Lead DevSecOps: Attack Surface & AI Security

RSA Group; Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Annual discretionary bonus

Up to 11% pension contributions

25 days annual leave + bank holidays +

buy/sell options

Career development and mentoring

Inclusive culture + employee networks

Share investment options

Job summary

Intact Insurance, formerly RSA, is enhancing its security stance in the UK. We seek a DevSecOps and Attack Surface Specialist to embed security across the software development lifecycle and AI systems. You will lead SAST/DAST programs, manage external attack surfaces, and drive AI-focused security initiatives.

You will collaborate with engineering, product, and operations teams to implement automated controls, perform vulnerability validation, and champion secure coding practices across the org.

Qualifications

• Proven experience across the full software development lifecycle security.
• Hands-on with SAST/ SCA tooling (Semgrep, Checkmarx, Snyk, OWASP Dependency Check).
• Experience configuring DAST tools (OWASP ZAP, Burp Suite Enterprise, Invicti).
• Ability to triage, validate, and reproduce vulnerabilities with manual testing and proof of concept development.
• Knowledge of secure coding practices across common languages.
• Familiarity with CI/CD pipelines and automated security gates.
• Experience with attack surface management and asset discovery.

Responsibilities

• Champion shift-left security by integrating automated controls early in development.
• Lead application security initiatives, including Pentest, SAST, SCA and DAST scanning and remediation.
• Manage external application attack surface by monitoring domains and assets.
• Drive integration of AI-specific security practices across the organisation.

Skills

Application security

SAST & SCA tooling

DAST tools

Vulnerability triage

Secure coding

CI/CD security gates

Attack surface management

Tools

Semgrep

Checkmarx

Snyk

OWASP Dependency Check

OWASP ZAP

Burp Suite Enterprise

Invicti

Job description

Intact Insurance, formerly RSA, is enhancing its security stance in the UK. We seek a DevSecOps and Attack Surface Specialist to embed security across the software development lifecycle and AI systems. You will lead SAST/DAST programs, manage external attack surfaces, and drive AI-focused security initiatives.

You will collaborate with engineering, product, and operations teams to implement automated controls, perform vulnerability validation, and champion secure coding practices across the org.