DAST Programme Lead for Enterprise Security (Hybrid)

Methodius IT Recruitment; Ulster; Hybrid; EUR 95,000 - 135,000; Full time

Benefits offered by this job

Annual bonus

Pension

Medical Insurance

Life Insurance

Employee Assistance

Relocation

Lunch & Learn

On-site parking

Bike-to-work

Job summary

Methodius IT Recruitment is assisting a global financial services client in Ireland to hire an experienced Application Security Lead to drive the rollout of DAST across a large-scale enterprise. The role blends deep security expertise with programme leadership to embed automated testing throughout the SDLC.

You will define scanning standards, evaluate enterprise DAST solutions for web apps and APIs, and integrate with CI/CD.

Qualifications

• Strong experience in Application Security, Penetration Testing, or AppSec Engineering.
• Hands-on experience with DAST tools, authenticated scanning, and policy tuning.
• Deep understanding of web and API security, including OWASP WSTG.
• Experience integrating security testing into CI/CD and DevSecOps pipelines.
• Knowledge of Jenkins, GitLab CI, GitHub Actions, Azure DevOps, or similar.
• Ability to analyse findings, identify true positives, and communicate risk effectively.
• Strong stakeholder management and programme delivery experience.
• Experience selecting or implementing enterprise DAST platforms.
• Python scripting or security automation experience.
• API security testing (REST, GraphQL, SOAP, OpenAPI).
• Knowledge of SAST, SCA, ServiceNow, Vault, or CyberArk.
• Certifications such as OSCP, BSCP, HTB CPTS, or equivalent.
• Financial services or regulated industry experience.

Responsibilities

• Act as the technical lead and SME for DAST within the DevSecOps ecosystem.
• Evaluate, select, and implement enterprise DAST solutions for web applications and APIs.
• Define scanning standards, methodologies, and CI/CD integration requirements.
• Support engineering teams with DAST onboarding, configuration, and optimisation.
• Review and validate findings, prioritising remediation based on risk.
• Establish programme governance, reporting, metrics, and stakeholder engagement.
• Partner with development, DevOps, and security teams to drive remediation and adoption.
• Ensure DAST complements existing penetration testing and application security activities.
• Provide regular technical and executive-level reporting on programme performance and risk.

Skills

DAST tooling

CI/CD integration

DevSecOps

Jenkins

GitLab CI

GitHub Actions

Azure DevOps

Python scripting

API security

OWASP WSTG

Risk communication

Education

OSCP

BSCP

HTB CPTS

Tools

SAST

SCA

ServiceNow

Vault

CyberArk

Job description

Methodius IT Recruitment is assisting a global financial services client in Ireland to hire an experienced Application Security Lead to drive the rollout of DAST across a large-scale enterprise. The role blends deep security expertise with programme leadership to embed automated testing throughout the SDLC.

You will define scanning standards, evaluate enterprise DAST solutions for web apps and APIs, and integrate with CI/CD.