17 of 17 Remote/Hybrid Static Application Security Testing Jobs in the UK excluding London

including automated testing and policy enforcement Design and implement application security controls, including: Static Application Security Testing (SAST) Dynamic Application Security Testing (DAST) Software Composition Analysis (SCA)/dependency scanning Secrets and credentials scanning Work with engineering teams to ensure … integrating DevSecOps tooling within CI/CD environments (e.g. GitLab pipelines) Experience with application security testing tools and practices, including: SAST, DAST, SCA/dependency scanning andSecrets/credentials scanning. Experience contributing to security design reviews for applications and APIs Experience supporting or participating in penetration ...

security design reviews for new applications, APIs, integrations, and significant technology changes Select, implement, and manage application security tooling including SAST, DAST, SCA, and secrets detection platforms Review security testing results, assess risk, and provide clear recommendations to engineering teams on remediation and resolution activities … principles, secure coding practices, and common vulnerability classes including the OWASP Top 10 Hands‐on experience with application security tooling including SAST, DAST, SCA, secrets management, and vulnerability assessment tools Experience integrating security controls into CI/CD pipelines and cloud‐native development environments Strong understanding ...

application security. Carry out ongoing manual security assessments, coordinate third-party engagements where needed, and turn findings into clear, prioritised actions. Review SAST, DAST and SCA outputs, driving remediation through to closure and keeping tracking, ownership and prioritisation firmly on course. Provide on-demand application security … GitHub Actions, with the confidence to bring security into delivery without slowing everyone down. Practical experience with security tooling and practices including SAST, DAST, SCA, container scanning, vulnerability management, SBOM tooling such as CycloneDX, IaC security across Terraform, Bicep, Ansible and tools such as Trivy, plus Policy ...

Ripjar was founded by veterans of GCHQ to bring national security-grade intelligence tools to the fight against financial crime. Financial crime funds human trafficking, terrorism, corruption and sanctions evasion on a global scale, and the organisations on the front line need technology built to match the threat. Today … tools such as Bash, Python, JavaScript, and GitHub Actions. Knowledge of how to effectively use security testing and monitoring tooling, e.g. SAST and SIEM products. Knowledge of how to configure monitoring tooling for application and infrastructure metrics, e.g. Prometheus, Datadog, Open Telemetry Candidates with the following background ...

continuous innovation culture. What you’ll be doing As a DevOps Engineer at Ripjar you will be responsible for ensuring the reliability and security of the infrastructure that underpins our development and operational services. You will play an active role in supporting and continuously improving our core infrastructure offering … tools such as Bash, Python, JavaScript, and GitHub Actions. Knowledge of how to effectively use security testing and monitoring tooling, e.g. SAST and SIEM products. Knowledge of how to configure monitoring tooling for application and infrastructure metrics, e.g. Prometheus, Datadog, Open Telemetry Candidates with the following background ...

default standards, patterns, guardrails, and risk exceptions Lead threat modelling for new features and architectural changes, turning findings into practical engineering work Drive SAST/DAST adoption and quality, from tool tuning to severity calibration and developer-facing triage guidance Support product teams adopting AI, including LLMs, SLMs … C# ecosystem, with exposure to Java or Python Strong knowledge of the OWASP Top 10 and practical mitigation patterns Experience implementing or improving SAST/DAST processes: tool tuning, triage workflows, and reducing signal to noise Working understanding of cloud and container security fundamentals, ideally with AWS and Docker ...

partnering with a leading UK financial services organisation to hire an Application Security Engineer. You will focus on secure code reviews, SAST/DAST, vulnerability assessments and embedding security throughout the CI/CD lifecycle. The role requires experience with OWASP Top 10, Veracode, DevSecOps, and cloud … security across Azure/AWS, plus Kali Linux for manual testing. Hybrid work in London, Manchester or Glasgow with in-office presence ~1 day per week. #J-18808-Ljbffr ...

partnering with a leading UK financial services organisation to hire an Application Security Engineer. You will focus on secure code reviews, SAST/DAST, vulnerability assessments and embedding security throughout the CI/CD lifecycle. The role requires experience with OWASP Top 10, Veracode, DevSecOps, and cloud … security across Azure/AWS, plus Kali Linux for manual testing. Hybrid work in London, Manchester or Glasgow with in-office presence ~1 day per week. #J-18808-Ljbffr ...

## Digital Product Manager Expert - Security Platforms (hybrid/remote)Apply: Hybrid: Belfast 10 Mays Meadow: Der-Derry/Londonderry: Full time: Posted Today: End Date: October 20, 2026 (7 days left to apply): R35395At Allstate, great things happen when our people work together to protect families and their … Understanding of CI/CD pipelines, policy-as-code, and automation in security workflows.**Desirable Skills:*** Familiarity with application security tools (SAST, DAST, SCA), secrets management (Vault/KMS), IAM/PAM, vulnerability management, and cloud security posture management.* Experience with cloud platforms (Azure/ ...

telematics, and, more recently, device and identity protection. We are seeking an experienced Digital Product Manager to lead the strategy, roadmap, and delivery of security-focused products that protect enterprise assets and enable secure-by-default development practices for the Product Security team. This role will … Understanding of CI/CD pipelines, policy-as-code, and automation in security workflows. Desirable Skills Familiarity with application security tools (SAST, DAST, SCA), secrets management (Vault/KMS), IAM/PAM, vulnerability management, and cloud security posture management. Experience with cloud platforms (Azure/ ...

managed identity patterns, and network segmentation with Private Link, Azure Firewall and WAF rules. Deliver the DevSecOps tooling in GitHub Actions or Azure Pipelines: SAST, SCA, secrets, container and IaC scanning, with tuned rules, reusable pipeline templates and feedback developers can act on. Implement supply chain controls: SBOM generation, artifact … Cloud, Key Vault, and networking with NSGs, Private Link, Azure Firewall and WAF. DevSecOps tooling in GitHub Actions or Azure Pipelines: integrating and tuning SAST, SCA, secrets, container and IaC scanners, and building reusable pipeline templates. Infrastructure as code with Terraform or Bicep, and PowerShell or Python to automate controls ...

dependencies, build agents, artefact repositories and target environments Migrating applications from legacy deployment tooling onto Octopus Deploy Defining and embedding pipeline security controls - SAST, SCA, dependency scanning, secrets detection and artefact scanning (GitHub CodeQL, Dependabot, JFrog Xray and Curation) Managing software supply-chain controls: approved repositories, open-source governance … working knowledge of Bash/shell scripting Good understanding of Git workflows, artefact repositories, package versioning and environment promotion Experience implementing secure coding controls (SAST, SCA, secrets detection) and a good grasp of secure development principles, including authentication, secrets management, certificates and TLS Windows Server and on-premises hosting knowledge ...

load for engineering teams, and improve release velocity. What You’ll Do Design, develop, and maintain CI/CD pipelines to automate software builds, testing, and releases. Build and maintain internal tooling to support the software development lifecycle (e.g., code quality analysis, dependency management, automated testing). Collaborate … coding assistants to accelerate authoring of CI/CD pipeline configurations, IaC scripts, and automation tooling. Apply AI-assisted security scanning (SAST) as an automated merge gate across engineering pipelines. Support delivery teams and partners to reduce the complexity of implementing IQGeo solutions. Participate in an on-call rotation. ...

Halfords is seeking an Application Security Lead to own and shape the security capability across a diverse technology estate. You will work with development, architecture, product owners, and third parties to embed secure-by-design … principles and ensure appropriate controls are built into delivery processes. This role requires threat modelling, security design reviews, and hands-on tooling across SAST, DAST, and SCA. #J-18808-Ljbffr ...

Redgate is seeking a senior security engineer to embed security deeply into our product teams, defining requirements across the SDLC and leading threat modelling for new features. You’ll influence architecture, guardrails, and secure … default patterns, balancing risk with delivery velocity. Work across engineering and product squads in a hybrid role based in Cambridge. You’ll champion SAST/DAST, support AI security initiatives, and translate security findings into pragmatic engineering work #J-18808-Ljbffr ...

Active SC Clearance Required We're looking for a Senior DevOps Engineer to join a growing technology company delivering advanced solutions across Defence, National Security and other highly regulated sectors. This is a hands-on role focused on AWS, Kubernetes and DevSecOps, where you'll help build secure, scalable … networking, IAM and security. Strong Kubernetes administration experience. Experience with Terraform, Docker and Linux. Experience with GitHub Actions and Argo CD. Knowledge of DevSecOps, SAST and DAST practices. Automation and scripting skills with Bash, Python or Go. Strong communication and stakeholder management skills. Desirable MLOps or LLMOps experience (SageMaker, Kubeflow ...

improving the way software is built, tested and deployed. You will work closely with development, infrastructure and cloud teams, helping to improve automation, reliability, security and overall engineering efficiency. What you will be doing Design, build and maintain Azure DevOps CI/CD pipelines across multiple environments. Automate build … remediate vulnerabilities across application code, CI/CD pipelines and Azure infrastructure. Integrate security tooling into development and deployment pipelines, including SAST, DAST and dependency scanning. Manage patching and updates across container images, Kubernetes components and Azure resources. Contribute to cloud platform governance, security standards and continuous ...