51 to 75 of 125 Static Application Security Testing Jobs in the UK

thousands of restaurant, grocery and convenience partners across the globe. About this role At Just Eat Takeaway.com, we’ve built a world-class security team that believes passionately in protecting our products, as well as the data of our customers and employees. As an application security engineer … technology Detailed knowledge of OWASP Top 10, and in relation how to design appropriate security controls Experience working with Secure Coding Tools (SCA, SAST & Secrets) Experience in identifying & addressing vulnerabilities throughout SDLC, with the ability to switch between defensive & offensive mindset Experience securing AI-enabled applications and assessing common ...

websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent … feature design, triage a complex bug bounty submission, or work directly with engineering teams to resolve vulnerabilities from different sources like bug bounties, SAST, fuzzing and penetration tests. You will also work autonomously to identify areas where our manual processes slow down. You will write code and integrate AI/ ...

would be joining! What you'll be doing Modify, maintain, and extend our security tooling across engineering and IT environments, including CSPM, SAST, SCA, and secret scanning, ensuring it's reliable, well tuned, and genuinely useful to the teams who depend on it. Use our tooling and your … code changes. Cloud Security experience is required. Secured containerised workloads and infrastructure‐as‐code, catching issues before they reach production. Experience working with SAST, SCA, and secret scanning tools, including triaging findings, filtering out false positives, and partnering with engineering teams to get real fixes shipped Supported compliance efforts ...

partnering with a leading UK financial services organisation to hire an Application Security Engineer. You will focus on secure code reviews, SAST/DAST, vulnerability assessments and embedding security throughout the CI/CD lifecycle. The role requires experience with OWASP Top 10, Veracode, DevSecOps, and cloud … security across Azure/AWS, plus Kali Linux for manual testing. Hybrid work in London, Manchester or Glasgow with in-office presence ~1 day per week. #J-18808-Ljbffr ...

partnering with a leading UK financial services organisation to hire an Application Security Engineer. You will focus on secure code reviews, SAST/DAST, vulnerability assessments and embedding security throughout the CI/CD lifecycle. The role requires experience with OWASP Top 10, Veracode, DevSecOps, and cloud … security across Azure/AWS, plus Kali Linux for manual testing. Hybrid work in London, Manchester or Glasgow with in-office presence ~1 day per week. #J-18808-Ljbffr ...

partnering with a leading UK financial services organisation to hire an Application Security Engineer. You will focus on secure code reviews, SAST/DAST, vulnerability assessments and embedding security throughout the CI/CD lifecycle. The role requires experience with OWASP Top 10, Veracode, DevSecOps, and cloud … security across Azure/AWS, plus Kali Linux for manual testing. Hybrid work in London, Manchester or Glasgow with in-office presence ~1 day per week. #J-18808-Ljbffr ...

team of great engineers, delivery managers and architects on several topics i.e., Cloud Platform Design, On‐prem to Cloud Migration, Automated Deployment, Infrastructure Provisioning, Security Testing and many more. You will work on different Platform Engineering, Platform Operations and Platform Security projects and collaborate with Product, Architecture … with WAF, security logging, monitoring and alerting, privileged access management, secrets management and vulnerability management. You’ll also know security scanning tools (SAST, DAST, open‐source and container scanning) and how to apply security controls across data, infrastructure and applications. Resilience and delivery: Experience with business continuity ...

visit us at www.wipro.com. Job Description Sheffield DevSecOps Engineer Role Purpose Embed security controls into the developer workflows that use Claude Code, including SAST integration on AI-generated code, secrets scanning, and secure CI/CD pipeline design. Key Responsibilities Integrate SAST tools (SonarQube, Semgrep, Checkmarx) into CI/…/Experience 5+ years in DevSecOps or application security. Strong CI/CD pipeline experience (GitHub Actions, GitLab CI, Jenkins). Experience with SAST, DAST, and secrets scanning tooling. Application security knowledge: OWASP Top 10, secure coding practices. Scripting: Python, Bash, or similar. Desirable Skills/Experience ...

## Digital Product Manager Expert - Security Platforms (hybrid/remote)Apply: Hybrid: Belfast 10 Mays Meadow: Der-Derry/Londonderry: Full time: Posted Today: End Date: October 20, 2026 (7 days left to apply): R35395At Allstate, great things happen when our people work together to protect families and their … Understanding of CI/CD pipelines, policy-as-code, and automation in security workflows.**Desirable Skills:*** Familiarity with application security tools (SAST, DAST, SCA), secrets management (Vault/KMS), IAM/PAM, vulnerability management, and cloud security posture management.* Experience with cloud platforms (Azure/ ...

Brex is seeking a Senior Application Security Engineer to identify and remediate vulnerabilities across the Brex platform. You will perform code reviews, penetration testing, and tooling development … support secure developer workflows. You will collaborate across Security Operations, GRC, Product Security, Front End Platform, and IT Infrastructure, applying threat modeling, SAST/DAST, and agentic AI security to protect a global financial service used by top customers. #J-18808-Ljbffr ...

telematics, and, more recently, device and identity protection. We are seeking an experienced Digital Product Manager to lead the strategy, roadmap, and delivery of security-focused products that protect enterprise assets and enable secure-by-default development practices for the Product Security team. This role will … Understanding of CI/CD pipelines, policy-as-code, and automation in security workflows. Desirable Skills Familiarity with application security tools (SAST, DAST, SCA), secrets management (Vault/KMS), IAM/PAM, vulnerability management, and cloud security posture management. Experience with cloud platforms (Azure/ ...

backlog age, coverage, recurrence rate) to senior stakeholders. Drive security into the team's normal engineering rhythm. Embed threat modelling, secure code review, SAST, SCA, dependency policy, and container scanning into design and delivery cycles — building the tooling and automation that make this the default, not a specialist handover … familiarity Deep familiarity with structured threat modelling approaches — STRIDE, MITRE ATT&CK, attack trees — and experience embedding these into agile delivery ceremonies. Experience integrating SAST, SCA, dependency scanning, and container security tooling into CI/CD pipelines as part of a shift-left security approach, including building custom ...

neurodivergent candidates. We offer reasonable adjustments throughout the hiring process and are dedicated to creating a supportive, accessible environment for everyone. Location and Eligibility Security Engineering Lead Location: Hampshire (onsite 5 days per week) Due to the nature of the work and the customers we support, the successful candidate … security controls, identity management, and threat-mitigation patterns across cloud and hybrid infrastructures. DevSecOps Integration: Oversee the embedding of automated security scanning (SAST, DAST, SCA, container scanning) into delivery pipelines. Risk & Governance: Collaborate with accreditors, Risk Owners, and project leadership to navigate security case approvals and risk ...

underrepresented groups, and neurodivergent candidates. We offer reasonable adjustments throughout the hiring process and are dedicated to creating a supportive, accessible environment for everyone. Security Engineering Lead Location: Hampshire (onsite 5 days per week) Due to the nature of the work and the customers we support, the successful candidate … security controls, identity management, and threat-mitigation patterns across cloud and hybrid infrastructures. DevSecOps Integration: Oversee the embedding of automated security scanning (SAST, DAST, SCA, container scanning) into delivery pipelines. Risk & Governance: Collaborate with accreditors, Risk Owners, and project leadership to navigate security case approvals and risk ...

underrepresented groups, and neurodivergent candidates. We offer reasonable adjustments throughout the hiring process and are dedicated to creating a supportive, accessible environment for everyone. Security Engineering Lead Location: Hampshire (onsite 5 days per week) Due to the nature of the work and the customers we support, the successful candidate … security controls, identity management, and threat-mitigation patterns across cloud and hybrid infrastructures. DevSecOps Integration: Oversee the embedding of automated security scanning (SAST, DAST, SCA, container scanning) into delivery pipelines. Risk & Governance: Collaborate with accreditors, Risk Owners, and project leadership to navigate security case approvals and risk ...

underrepresented groups, and neurodivergent candidates. We offer reasonable adjustments throughout the hiring process and are dedicated to creating a supportive, accessible environment for everyone. Security Engineer (Scrum) Location: Hampshire (onsite 5 days per week) Due to the nature of the work and the customers we support, the successful candidate … security controls, identity management, and threat-mitigation patterns across cloud and hybrid infrastructures. DevSecOps Integration: Oversee the embedding of automated security scanning (SAST, DAST, SCA, container scanning) into delivery pipelines. Risk & Governance: Collaborate with MOD accreditors, Risk Owners, and project leadership to navigate security case approvals ...

underrepresented groups, and neurodivergent candidates. We offer reasonable adjustments throughout the hiring process and are dedicated to creating a supportive, accessible environment for everyone. Security Engineering Lead Location: Hampshire (onsite 5 days per week) Due to the nature of the work and the customers we support, the successful candidate … security controls, identity management, and threat-mitigation patterns across cloud and hybrid infrastructures. DevSecOps Integration: Oversee the embedding of automated security scanning (SAST, DAST, SCA, container scanning) into delivery pipelines. Risk & Governance: Collaborate with accreditors, Risk Owners, and project leadership to navigate security case approvals and risk ...

underrepresented groups, and neurodivergent candidates. We offer reasonable adjustments throughout the hiring process and are dedicated to creating a supportive, accessible environment for everyone. Security Engineer (Scrum) Location: Hampshire (onsite 5 days per week) Due to the nature of the work and the customers we support, the successful candidate … security controls, identity management, and threat-mitigation patterns across cloud and hybrid infrastructures. DevSecOps Integration: Oversee the embedding of automated security scanning (SAST, DAST, SCA, container scanning) into delivery pipelines. Risk & Governance: Collaborate with MOD accreditors, Risk Owners, and project leadership to navigate security case approvals ...

Security Engineer, AWS, DevSecOps Day rate: £650 per day (Outside IR35) Location: London 1 day week Role: Security Engineer Length: 6 months We're supporting a major transformation programme and are looking for a Security Engineer to help deliver and maintain security controls across multiple technology … DevSecOps or Platform Engineering background. AWS, IAM, Kubernetes and container security experience. Terraform and Infrastructure-as-Code. CI/CD security tooling (SAST, SCA, container and IaC scanning). Python and/or Bash scripting. Vulnerability Management, CVSS and risk assessment experience. Previous experience within a regulated environment. ...

underrepresented groups, and neurodivergent candidates. We offer reasonable adjustments throughout the hiring process and are dedicated to creating a supportive, accessible environment for everyone. Security Engineer (Scrum) Location: Hampshire (onsite 5 days per week) Due to the nature of the work and the customers we support, the successful candidate … security controls, identity management, and threat-mitigation patterns across cloud and hybrid infrastructures. • DevSecOps Integration: Oversee the embedding of automated security scanning (SAST, DAST, SCA, container scanning) into delivery pipelines. • Risk & Governance: Collaborate with MOD accreditors, Risk Owners, and project leadership to navigate security case approvals ...

platform deployment automation and operational controls that underpin entitlement authorization and event driven services The successful candidate will play a critical role in embedding security reliability observability and quality into the software delivery lifecycle enabling engineering teams to build test deploy and operate applications through consistent and automated pathways.Hybrid … container networking and runtime configurationsImplement and enhance platform observability through metrics dashboards alerting structured logging and distributed tracingIntegrate security and quality controls including SAST container scanning dependency scanning code quality analysis and vulnerability managementAutomate secure configuration management secrets handling certificate deployment and compliance evidence generationDesign deployment resilience strategies including ...

auditable pipelines. The Role You’ll provide technical ownership of secure software supply-chain controls across the organisation. You’ll work closely with engineering, security and application teams to embed appropriate security controls into delivery pipelines without creating unnecessary friction. Your responsibilities will include: Administering and supporting … stacks. Managing GitHub Enterprise , including repositories, branching, pull requests, permissions, releases and integration with security/build tooling. Embedding security controls including SAST, software composition analysis, dependency and artefact scanning, secrets detection, SBOM generation and policy-based gates. Managing vulnerabilities from initial discovery and technical triage through ownership ...

industries to create a safer, sustainable and more connected world. Why you should join: Join a team where you'll shape cutting‐edge security architecture across embedded systems, cloud platforms, and mobile applications while driving compliance with leading industry standards. You'll play a key role in strengthening product … TARA activities and maintain risk tracking through the security case and register. Secure Development & DevSecOps Integrate security into CI/CD pipelines (SAST, DAST, SCA, container/IaC scans, SBOM) and define release gates. Maintain security workflows and coach engineers on secure coding and threat‐driven design. ...

## Director, Senior Security ArchitectApply: London: Full time: Posted Today: JR2001275## **About Bullish**## Bullish is an institutionally focused global digital asset platform that provides market infrastructure and information services. These include: **Bullish** **Exchange** – a regulated and institutionally focused digital assets spot and derivatives exchange, integrating a high-performance … frameworks (OWASP Top 10, SANS CWE Top 25).* Solid grasp of enterprise software development, Agile, CI/CD pipelines, and security tooling (SAST, DAST, OSA, Vulnerability Management, API traceability).* Excellent ability to convey complex technical risks to non-technical executives and engineers and build strong cross-functional ...

Security Engineer Office location; UK Wide | Hybrid, London, Manchester, Leeds Main purpose of the role: ITV is currently seeking a skilled Security Engineer to join our Security Engineering team. This role will be embedded with one of our devolved product teams, and will involve promoting and embedding … that our Cyber Security team provides to the business. You will also support the implementation of commercial security tooling, such as SIEM, SAST, and CNAPP. This is a fantastic opportunity to make a real difference to our ‘More than TV’ strategy and play a critical role in securing ...