Application Security Testing Lead - DAST

Methodius IT Recruitment; Ulster; Hybrid; EUR 110,000 - 150,000; Full time

Benefits offered by this job

Annual Bonus

Contributory Pension

Private Medical Insurance

Life Assurance

Employee Assistance

Job summary

Methodius IT Recruitment is assisting a global financial services organisation in recruiting an experienced Application Security Lead to roll out DAST across a large-scale enterprise. You will combine deep security expertise with programme leadership to drive adoption across the SDLC.

Based in Letterkenny, Co. Donegal, this hybrid role offers exposure to senior security and engineering stakeholders, with a focus on governance, metrics, and remediation.

Qualifications

• Experience in Application Security, Penetration Testing, or AppSec Engineering.
• Hands-on with DAST tools, authenticated scanning, policy tuning.
• Deep understanding of web and API security (OWASP WSTG).
• Experience integrating security testing into CI/CD and DevSecOps pipelines.
• Knowledge of CI/CD platforms: Jenkins, GitLab CI, GitHub Actions, Azure DevOps.
• Ability to analyse findings and communicate risk effectively.
• Strong stakeholder management and programme delivery experience.
• Python scripting or security automation experience.
• API security testing (REST, GraphQL, SOAP, OpenAPI).
• Familiarity with SAST, SCA, ServiceNow, Vault, CyberArk.
• Certifications such as OSCP, BSCP, HTB CPTS.
• Experience in financial services or regulated industries.

Responsibilities

• Act as the technical lead and SME for DAST within the DevSecOps ecosystem.
• Evaluate, select, and implement enterprise DAST solutions for web apps and APIs.
• Define scanning standards, methodologies, and CI/CD integration requirements.
• Support engineering teams with DAST onboarding, configuration, and optimisation.
• Review and validate findings, prioritising remediation based on risk.
• Establish programme governance, reporting, metrics, and stakeholder engagement.
• Partner with development, DevOps, and security teams to drive remediation.
• Ensure DAST complements existing penetration testing and app security activities.
• Provide regular technical and executive-level reporting on programme performance and risk.

Skills

Application Security

Penetration Testing

DAST Tools

CI/CD Security

DevSecOps

Web & API Security

Policy Tuning

Jenkins

GitLab CI

GitHub Actions

Azure DevOps

Security Automation

Python Scripting

API Testing

SAST

SCA

Certifications

Regulated Industry

Education

OSCP Certification

BSCP

HTB CPTS

Tools

Jenkins

GitLab CI

GitHub Actions

Azure DevOps

OpenAPI

Job description

Our client, a global financial services organisation, is seeking an experienced Application Security Lead to drive the rollout of Dynamic Application Security Testing (DAST) across a large-scale enterprise environment.

This is a high-impact role combining deep technical application security expertise with programme leadership. You'll lead the selection, implementation, and adoption of DAST capabilities, helping embed automated security testing across the software development lifecycle.

Key Responsibilities

• Act as the technical lead and SME for DAST within the DevSecOps ecosystem.
• Evaluate, select, and implement enterprise DAST solutions for web applications and APIs.
• Define scanning standards, methodologies, and CI/CD integration requirements.
• Support engineering teams with DAST onboarding, configuration, and optimisation.
• Review and validate findings, prioritising remediation based on risk.
• Establish programme governance, reporting, metrics, and stakeholder engagement.
• Partner with development, DevOps, and security teams to drive remediation and adoption.
• Ensure DAST complements existing penetration testing and application security activities.
• Provide regular technical and executive-level reporting on programme performance and risk.

Requirements

• Strong experience in Application Security, Penetration Testing, or AppSec Engineering.
• Hands-on experience with DAST tools, authenticated scanning, and policy tuning.
• Deep understanding of web and API security, including OWASP WSTG.
• Experience integrating security testing into CI/CD and DevSecOps pipelines.
• Knowledge of Jenkins, GitLab CI, GitHub Actions, Azure DevOps, or similar platforms.
• Ability to analyse findings, identify true positives, and communicate risk effectively.
• Strong stakeholder management and programme delivery experience.
• Experience selecting or implementing enterprise DAST platforms.
• Python scripting or security automation experience.
• API security testing (REST, GraphQL, SOAP, OpenAPI).
• Knowledge of SAST, SCA, ServiceNow, Vault, or CyberArk.
• Certifications such as OSCP, BSCP, HTB CPTS, or equivalent.
• Financial services or regulated industry experience.

Why Apply?

This is an opportunity to shape and lead a strategic application security programme within a complex global organisation. You'll influence security tooling, standards, and DevSecOps practices while working with senior security and engineering stakeholders across the business.

Salary dependent on candidate experience. Benefits: Annual Bonus Scheme. Contributory Pension. Private Medical Insurance. Life Assurance & Long-Term Disability. Employee Assistance Programme. 22 days annual leave + 10 public holidays. Relocation package. Continuous Learning & Development. Access to extensive training & certification resources. Lunch & Learn sessions. Additional perks including company discounts, on-site parking, and bike-to-work scheme

Based in Letterkenny, Co. Donegal. Hybrid (3 days onsite per week). Candidates must be eligible to work in Ireland/EU. Permanent role.

For more information, please contact David Coyle at 01 635 1748 or email [e-mail]