DevSecOps & Attack Surface Lead with AI Security Focus

RSA Security LLC; Greater London; On-site; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Annual discretionary bonus

Pension contributions

25 days annual leave + holidays

Career development and mentoring

Inclusive culture

Share investment options

Job summary

Intact Insurance is transforming security across the software development lifecycle and extending it to AI systems. The role sits at the intersection of secure software engineering, offensive testing, attack surface management, and emerging AI risks, partnering with engineering, product, and operations teams.

You’ll champion automated security controls, lead Pentest, SAST, SCA and DAST initiatives, and manage external domain exposure while expanding AI security capabilities within the cyber

Qualifications

• Strong understanding of application security across the full software development lifecycle.
• Hands-on experience with SAST and SCA tooling (Semgrep, Checkmarx, Snyk, OWASP Dependency Check).
• Experience configuring and operating DAST tools (OWASP ZAP, Burp Suite Enterprise, Invicti).
• Ability to triage, validate, and reproduce vulnerabilities via manual testing and PoC.
• Working knowledge of secure coding practices across common languages and frameworks.

Responsibilities

• Champion shift-left security, drive automated controls earlier in development while validating vulnerabilities from tests.
• Lead application security initiatives, manage Pentest, SAST, SCA and DAST scanning and remediation activities.
• Maintain asset inventories and manage Intact’s external application attack surface.
• Integrate AI security practices across the organisation and support AI capability expansion in cyber defence.

Skills

AppSec lifecycle

Threat modeling

CI/CD security gates

Vulnerability triage

Secure coding basics

AI security

Communication with teams

Tools

Semgrep

Checkmarx

Snyk

OWASP Dependency Check

OWASP ZAP

Burp Suite Enterprise

Invicti

Job description

Intact Insurance is transforming security across the software development lifecycle and extending it to AI systems. The role sits at the intersection of secure software engineering, offensive testing, attack surface management, and emerging AI risks, partnering with engineering, product, and operations teams.

You’ll champion automated security controls, lead Pentest, SAST, SCA and DAST initiatives, and manage external domain exposure while expanding AI security capabilities within the cyber