DevSecOps & Attack Surface Lead - Hybrid

Intact Insurance (previously RSA); Horsham; Hybrid; GBP 75.000 - 110.000; Vollzeit

Benefits dieser Stelle

Annual discretionary incentive plan

Hybrid working (60% office-based)

25 days annual leave + holidays andbuy

Flexible benefit options

Share investment options

Career development and mentoring

Inclusive culture and employee network

Zusammenfassung

Intact Insurance is seeking an Applications Security Specialist to drive a shift-left security program across the software development lifecycle in the UK. You will manage pentests and SAST/DAST/ SCA tooling, build secure coding practices, and oversee external domain exposure while expanding AI security capabilities.

The role emphasizes proactive vulnerability validation, asset discovery, and integration with CI/CD pipelines to ensure robust protection for commercial and specialty insurances

Qualifikationen

• Strong understanding of application security principles across the full software development lifecycle.
• Hands on experience with SAST and SCA tooling such as Semgrep, Checkmarx, Snyk, and OWASP Dependency Check.
• Experience configuring and operating DAST tools such as OWASP ZAP, Burp Suite Enterprise, and Invicti.
• Ability to triage, validate, and reproduce vulnerabilities through manual testing and proof of concept development.
• Working knowledge of secure coding practices across common languages and frameworks.
• Familiarity with CI and CD pipeline integration, including implementation of security gates and automated controls.
• Experience with attack surface management, including asset discovery, domain enumeration, and external exposure analysis.

Aufgaben

• Champion a shift left philosophy, driving automated security controls earlier in development while validating vulnerabilities identified through testing.
• The specialist will lead application security initiatives, managing Pentest, SAST, SCA and DAST scanning and remediation activities and maintaining asset inventories.
• Manage Intact's external application attack surface by monitoring and assessing new and existing domains.
• Lead integration of AI-specific security practices across the organisation and support expansion of AI capabilities within the cyber defence team.

Kenntnisse

Application security lifecycle

Vulnerability triage & PoC

Secure coding practices

CI/CD security gates

Attack surface management

Tools

Semgrep

Checkmarx

Snyk

OWASP Dependency Check

OWASP ZAP

Burp Suite Enterprise

Invicti

Jobbeschreibung

Intact Insurance is seeking an Applications Security Specialist to drive a shift-left security program across the software development lifecycle in the UK. You will manage pentests and SAST/DAST/ SCA tooling, build secure coding practices, and oversee external domain exposure while expanding AI security capabilities.

The role emphasizes proactive vulnerability validation, asset discovery, and integration with CI/CD pipelines to ensure robust protection for commercial and specialty insurances