101 to 125 of 125 Static Application Security Testing Jobs in the UK

starting with the most painful parts: procurement – where a single purchase can drag on for months, trigger 50+ emails , and pull in Finance, Legal, Security, and IT just to get something approved. We’ve raised $75M from Khosla Ventures, Insight Partners, and Accel to change that. Our AI-native … Security Roadmap, leading implementations and experiments to level up Omnea’s security posture. Own Security Tooling. From safe-chain plugins to SAST/DAST tooling, we want someone who’s keen to get stuck in, onboard, and evolve our tooling to ensure our posture stays ...

Config as Code: Terraform, Ansible, Bicep/ARM, Helm, Kustomize; GitOps via Argo CD and Flux Cloud & Orchestration: AWS, Azure, Docker, Kubernetes AI Inference & Application Infrastructure: Frontier and open-weight models via Anthropic, Azure OpenAI, and Amazon Bedrock; model gateways and routing, retrieval and hybrid search, document ingestion, tool … Elastic/ELK, OpenTelemetry, including GenAI tracing and token, latency, and cost telemetry Platform Security & Policy-as-Code: HashiCorp Vault, OPA/Conftest, SAST/DAST Developer Portal & Self-Service: Internal developer portal, CLIs/SDKs, and APIs Responsibilities include: Developer Experience & Self-Service Enablement Build and maintain self ...

Senior DevOps Engineer Location: Newcastle Upon-Tyne Please Note: Any offer of employment is subject to satisfactory BPSS and SC security clearance which requires 5 years continuous UK address history (typically including no periods of 30 consecutive days or more spent outside of the UK) Accenture is a leading … pipelines supporting frequent, reliable deployments. Drive cloud cost optimisation and resource right‐sizing. Experience implementing security scanning in CI/CD with SAST and DAST Experience with deployment strategies such as Blue/Green or Canary Releases Proven track record of applying analytical and creative thought that translate into ...

patterns. Implement and maintain DevSecOps practices using Azure DevOps, building CI/CD pipelines with automated quality gates such as unit and integration tests, SAST/DAST where applicable, and dependency scanning. Drive observability and production excellence by implementing logging, metrics, and tracing, creating actionable alerts, defining SLOs and SLIs … maintaining high‐quality pull requests. Solid understanding of security, reliability, and operability in a regulated or enterprise environment. experience applying DevSecOps practices including SAST and DAST, and dependency scanning within CI/CD pipelines. Practical knowledge of modern identity and access management, including OAuth2 and OIDC. Additional Skills & Qualifications ...

Active SC Clearance Required We're looking for a Senior DevOps Engineer to join a growing technology company delivering advanced solutions across Defence, National Security and other highly regulated sectors. This is a hands-on role focused on AWS, Kubernetes and DevSecOps, where you'll help build secure, scalable … networking, IAM and security. Strong Kubernetes administration experience. Experience with Terraform, Docker and Linux. Experience with GitHub Actions and Argo CD. Knowledge of DevSecOps, SAST and DAST practices. Automation and scripting skills with Bash, Python or Go. Strong communication and stakeholder management skills. Desirable MLOps or LLMOps experience (SageMaker, Kubeflow ...

Private Links, ELB, Secrets Manager, IAM, RDS, Control Tower Hands on implementation of working with GitLab CICD pipelines and shifting left security (SCA, SAST, DAST) Implement application CICD pipelines for containerised applications both using Docker-Compose on EC2 and EKS using ArgoCD or equivalent GitOps operator Infrastructure ...

building and publishing reusable packages, templates, or internal libraries — with proper versioning, documentation, and consumption patterns Strong understanding of security-first engineering: encoding SAST/DAST integration, secret management, and policy-as-code into central platform assets Ability to work autonomously on complex technical problems while collaborating closely with … skills, subagents, and MCP servers that become the standard AI tooling distributed to all client teams Implement golden path templates — project scaffolding, pipeline configuration, security guardrails, AI-native workflow defaults, etc. Maintain and evolve how platform assets reach engineering teams: versioning, distribution across the appropriate channels (version-controlled component ...

DevOps Engineer Location: Newcastle Upon Tyne Please Note: Any offer of employment is subject to satisfactory BPSS and SC security clearance which requires 5 years continuous UK address history (typically including no periods of 30 consecutive days or more spent outside of the UK) Accenture is a leading global … Vault, AWS Secrets Manager) Maintain scalable CI/CD pipelines supporting frequent, reliable deployments. Experience implementing security scanning in CI/CD with SAST and DAST Experience with deployment strategies such as Blue/Green or Canary Releases Proven track record of applying analytical and creative thought that translate ...

environment As a DevOps Engineer, you will: Work as part of a DevOps team to deliver environments and tools to support the development and testing of features by Accenture and Client Teams. Setup and configure tools such as Gitlab, Jenkins, SonarQube and performance/security/resilience testing … apart: Experience with DevSecOps practices, including Secrets management (e.g. HashiCorp Vault, AWS Secrets Manager) Experience implementing security scanning in CI/CD with SAST and DAST Experience with deployment strategies such as Blue/Green or Canary Releases Proven track record of applying analytical and creative thought that translate ...

have raised $60M in Series C funding from Wellington Management, CRV, Next47 and Y Combinator. About the role We're looking for a Lead Security Engineer to own and mature how Encord secures its people, identities, devices, and the SaaS and AI tools we run the business on. … remediation tracking, and SLAs. Experience building and improving detection and monitoring, centralising logs into a SIEM and defining meaningful alerts. Experience implementing and tuning SAST, DAST, SCA, and secrets scanning in CI/CD pipelines. Experience coordinating external penetration tests and bug reports, and driving fixes to closure with engineering ...

Security Architect L1 contractor to join our Sheffield-based security engineering team. You will embed security controls into DevSecOps workflows, integrating SAST into AI-generated code and securing CI/CD pipelines. The role focuses on implementing secrets scanning, secure code reviews, and security telemetry within … Claude Code environments, collaborating with engineering, security, and operations to protect client systems. #J-18808-Ljbffr ...

improving the way software is built, tested and deployed. You will work closely with development, infrastructure and cloud teams, helping to improve automation, reliability, security and overall engineering efficiency. What you will be doing Design, build and maintain Azure DevOps CI/CD pipelines across multiple environments. Automate build … remediate vulnerabilities across application code, CI/CD pipelines and Azure infrastructure. Integrate security tooling into development and deployment pipelines, including SAST, DAST and dependency scanning. Manage patching and updates across container images, Kubernetes components and Azure resources. Contribute to cloud platform governance, security standards and continuous ...

building and publishing reusable packages, templates, or internal libraries - with proper versioning, documentation, and consumption patterns Strong understanding of security-first engineering: encoding SAST/DAST integration, secret management, and policy-as-code into central platform assets Ability to work autonomously on complex technical problems while collaborating closely with … skills, subagents, and MCP servers that become the standard AI tooling distributed to all client teams Implement golden path templates - project scaffolding, pipeline configuration, security guardrails, AI-native workflow defaults, etc. Maintain and evolve how platform assets reach engineering teams: versioning, distribution across the appropriate channels (version-controlled component ...

building and publishing reusable packages, templates, or internal libraries - with proper versioning, documentation, and consumption patterns Strong understanding of security-first engineering: encoding SAST/DAST integration, secret management, and policy-as-code into central platform assets Ability to work autonomously on complex technical problems while collaborating closely with … skills, subagents, and MCP servers that become the standard AI tooling distributed to all client teams Implement golden path templates - project scaffolding, pipeline configuration, security guardrails, AI-native workflow defaults, etc. Maintain and evolve how platform assets reach engineering teams: versioning, distribution across the appropriate channels (version-controlled component ...

maintainable and scalable standard Implement and oversee platform-level improvements and tools focused on performance, scalability and resilience Manage backend cybersecurity, ensuring compliance through SAST, SCA and DAST scans Develop and maintain monitoring solutions, tracking and delivering cost optimisation initiatives Provide infrastructure input into development planning and architecture discussions Collaborate … DevOps desirable) Familiarity with monitoring, automation and containerisation/orchestration (Docker/Kubernetes) Strong collaboration and problem‐solving abilities Knowledge of cybersecurity practices, including static and dynamic scanning standards Familiarity with modern DevOps pipelines and platform architecture Awareness of platform‐level monitoring, benchmarking and automation principles Degree in Computer ...

functional requirements. Operating at a strategic level, you’ll mentor engineers, build strong relationships with senior stakeholders, and influence the adoption of forward-thinking testing practices (such as AI-assisted testing) across our entire QA practice. Key aspects of the role include: Squad Leadership & Strategy: Partnering with cross … policy validation, rate limiting, and OAuth 2.0/Entra ID JWT authentication). Experience embedding DevSecOps and security quality gates (such as SonarQube SAST, DAST, or container scanning) within CI/CD pipelines. Exposure to service virtualisation (e.g., WireMock or policy stubs) and synthetic test data management to ensure ...

Orchestration). CI/CD & DevSecOps: GitLab CI/CD pipelines, on-premises GitLab server, GitLab Runner fleet, and shift-left security (SCA, SAST, DAST). Containers & GitOps: Docker-Compose on EC2, EKS, and ArgoCD. Artifact Management: Support for self-managed JFrog Artifactory & Xray. Scripting: Developing automation scripts, Docker ...

Orchestration). CI/CD & DevSecOps: GitLab CI/CD pipelines, on-premises GitLab server, GitLab Runner fleet, and shift-left security (SCA, SAST, DAST). Containers & GitOps: Docker-Compose on EC2, EKS, and ArgoCD. Artifact Management: Support for self-managed JFrog Artifactory & Xray. Scripting: Developing automation scripts, Docker ...

service meshes. Contribute to the Kong AI Gateway, including Dataplane deployments, ACM/SSL integration, and observability via DataDog Champion DevSecOps maturity by embedding SAST/DAST, chaos engineering, and error budget monitoring. Collaborate with Security, Data, and AI teams to shape DevOps and AI platform architectures with regulatory … OpenTelemetry. Strengthening platform security through Vault‐based secret management, least privilege access, and compliance automation. Designing CI/CD workflows that include SAST, DAST, policy enforcement, and performance telemetry. Improving reliability and resilience through SLOs, error budgets, and chaos engineering. Working knowledge of LLM‐based services and AI infrastructure. ...

where current AI tooling helps and where it falls short. Apply engineering practices that hold up in production: TDD, secrets management and rotation, SAST/DAST, structured logging, metrics, tracing, and automated CI/CD (GitHub Actions, Jenkins). Own what you build end‐to‐end, including the infrastructure … tools (Claude Code, Cursor, GitHub Copilot) with demonstrable workflows, sub‐agents, skills, and innovative approaches. Strong Python or TypeScript, with OOP, SOLID, 12‐factor application development, and microservice architecture. You've built Next.js applications, FastAPI services, and similar. End‐to‐end implementation experience with vector databases, retrieval pipelines ...

Location: London, UK### Work Mode: Remote### Experience: 10-15 Years### Job Description:We are hiring a hands-on technical leader to own the architecture, security posture and delivery quality of our business-critical ERP applications. You will write and review production code, set architectural direction. You will also work … vulnerabilities, SQL Injection, DDOS, XSS* Partner with infrastructure/DevOps on CI/CD (Jenkins, GitHub Actions), containerization and AWS hosting.* Implement and operationalize SAST and DAST in CI/CD pipelines, and triage and close findings.* Conduct vulnerability assessments and remediate issues in live production systems.* Run security ...

seeking a skilled Security Engineer to join our Security Engineering team. You will be embedded with a devolved product team, promoting secure SDLC practices across the development lifecycle and helping build and operate bespoke security services for ITV. In this … hybrid UK-wide role, you will advise engineers, implement cloud-native security controls, and support the rollout of commercial tooling such as SIEM, SAST and CNAPP across ITV. #J-18808-Ljbffr ...

occasional site travel £500 - £550 Likely Outside IR35 12 months Bright Purple are looking for an experienced Cyber Engineering Contractor to join a global security technology manufacturer as it prepares for the EU Cyber Resilience Act (CRA). This is a hands‐on, delivery‐focused role working across multiple … working independently across multiple engineering teams Strong stakeholder management and communication skills OT/ICS, PLC and HMI experience would be a real plus SAST, SCA and SBOM tooling experience is highly desirable Background in manufacturing, defence, critical infrastructure or other regulated product environments is a bonus You’ll support ...

discovery and analytical solutions across multiple asset classes. Working alongside Senior and Principal Engineers, you will take part in the analysis, design, development and testing of new features and changes, and see them through to production. You will also work directly with end users, including the quant team … Perl or Ruby) Windows PowerShell or Linux shell experience Exposure to other languages such as C#, Java or Python Awareness of secure coding practices (SAST) Role Band & Level Professional/5 #LI-Hybrid #LI-ASO Company Statement We know that the best innovation happens when diverse people with different perspectives ...

discovery and analytical solutions across multiple asset classes. Working alongside Senior and Principal Engineers, you will take part in the analysis, design, development and testing of new features and changes, and see them through to production. You will also work directly with end users, including the quant team … Perl or Ruby)* Windows PowerShell or Linux shell experience* Exposure to other languages such as C#, Java or Python* Awareness of secure coding practices (SAST) **Role Band & Level*** Professional/5 #LI-Hybrid #LI-ASO**Not The Perfect Fit?**Concerned that you may not meet the criteria precisely ...