensuring the reliability and security of the infrastructure that underpins our development and operational services. You will play an active role in supporting and continuously improving our core infrastructure offering … tools such as Bash, Python, JavaScript, and GitHub Actions. Knowledge of how to effectively use security testing and monitoring tooling, e.g. SAST and SIEM products. Knowledge of how to configure monitoring tooling for application and infrastructure metrics, e.g. Prometheus, Datadog, Open Telemetry Candidates with the following background ...

underrepresented groups, and neurodivergent candidates. We offer reasonable adjustments throughout the hiring process and are dedicated to creating a supportive, accessible environment for everyone. Security Engineering Lead Location: Hampshire (onsite 5 days per week) Due to the nature of the work and the customers we support, the successful candidate … security controls, identity management, and threat-mitigation patterns across cloud and hybrid infrastructures. DevSecOps Integration: Oversee the embedding of automated security scanning (SAST, DAST, SCA, container scanning) into delivery pipelines. Risk & Governance: Collaborate with accreditors, Risk Owners, and project leadership to navigate security case approvals and risk ...

underrepresented groups, and neurodivergent candidates. We offer reasonable adjustments throughout the hiring process and are dedicated to creating a supportive, accessible environment for everyone. Security Engineer (Scrum) Location: Hampshire (onsite 5 days per week) Due to the nature of the work and the customers we support, the successful candidate … security controls, identity management, and threat-mitigation patterns across cloud and hybrid infrastructures. • DevSecOps Integration: Oversee the embedding of automated security scanning (SAST, DAST, SCA, container scanning) into delivery pipelines. • Risk & Governance: Collaborate with MOD accreditors, Risk Owners, and project leadership to navigate security case approvals ...

dependencies, build agents, artefact repositories and target environments Migrating applications from legacy deployment tooling onto Octopus Deploy Defining and embedding pipeline security controls - SAST, SCA, dependency scanning, secrets detection and artefact scanning (GitHub CodeQL, Dependabot, JFrog Xray and Curation) Managing software supply-chain controls: approved repositories, open-source governance … working knowledge of Bash/shell scripting Good understanding of Git workflows, artefact repositories, package versioning and environment promotion Experience implementing secure coding controls (SAST, SCA, secrets detection) and a good grasp of secure development principles, including authentication, secrets management, certificates and TLS Windows Server and on-premises hosting knowledge ...

across complex enterprise transformation programmes. This role will play a critical part in shaping cloud architecture, driving DevSecOps adoption, and ensuring technology solutions meet security, reliability, and regulatory requirements within a fast-paced delivery environment. Key Responsibilities Define and govern enterprise-scale Azure cloud and DevOps architecture standards across … Redis or Hazelcast. Expertise in API architecture, RESTful services, OpenAPI/Swagger standards, and integration design patterns. Demonstrated experience implementing DevSecOps controls, including SAST, DAST, secrets management, and compliance automation. Excellent stakeholder management, technical communication, and documentation skills. Bachelor's degree in Computer Science, Engineering, Information Technology, or a related ...

youre comfortable engaging with clients, understanding their needs, and translating them into effective outcomes. The Role: We are seeking a highly skilled and motivated Security Cleared DevOps Engineer to join our team. The successful candidate will be responsible for designing, implementing, and maintaining secure, scalable, and automated infrastructure solutions … Cloud Build, Artifact Registry and Cloud Deploy. Knowledge of GitOps practices and tools such as Argo CD or Flux. Experience implementing DevSecOps tooling, including SAST, DAST, container image scanning and dependency scanning. Familiarity with policy-as-code, automated compliance and security controls. Experience working in regulated, government, defence ...