26 to 50 of 125 Static Application Security Testing Jobs in the UK

love to hear from you About the role We're a regulated payments fintech operating across multiple European markets, scaling into banking-licence territory. Security Engineering is being rebuilt around a joint operating model with our product, platform, and infrastructure teams. We're hiring a Principal Security Engineer … when they do. Pipeline-embedded controls. Work with the platform team to extend policy-as-code and build upon existing pipeline security toolchain (SAST, SCA, secrets, or DAST for example). Checks that run in the pipeline and produce signal engineers trust, not noise they learn to ignore. Threat ...

with peer-to-peer patch distribution and real-time vulnerability assessment without requiring a VPN, Action1 eliminates routine IT labor, helps prevent ransomware and security risks, and protects the digital employee experience. In 2025, Action1 was recognized by Inc. 5000 as the fastest-growing private software company in America … architecture to identify security issues early Conduct threat modeling and security design reviews Improve security automation in engineering workflows Support SAST, SCA, secrets scanning, and other security controls Maintain SBOMs, dependency visibility, and remediation follow-up Support security assessments, vulnerability assessments, and penetration testing ...

DESCRIPTION Lead Pre-Sales Architect - Cyber Security POSITION DETAILS Position title: Lead Pre-Sales Architect - Cyber Security Reports to (position): Head of Technical Pre-Sales Team: Technical Pre-Sales Department: Services & Solutions ABOUT BYTES Bytes provides technology services and solutions that help customers achieve secure, practical and sustainable … Centre and Cloud Security, including CNAPP, micro‐segmentation, CSPM and cloud workload protection. Application Security and DevSecOps, including email security, SAST, DAST, software supply chain security and WAF. AI Security, including LLM protection, prompt injection defence, model security and AI governance. Data Security ...

Technology Delivery Lead: Cyber Security UK - London Technology Delivery Lead: Cyber Security Location: London (Hybrid) | Practice Area: Technology & Engineering | Type: Permanent Lead the delivery of security initiatives that safeguard the future of digital finance. The Role As a Security Delivery Lead at Capco, you’ll lead … human judgement and an understanding of responsible use, review and escalation Bonus Points For Familiarity with DevSecOps practices and security tooling such as SAST, SCA, DAST, container scanning, SIEM, firewalls or IAM solutions Experience delivering Zero Trust, cloud security, security transformation or regulatory remediation initiatives Relevant certifications ...

ambitions but needs more excellent minds to challenge the status-quo and help it reach new horizons. Where you come in? As our Senior Application Security Engineer, you’ll empower our engineering and product teams to safely adopt AI and embed robust technical security controls directly into … beneficial) and network infrastructure. Solid understanding of the Kubernetes ecosystem, Docker, and container security. Experience implementing and managing security testing programs (SCA, SAST, DAST) within pipelines like GitHub Actions, alongside release packaging and artifact management. Capability to develop secure, automated infrastructure using Terraform. You enjoy learning about both ...

production environments. Security & Quality Embed security and quality directly into the standard pipeline. You Will Work With Technologies And Practices Including SonarQube SAST DAST Dependency scanning CVE/vulnerability scanning Container/image scanning Image signing Security and quality thresholds Automated quality gates The objective … environments Automation & Scripting PowerShell Python Bash or other scripting languages beneficial Observability Prometheus Grafana Datadog Security & Software Supply Chain SonarQube Snyk or equivalent SAST DAST Dependency/CVE scanning Image/container signing Software supply-chain security Application Technologies The Pipelines Will Primarily Support C#/.NET ...

Ripjar was founded by veterans of GCHQ to bring national security-grade intelligence tools to the fight against financial crime. Financial crime funds human trafficking, terrorism, corruption and sanctions evasion on a global scale, and the organisations on the front line need technology built to match the threat. Today … tools such as Bash, Python, JavaScript, and GitHub Actions. Knowledge of how to effectively use security testing and monitoring tooling, e.g. SAST and SIEM products. Knowledge of how to configure monitoring tooling for application and infrastructure metrics, e.g. Prometheus, Datadog, Open Telemetry Candidates with the following background ...

continuous innovation culture. What you’ll be doing As a DevOps Engineer at Ripjar you will be responsible for ensuring the reliability and security of the infrastructure that underpins our development and operational services. You will play an active role in supporting and continuously improving our core infrastructure offering … tools such as Bash, Python, JavaScript, and GitHub Actions. Knowledge of how to effectively use security testing and monitoring tooling, e.g. SAST and SIEM products. Knowledge of how to configure monitoring tooling for application and infrastructure metrics, e.g. Prometheus, Datadog, Open Telemetry Candidates with the following background ...

Oliver James Group is seeking an Application Security Engineer in Manchester, working on-site three days per week. You will shield software applications from cyber threats … embedding security across the development lifecycle and collaborating with development and security teams. Responsibilities include AI-specific security testing, SAST/DAST, vulnerability remediation, and risk assessments, with a strong emphasis on staying ahead of emerging threats and ensuring secure coding practices across #J-18808-Ljbffr ...

default standards, patterns, guardrails, and risk exceptions Lead threat modelling for new features and architectural changes, turning findings into practical engineering work Drive SAST/DAST adoption and quality, from tool tuning to severity calibration and developer-facing triage guidance Support product teams adopting AI, including LLMs, SLMs … C# ecosystem, with exposure to Java or Python Strong knowledge of the OWASP Top 10 and practical mitigation patterns Experience implementing or improving SAST/DAST processes: tool tuning, triage workflows, and reducing signal to noise Working understanding of cloud and container security fundamentals, ideally with AWS and Docker ...

Technical Security Consultant required to support the development and continuous improvement of a Secure Software Development Lifecycle (SDLC) capability. This is a technical assurance role combining Secure SDLC, DevSecOps, application security and architecture expertise to assess control effectiveness, tooling coverage and adoption across modern engineering environments. … SDLC controls across design, development, testing, release and operation. Review security architecture, tooling coverage, integration dependencies and control gaps. Assess capabilities including SAST, SCA, DAST, secrets scanning, IaC scanning, API security, threat modelling and CI/CD security. Map controls against frameworks including NIST SSDF, OWASP SAMM ...

Information Security Architecture & Engineering Lead forms the technical heart of PCI Pal's Information Security function. The role owns cloud architecture review, DevSecOps and secure SDLC practice, security automation and tooling, and security architecture strategy for the organisation, replacing reactive, post-deployment triage with design-stage … ahead of Engineering's roadmap, not behind it. DevSecOps & Secure SDLC Own CI/CD security gates and Infrastructure-as-Code scanning (e.g. SAST and successor tooling), working jointly with Development Team. Develop and maintain security automation, integration and validation tooling using Python and C#/.NET, with ...

looking for a Senior Application Security Engineer to join our expanding Information Security team. If you are a hands‐on AppSec expert who enjoys working deep in the SDLC, partnering with talented engineers and building security into fast‐moving delivery pipelines, this role gives … following skills and experience Proficient in writing Terraform, Python and ideally KQL. Significant hands‐on experience with implementing and operating code scanners including SAST, DAST, IAST and SCA. Experience of automating security capabilities and delivering security or policy as code using tools such as OPA or Azure Policy. ...

combining brownfield regeneration opportunities with cleaner, efficient, scalable compute capacity for healthcare, research, finance, enterprise, and public-sector organisations. We are seeking a Security Engineer to design, implement, and continuously improve security controls across our next-generation AI infrastructure and datacentre operations. This role focuses on protecting Kubernetes … security assessments to identify risks and recommend mitigations. Application & DevSecOps Security Integrate security controls into CI/CD pipelines, including SAST, DAST, dependency scanning, container image scanning, and secrets detection. Partner with development teams to implement secure coding practices and remediate security findings. Conduct threat ...

Security Engineer to join its security function. You’ll work closely with engineering and DevSecOps teams, focusing on secure code reviews, SAST/DAST, vulnerability assessments and embedding security throughout the CI/CD lifecycle. You will also do some pre-release manual PenTesting and threat … modelling work. You’ll need strong application security experience, including OWASP Top 10, Veracode or similar scanning tools, DevSecOps/CI/CD and cloud security across Azure and/or AWS. You will also need experience of Kali Linux and some manual PenTesting skills (from either ...

Security Engineer to join its security function. You’ll work closely with engineering and DevSecOps teams, focusing on secure code reviews, SAST/DAST, vulnerability assessments and embedding security throughout the CI/CD lifecycle. You will also do some pre-release manual PenTesting and threat … modelling work. You’ll need strong application security experience, including OWASP Top 10, Veracode or similar scanning tools, DevSecOps/CI/CD and cloud security across Azure and/or AWS. You will also need experience of Kali Linux and some manual PenTesting skills (from either ...

Security Engineer to join its security function. You’ll work closely with engineering and DevSecOps teams, focusing on secure code reviews, SAST/DAST, vulnerability assessments and embedding security throughout the CI/CD lifecycle. You will also do some pre-release manual PenTesting and threat … modelling work. You’ll need strong application security experience, including OWASP Top 10, Veracode or similar scanning tools, DevSecOps/CI/CD and cloud security across Azure and/or AWS. You will also need experience of Kali Linux and some manual PenTesting skills (from either ...

pipelines across applications, APIs, and cloud platforms Develop and manage infrastructure as code with security-first principles Integrate automated security testing (SAST, DAST, dependency, container scanning) into the SDLC Embed threat modeling and security review gates into engineering workflows Monitor, detect, and respond to security … Considered Experience with healthcare regulatory frameworks (HIPAA, HITECH, CMS) Hands-on experience with Infrastructure as Code tools (Terraform, CloudFormation, ARM/Bicep) Proficiency with SAST/DAST, dependency/container scanning, and cloud security posture management Solid understanding of IAM, encryption, key management, and secure architecture principles Relevant security ...

000.00 (Based on the experience) Job Open date: 16th October 2026 Close date: 15th November 2026 Job Overview We are seeking a skilled Cyber Security Analyst to support our organisation’s information security, risk management, governance and compliance activities. The successful candidate will be responsible for conducting security … Apply the Secure Software Assurance Maturity Model to assess client compliance requirements for new products and architecture changes. Manage vulnerability assessments using Qualys, conduct SAST using SonarQube and DAST using WebInspect, prioritise remediation and support penetration testing. Support privileged access management using CyberArk, maintain access controls and review audit logs ...

platform (from CI/CD pipelines to multi‐tenant APIs to incident response on authentication flows). Responsibilities Own the secure SDLC: drive SAST, dependency scanning, secrets detection, and PR‐blocking standards across every repository. Harden our AWS and Cloudflare estate: IAM, secrets, network segmentation, KMS, WAF, GuardDuty, and zero … infra: AWS (ECS, RDS, Lambda, KMS, GuardDuty, Security Hub, Inspector), Cloudflare (Workers, WAF, Zero Trust) IaC: AWS CDK, Terraform Security tooling: Aikido (SAST, DAST, container scanning, pen testing), 1Password, GitHub (org‐level enforcement, Advanced Security) Compliance & ops: Drata, Iru, EasyLlama Observability & IR: Datadog, Sentry, Logfire, Incident.io ...

Internet of Things. Reply’s services include Consulting, System Integration, and Digital Services. Role Overview: We are looking for a hands-on Cloud Security Engineer to join our growing cybersecurity practice. This is an engineering-first role so we are looking for someone who builds, configures, and secures cloud … Code (Terraform), including reusable, security-hardened modules and reference patterns Integrate security tooling and automated controls intoCI/CD pipelines, including SAST/DAST tooling, secrets scanning, and policy-as-code enforcement Conduct threat modelling exercises, cloud security posture reviews, and risk assessments for cloud platforms ...

Cleared Cloud Security Engineer Location: UK – Fully Remote Contract: Up to 12 months Clearance: Active UK SC Clearance required Rate: Up to £480/day Outside IR35 We are looking for an experienced SC Cleared Cloud Security Engineer to join a hands-on cloud security engineering team … security guardrails, including Service Control Policies, AWS Config, Security Hub and GuardDuty Integrate security testing into GitHub Actions pipelines, including SAST, dependency scanning, IaC scanning and secrets detection Triage and address security findings identified through CI/CD security tooling Implement secrets ...

innovation and ready to make an impact at scale, we’d love to hear from you. Reporting to the CISO, you'll own the security roadmap for Pigment's product, infrastructure, and CI/CD environment, and you'll build much of it yourself. This is a hands … pipeline. AI-powered security reviews reason about a diff semantically rather than pattern-matching it, which is genuinely different from classic SAST - but it's not a drop-in replacement, and figuring out the split between AI review, traditional SAST and SCA is an open question we'd like ...

Windows desktop, web and firmware products. Security Scanning: Implement and operate automated security testing within those pipelines, including static analysis (SAST), dependency analysis (SCA), secret detection, dynamic testing (DAST), vulnerability scanning and SBOM generation, with quality gates and clear, consolidated reporting. Vulnerability Management: Triage scanner … managing images and registries, and running builds in containers. Security Fundamentals: Hands-on exposure to security tooling in a development pipeline (e.g. SAST, dependency or vulnerability scanning), the ability to interpret a CVE and judge its real impact, and a sound grasp of least privilege, secrets management ...

vision is simple: to empower every player to reach their full potential, while keeping competition fair, engaging, and thrilling. The Role The Senior Security Engineer leads the evolution of EFG's information security posture by architecting and overseeing the implementation of enterprise security tools, platforms, and frameworks … Development Life Cycle (SSDLC) Leadership: Lead the integration of security-as-code within the CI/CD pipeline. Architect the automated deployment of SAST, DAST, and SCA tooling, and partner with Engineering leads to define security gating criteria. Provide expert-level remediation guidance for complex architectural flaws ...