1 to 25 of 47 Snyk Jobs in the UK

Advanced DevSecOps platform experience including building or extending internal developer platforms, security tooling, and experience with SAST/DAST/SCA platforms such as Snyk, Checkmarx, Veracode, or equivalent security testing solutions Cloud security expertise with experience using cloud security platforms (CSPM, CNAPP), secrets management solutions such as HashiCorp Vault ...

OWASP Top 10, NIST) and secure SDLC practicesProficiency with CI/CD tooling (GitHub Actions, GitLab CI, Jenkins, Azure DevOps, CircleCI) and security tools (Snyk, Aqua, Trivy, Checkov, Twistlock, Clair)Hands-on expertise securing AWS/Azure/GCP, Kubernetes, containers, and IaCProficiency in Python, Bash, Go, or similarRESPONSIBILITIESFirst dedicated ...

secure SDLC practices. CI/CD & Tooling: Proficiency with CI/CD tooling (GitHub Actions, GitLab CI, Jenkins, Azure DevOps, CircleCI) and security tools (Snyk, Aqua, Trivy, Checkov, Twistlock, Clair). Cloud & Container Security: Hands-on expertise securing AWS/Azure/GCP, Kubernetes, containers, and IaC. Compliance as Code ...

secure SDLC practices.CI/CD & Tooling: Proficiency with CI/CD tooling (GitHub Actions, GitLab CI, Jenkins, Azure DevOps, CircleCI) and security tools (Snyk, Aqua, Trivy, Checkov, Twistlock, Clair).Cloud & Container Security: Hands-on expertise securing AWS/Azure/GCP, Kubernetes, containers, and IaC.Compliance as Code: Working knowledge ...

Kubernetes clusters, focusing on Zero Trust networking and identity-driven access.Vendor & Budget Management: Evaluate, procure, and manage third-party security vendors and tools (e.g., Snyk, Wiz, Cloudflare), ensuring maximum ROI and technical fit.Operational ExcellenceMetric-Driven Security: Define and track key performance indicators (KPIs) such as Mean Time to Remediate (MTTR ...

PowerShell, Bash or Python. Nice to have Kubernetes and Docker experience. Azure Landing Zone or multi-cloud experience. Security tooling such as SonarQube, Snyk, Checkov or Trivy. Azure certifications such as AZ-104, AZ-305 or AZ-400. Reasonable Adjustments: Respect and equality are core values to us. ...

PowerShell, Bash or Python. Nice to have Kubernetes and Docker experience. Azure Landing Zone or multi-cloud experience. Security tooling such as SonarQube, Snyk, Checkov or Trivy. Azure certifications such as AZ-104, AZ-305 or AZ-400. Reasonable Adjustments: Respect and equality are core values to us. ...

Advanced Security (GHAS), including Code Scanning (SAST), Secret Scanning, and Dependency Review.Proficiency in SAST, DAST, and SCA tools (e.g., CodeQL, Burp Suite, OWASP ZAP, Snyk, Checkmarx, Veracode).Hands-on experience integrating security testing tools into CI/CD pipelines for automated security scanning, including designing and building pipeline workflows.Hands ...

eBPF, or similar control points.Contributions to open-source security tooling or supply chain security projects.Familiarity with Datadog, AWS Security Hub, Okta, GitHub Advanced Security, Snyk, Semgrep, Trivy, Wiz, or similar tooling.Useful, but not required: certs such as OSCP, CSSLP, GPEN, GWAPT, GCSA, or CISSP. Cultural Values We're Looking ForEngineering ...

similar control points. Contributions to open-source security tooling or supply chain security projects. Familiarity with Datadog, AWS Security Hub, Okta, GitHub Advanced Security, Snyk, Semgrep, Trivy, Wiz, or similar tooling. Useful, but not required: certs such as OSCP, CSSLP, GPEN, GWAPT, GCSA, or CISSP. Cultural Values We're Looking ...

Snyk is the leader in secure AI software development, helping millions of developers develop fast and stay secure as AI transforms how software is built. Our AI-native Developer Security Platform integrates seamlessly into development and security workflows, making it easy to find, fix, and prevent vulnerabilities — from code … every developer to innovate securely in the AI era — boosting productivity while reducing business risk. We’re not your average security company - we build Snyk on One Team, Care Deeply, Customer Centric, and Forward Thinking. It’s how we stay driven, supportive, and always one step ahead as AI reshapes ...

Open-Source projects - Experienced with DAST tools such as Burp Suite, OWASP Zap or similar - Experience with SAST/SCA tools such as Snyk, Veracode, Checkmarx or similar - Proficient in one or more of the following languages - Python, JavaScript, .NET or Java - Demonstrated experience with development tools including GitLab/ ...

inputs/outputs, and adherence to resiliency and security expectations Preferred qualifications, capabilities, and skills Experience with cloud security tooling such as Wiz, Snyk, Semgrep, or Trivy Familiarity with policy-as-code tools such as Sentinel, Kyverno, or Checkov Knowledge of software supply chain security concepts including bill of materials ...

unit and integration testing. Nice to have Experience working with Calypso. Experience with code scanning, vulnerability scanning or software composition analysis tools such as Snyk, Veracode, Checkmarx, Black Duck, Sonatype or similar. Familiarity with CVEs and CVSS scoring. Experience with Docker and Kubernetes. Experience working in cloud environments such ...

meet both long-term architectural goals and immediate business needs.Strong focus on software quality, security and operational excellence, with experience using tools such as Snyk, Semgrep and other modern security and code-quality platforms.Interest and practical experience in AI-assisted development, leveraging tools such as GitHub Copilot and Claude ...

scale. SAST/DAST/SCA toolchain design and rollout. Threat modelling as a routine practice, not an event. Familiarity with modern AppSec tooling (Snyk, Wiz, Veracode, Checkmarx, Semgrep, GitHub Advanced Security or equivalents).Cloud security depth on AWS. IAM design, workload identity, network isolation, and integration patterns between application ...

equivalent.Experience with Web, Mobile, Cloud, Infrastructure Pentests and Red Teaming (e.g., phishing)Proven track record of shipping security automation using CodeQL/GHAS, Snyk, or similar. You should be intimately familiar with the SARIF ecosystem and ASPM workflows.Expert-level ability to audit and propose fixes in Kotlin/Java, TypeScript ...

templates Support applications running in Azure App Services, Function Apps and other services Integrate tools for automated testing, code quality and security (e.g. SonarCloud, Snyk) Set up monitoring and incident response with Azure Monitor and Application Insights Manage secrets and access control to support secure cloud practices Work closely with ...

templates Support applications running in Azure App Services, Function Apps and other services Integrate tools for automated testing, code quality and security (e.g. SonarCloud, Snyk) Set up monitoring and incident response with Azure Monitor and Application Insights Manage secrets and access control to support secure cloud practices Work closely with ...

secure handling of inputs/outputs, and adherence to resiliency and security expectationsPreferred qualifications, capabilities, and skillsExperience with cloud security tooling such as Wiz, Snyk, Semgrep, or TrivyFamiliarity with policy-as-code tools such as Sentinel, Kyverno, or CheckovKnowledge of software supply chain security concepts including bill of materials, supply ...

Scanning, or HCL AppScan. • Cloud security posture: AWS Inspector, Microsoft Defender for Cloud, Prisma Cloud, or Wiz. • Container and image vulnerability scanning: Trivy, Snyk, Anchore, or Aqua Security. • Automation and API integration: Python scripting, REST API calls to Qualys/Tenable/Rapid7; ServiceNow VR module configuration. • SIEM integration: Splunk ...

Java, Node.js, Spring, Micronaut, GraphQL, gRPCTesting: JUnit, Mockito, TestcontainersCloud & Infrastructure: Azure, KubernetesData & Messaging: SQL Server, MongoDB, Redis, Ignite, KafkaDevOps & Tooling: GitHub Actions, DynatraceSecurity & Quality: Snyk, Semgrep, WizWhat’s in it for you Working at M&S means being part of something bigger - helping to deliver quality, value and service ...

compliant usage patterns and controls.Preferred Qualifications, Capabilities, and Skills:Experience in platform security, DevSecOps, or engineering-led security teamsFamiliarity with security tools such as Snyk and WizKnowledge of software supply chain security concepts, including SBOM, SLSA, and dependency managementCloud certifications, preferably GCP (e.g., Professional Cloud Architect, Professional DevOps Engineer)Experience ...

generating, managing, and analyzing Software Bills of Materials (SBOMs using frameworks like CycloneDX or SPDX) and integrating them with tools like Dependency-Track or Snyk to track open-source vulnerabilities.Advanced threat modeling experience (e.g., STRIDE-LM) for SIEM data flows, log ingestion pipelines, and vulnerability management platformsExperience architecting vulnerability programs ...

generating, managing, and analyzing Software Bills of Materials (SBOMs using frameworks like CycloneDX or SPDX) and integrating them with tools like Dependency-Track or Snyk to track open-source vulnerabilities. Advanced threat modeling experience (e.g., STRIDE-LM) for SIEM data flows, log ingestion pipelines, and vulnerability management platformsExperience architecting vulnerability ...