{"id":1483883,"url":"https://alion.io/job/salt-senior-application-security-consultant-sastdastowasp-","title":"Senior Application Security Consultant (SAST/DAST/OWASP )","company":{"id":1935342,"name":"Salt","domain":"welovesalt.com","url":"https://alion.io/company/welovesalt","size_band":"201-500","is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":{"grade":"A","score":95,"open_postings":1222,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":146,"computed_at":"2026-11-05T05:54:30Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":107000,"max_usd":197000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":36},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"Checkmarx","optional":false},{"name":"CI/CD","optional":false},{"name":"Docker","optional":false},{"name":"Fortify","optional":false},{"name":"GCP","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab","optional":false},{"name":"Jenkins","optional":false},{"name":"Kubernetes","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"Prisma Cloud","optional":false},{"name":"Rest API","optional":false},{"name":"Semgrep","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"Snyk","optional":false},{"name":"SonarQube","optional":false},{"name":"STRIDE","optional":false},{"name":"Trivy","optional":false},{"name":"Veracode","optional":false},{"name":"Wiz","optional":false}],"status":"live","first_seen_at":"2026-07-30T00:00:00Z","employer_posted_date":"2026-08-14","last_verified_at":"2026-09-29T22:22:26Z","board_verified":false,"closed_at":null,"days_open":98,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":98},"description":"Senior Application Security Consultant (SAST/DAST/OWASP )/ DevSecOps Security - Banking - LondonSecure SDLC | SAST | DAST | Threat Modelling | Cloud Security | CI/CD\nLocation: London (Hybrid - 8 days onsite per month)\nContract: 12 Months + extension\nRate: £500-£550 per day (Umbrella)\nThe Opportunity\nWe’re looking for an experienced Senior Application Security Consultant / DevSecOps Security Architect to join a high-performing Cyber Security function within a large enterprise technology environment.\nWorking alongside software engineering, cloud, architecture and DevOps teams, you’ll play a key role in embedding security throughout the Software Development Lifecycle, ensuring applications are designed, developed and deployed securely.\nThis is an excellent opportunity for someone passionate about Secure-by-Design, DevSecOps and modern Application Security within a large-scale cloud environment.\nKey Responsibilities Lead application security reviews across business-critical applications and cloud platforms.\nConduct security architecture and secure design reviews.\nPerform application security risk assessments and define security requirements.\nLead Threat Modelling workshops using STRIDE, MITRE ATT&CK or similar methodologies.\nEmbed Secure SDLC principles into engineering teams.\nIntegrate security tooling into CI/CD pipelines and DevSecOps processes.\nReview and analyse SAST, DAST and Software Composition Analysis (SCA) findings.\nWork closely with development teams to prioritise vulnerability remediation.\nDefine security testing requirements and support penetration testing activities.\nProduce security standards, technical guidance and best practice documentation.\nAct as the Application Security SME across multiple technology programmes. Essential Skills\nApplication Security Secure Software Development Lifecycle (SSDLC)\nOWASP Top 10\nSecure Coding\nSecure Design Reviews\nAPI Security\nREST APIs\nMicroservices Security\nApplication Security Risk Assessments Threat Modelling STRIDE\nMITRE ATT&CK\nSecurity Architecture\nRisk Assessments DevSecOps CI/CD Security\nGitHub Actions\nGitLab\nJenkins\nAzure DevOps\nSecurity Automation\nShift Left Security Security Testing SAST\nDAST\nSCA\nVulnerability Management\nPenetration Testing Cloud Security AWS, Azure or GCP\nKubernetes\nDocker\nContainer Security\nCloud Security Best Practices Security Tooling\nExperience with one or more of: Checkmarx\nFortify\nSonarQube\nVeracode\nSemgrep\nBurp Suite\nOWASP ZAP\nSnyk\nTrivy\nPrisma Cloud\nAqua\nWiz Ideal Background\nYou’ll ideally have: 8+ years in Cyber Security\nStrong Application Security or DevSecOps experience\nExperience working directly with software engineering teams\nExperience embedding security into CI/CD pipelines\nStrong knowledge of Secure SDLC\nExperience conducting Threat Modelling sessions\nExcellent stakeholder management and communication skills\nPrevious experience within Banking, Financial Services, Insurance or another highly regulated enterprise environment Contract Details 12-month contract\n£500-£600 per day (Umbrella)\nHybrid working - 8 days onsite per month in London\nImmediate interview availability preferred *Rates depend on experience and client requirements","description_format":"text","description_chars":3177,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Hybrid work"],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security"],"lifecycle":[{"event":"open","at":"2026-09-29T21:54:51Z"}],"visa":[],"liveness":{"score":16,"band":"cold","label":"Long shot","p_open":0.4,"p_active":0.56,"p_room":0.72,"age_days":98,"expected_fill_days":146,"reasons":["conf:871","agency","urgency","win:mid","crowd:brand"],"computed_at":"2026-11-05T05:54:30Z"},"pay":null,"html_url":"https://alion.io/job/salt-senior-application-security-consultant-sastdastowasp-","json_url":"https://alion.io/job/salt-senior-application-security-consultant-sastdastowasp-.json","meta":{"generated_at":"2026-11-05T12:27:33Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16182,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1935342},"rest":"https://alion.io/mcp/rest/get_company?id=1935342"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsalt-senior-application-security-consultant-sastdastowasp-"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsalt-senior-application-security-consultant-sastdastowasp-"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsalt-senior-application-security-consultant-sastdastowasp-"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/salt-senior-application-security-consultant-sastdastowasp-\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsalt-senior-application-security-consultant-sastdastowasp-"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1483883}},{"tool":"search_jobs","arguments":{"company":"welovesalt.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1483883},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}