3 of 3 Static Application Security Testing Jobs in the Thames Valley

application security. Carry out ongoing manual security assessments, coordinate third-party engagements where needed, and turn findings into clear, prioritised actions. Review SAST, DAST and SCA outputs, driving remediation through to closure and keeping tracking, ownership and prioritisation firmly on course. Provide on-demand application security … GitHub Actions, with the confidence to bring security into delivery without slowing everyone down. Practical experience with security tooling and practices including SAST, DAST, SCA, container scanning, vulnerability management, SBOM tooling such as CycloneDX, IaC security across Terraform, Bicep, Ansible and tools such as Trivy, plus Policy ...

managed identity patterns, and network segmentation with Private Link, Azure Firewall and WAF rules. Deliver the DevSecOps tooling in GitHub Actions or Azure Pipelines: SAST, SCA, secrets, container and IaC scanning, with tuned rules, reusable pipeline templates and feedback developers can act on. Implement supply chain controls: SBOM generation, artifact … Cloud, Key Vault, and networking with NSGs, Private Link, Azure Firewall and WAF. DevSecOps tooling in GitHub Actions or Azure Pipelines: integrating and tuning SAST, SCA, secrets, container and IaC scanners, and building reusable pipeline templates. Infrastructure as code with Terraform or Bicep, and PowerShell or Python to automate controls ...

Active SC Clearance Required We're looking for a Senior DevOps Engineer to join a growing technology company delivering advanced solutions across Defence, National Security and other highly regulated sectors. This is a hands-on role focused on AWS, Kubernetes and DevSecOps, where you'll help build secure, scalable … networking, IAM and security. Strong Kubernetes administration experience. Experience with Terraform, Docker and Linux. Experience with GitHub Actions and Argo CD. Knowledge of DevSecOps, SAST and DAST practices. Automation and scripting skills with Bash, Python or Go. Strong communication and stakeholder management skills. Desirable MLOps or LLMOps experience (SageMaker, Kubeflow ...