DevSecOps & Attack Surface Lead for AI Security

Intact Insurance UK; England; Hybrid; GBP 80,000 - 110,000; Full time

Benefits offered by this job

Annual discretionary bonus

Up to 11% pension contributions

Hybrid working

25 days annual leave + bank holidays +

Health & wellbeing + virtual GP

Career development and mentoring

Inclusive culture + employee networks

Share investment options

Job summary

Intact Insurance UK is seeking a DevSecOps and Attack Surface Specialist to embed security across the software development lifecycle and extend that posture to AI systems.

The role sits at the intersection of secure software engineering, offensive testing, attack surface management, and emerging AI risks, acting as both a technical practitioner and a collaborative partner to engineering, product, and operations teams.

Qualifications

• Strong understanding of secure SDLC principles.
• Hands-on with SAST/SCA tooling and DAST testing.
• Experience triaging and reproducing vulnerabilities.
• Familiarity with CI/CD pipelines and security gates.

Responsibilities

• Lead application security initiatives across development lifecycle.
• Manage Pentest, SAST, SCA and DAST scanning and remediation.
• Oversee external attack surface monitoring and domain inventories.
• Drive AI security practices integration within cyber defense.

Skills

Application security

SAST

SCA

DAST

CI/CD security

Attack surface

Tools

Semgrep

Checkmarx

Snyk

OWASP Dependency Check

OWASP ZAP

Burp Suite Enterprise

Invicti

Job description

Intact Insurance UK is seeking a DevSecOps and Attack Surface Specialist to embed security across the software development lifecycle and extend that posture to AI systems.

The role sits at the intersection of secure software engineering, offensive testing, attack surface management, and emerging AI risks, acting as both a technical practitioner and a collaborative partner to engineering, product, and operations teams.