Strategic DevSecOps & Attack Surface Leader

Intact Insurance (previously RSA); United Kingdom; Hybrid; GBP 85,000 - 120,000; Full time

Benefits offered by this job

Annual bonus

Pension contributions 11%

Hybrid working

Leave + buy/sell options

Health & wellbeing

Mentoring

Employee networks

Share investment options

Job summary

Intact Insurance, the UK-based insurer formerly RSA, seeks a DevSecOps and Attack Surface Specialist to embed security across the software development lifecycle and extend that posture to AI systems. You’ll collaborate with engineering, product and operations to strengthen defenses and drive secure delivery.

In this role you’ll lead SAST, SCA, DAST programs, manage external attack surfaces, and champion a shift-left approach with automated controls while enabling AI security practices across the

Qualifications

• Strong understanding of application security principles across the full software development lifecycle.
• Hands-on experience with SAST and SCA tooling (Semgrep, Checkmarx, Snyk, OWASP Dependency Check).
• Experience configuring and operating DAST tools (OWASP ZAP, Burp Suite Enterprise, Invicti).
• Ability to triage, validate, and reproduce vulnerabilities through manual testing and PoC development.
• Working knowledge of secure coding practices across common languages and frameworks.
• Familiarity with CI/CD pipeline integration and security gates/controls.
• Experience with attack surface management, including asset discovery and domain enumeration.

Responsibilities

• Embed security across the software development lifecycle and extend posture to AI systems.
• Lead application security initiatives, managing Pentest, SAST, SCA and DAST scanning and remediation.
• Manage external application attack surface by monitoring domains and assets.
• Drive AI-specific security practices across the organisation and support AI capability expansion within cyber defence.

Skills

SAST

SCA

DAST

OWASP ZAP

Burp Suite

Invicti

Vulnerability triage

Secure coding

CI/CD security gates

Attack surface management

Tools

Semgrep

Checkmarx

Snyk

OWASP Dependency Check

Burp Suite Enterprise

Invicti

Job description

Intact Insurance, the UK-based insurer formerly RSA, seeks a DevSecOps and Attack Surface Specialist to embed security across the software development lifecycle and extend that posture to AI systems. You’ll collaborate with engineering, product and operations to strengthen defenses and drive secure delivery.

In this role you’ll lead SAST, SCA, DAST programs, manage external attack surfaces, and champion a shift-left approach with automated controls while enabling AI security practices across the