Senior DevSecOps & Attack Surface Specialist

Royal & Sun Alliance Insurance Ltd; United Kingdom; Remote; GBP 90.000 - 130.000; Vollzeit

Benefits dieser Stelle

Annual bonus

Pension contributions (11%)

25 days annual leave + bank holidays

Career development

Inclusive culture

Share investment options

Zusammenfassung

Intact Insurance, formerly RSA in the UK, is seeking a DevSecOps and Attack Surface Specialist to embed security across the software lifecycle and AI systems. You’ll drive automated controls, lead Pentest, SAST, SCA, and DAST efforts, and manage external attack surfaces across domains.

You’ll also champion AI-specific security practices and support cyber defence initiatives within engineering, product, and operations teams. This permanent role offers career growth and collaboration.

Qualifikationen

• Deep understanding of secure software development lifecycle.
• Hands-on experience with SAST and SCA tooling.
• Proficient with DAST tools and vulnerability validation.
• Ability to triage and reproduce vulnerabilities with PoCs.
• Knowledge of secure coding across common languages.
• Experience integrating security gates in CI/CD.
• Experience with attack surface management and domain exposure.

Aufgaben

• Embed security across the SDLC and AI systems.
• Champion shift-left with automated security controls.
• Lead app security initiatives: Pentest, SAST, SCA, DAST and remediation.
• Manage external application attack surface and domains.
• Integrate AI security practices across the organisation.

Kenntnisse

App security lifecycle

SAST tooling

SCA tooling

DAST tooling

Vuln triage & PoC

Secure coding

CI/CD security gates

Attack surface mgmt

Tools

Semgrep

Checkmarx

Snyk

OWASP Dependency Check

OWASP ZAP

Burp Suite Enterprise

Invicti

Jobbeschreibung

Intact Insurance, formerly RSA in the UK, is seeking a DevSecOps and Attack Surface Specialist to embed security across the software lifecycle and AI systems. You’ll drive automated controls, lead Pentest, SAST, SCA, and DAST efforts, and manage external attack surfaces across domains.

You’ll also champion AI-specific security practices and support cyber defence initiatives within engineering, product, and operations teams. This permanent role offers career growth and collaboration.