Trimble Logo

Trimble

Senior Application Security Engineer (SCA/SAST)

Posted 20 Days Ago
Be an Early Applicant
Remote
Hiring Remotely in UK
Senior level
Remote
Hiring Remotely in UK
Senior level
Lead global SCA and SAST strategy and tooling, integrate static and open-source scanning into CI/CD pipelines, reduce false positives, perform threat modeling and architecture reviews, mentor teams, and drive developer-first application security across diverse tech stacks.
The summary above was generated by AI
Senior Application Security Engineer (SCA/SAST)Scale Security. Empower Engineers. Shape the Future.

Location: UK - Remote

The Mission: At Trimble, we aren't just building software; we’re transforming the way the world works. We are looking for a Senior Application Security Engineer who is more than a technical expert—you are a strategist and a catalyst for secure innovation. You will lead the charge in open-source security (SCA) and static analysis (SAST) across a massive global footprint, ensuring that security is a seamless part of the developer experience.

Why This Role?
  • Global Influence: You won't just be "fixing bugs." You will be the architect of a global security strategy that impacts 99% of our engineering teams.

  • Strategic Autonomy: Lead the vision for our SCA and SAST roadmaps. You have the seat at the table to decide how we evolve.

  • Innovation at Scale: Work across diverse tech stacks—from .NET and Java to Go and Python—integrating security directly into the heartbeat of our CI/CD pipelines.

How You’ll Make an Impact

Strategic Leadership

  • Act as the global SME for SCA and SAST, turning complex security requirements into scalable, automated solutions.

  • Optimize our security tooling to be "developer-first," slashing false positives and focusing engineering energy on what truly matters.

  • Shape the organizational approach to open-source security and license compliance.

Engineering Excellence

  • Embed security into the DNA of the SDLC by collaborating with architects and product owners worldwide.

  • Automate everything. You’ll build the "guardrails" that allow our developers to move fast without breaking things.

  • Mentor the next generation of security talent and lead through influence across cross-functional teams.

Vision & Advisory

  • Stay ahead of the curve. You’ll evaluate emerging security tech and proactively keep Trimble at the cutting edge.

  • Conduct threat modeling and architectural reviews to kill vulnerabilities before they are ever coded.

The Profile We’re Looking For
  • The Architect: 5+ years in AppSec with a deep, battle-tested mastery of SCA and SAST implementation at an enterprise level.

  • The Polyglot: You speak the language of developers. Whether it’s Java, C#, Python, or Go, you can read the code and provide real remediation paths.

  • The Integrator: You live in the pipeline. You have hands-on experience with GitHub Actions, Jenkins, Azure DevOps, or GitLab CI.

  • The Communicator: You can translate "security risk" into "business value" for stakeholders and "clear action" for engineers.

  • Education: Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.

How to Apply: Please submit an online application for this position by clicking on the ‘Apply Now’ button located in this posting.

Join a Values-Driven Team: Belong, Grow, Innovate. 

At Trimble, our core values of Belong, Grow, and Innovate aren't just words—they're the foundation of our culture. We foster an environment where you are seen, heard, and valued (Belong); where you have an opportunity to build a career and drive our collective growth (Grow); and where your innovative ideas shape the future (Innovate). We believe in empowering local teams to create impactful strategies, ensuring our global vision resonates with every individual. Become part of a team where your contributions truly matter. 

Trimble’s Privacy Policy

If you need assistance or would like to request an accommodation in connection with the application process, please contact [email protected].

Similar Jobs

Yesterday
Remote or Hybrid
Senior level
Senior level
Blockchain • Fintech • Payments • Consulting • Cryptocurrency • Cybersecurity • Quantum Computing
Lead product strategy and delivery for Mastercard's In Control virtual card platform. Translate business requirements into technical specs, work with engineering scrum teams, engage regional partners and customers, define platform vision for tokenized and virtual card payments, validate technical delivery, and drive go-to-market and product enhancements to grow B2B and T&E payment adoption.
Top Skills: AgilePayment ProcessingPme FrameworkScrumTokenizationUx/UiVirtual Card Platform
Yesterday
Easy Apply
Remote
United Kingdom
Easy Apply
Senior level
Senior level
Cloud • Security • Software • Cybersecurity • Automation
Conduct advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Identify and exploit novel, systemic, and chained vulnerabilities; develop proof-of-concept exploits, testing methodologies, and research automation; assess AI attack vectors and open-source dependencies; drive remediation and security improvements; advise engineering teams, contribute to roadmaps, mentor researchers, and share findings with the security community.
Top Skills: Duo Agent PlatformGitlabGitlab DuoGoPythonRubyRustTypescript
Yesterday
Easy Apply
Remote
United Kingdom
Easy Apply
Expert/Leader
Expert/Leader
Cloud • Security • Software • Cybersecurity • Automation
Conducts advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Responsibilities include discovering and exploiting systemic vulnerabilities, penetration testing, developing proof-of-concept exploits, researching AI and agentic security threats, building automated research tooling, coordinating remediation, mentoring security professionals, and communicating findings to engineering and security communities.
Top Skills: Ai FrameworksDevsecopsDuo Agent PlatformGitlabGitlab Duo ChatGoPythonRubyRustTypescript

What you need to know about the Bristol Tech Scene

Along with Gloucester, Swindon and Bath, Bristol is part of the "Silicon Gorge" tech hub, a region in the U.K. renowned for its high-tech and research-driven industries, with a particular emphasis on sustainability and reducing environmental impact. As the European Green Capital, Bristol is home to 25,000 cleantech companies, including Baker Hughes and unicorn Ovo Energy. The city has committed to achieving net-zero emissions within the next decade.

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account