1 to 25 of 29 OWASP Jobs in the UK excluding London

Application security: including but not limited to: authentication, identity and access management, auditing, use of cryptography, data security, privacy enhancing technologies, web services security, OWASP, threat & vulnerability management and secure code development methodologies. • Infrastructure security: including but not limited to: network security, host security, database security, device security, VPNs & SSLs more »

with modern software engineering methodologies and the digital product lifecycle • DevSecOps best tools and practices • Regulatory and industry standards like PCI DSS, ISO 27001, OWASP, ISO 9000 range Technology • Deep knowledge of Microsoft Azure • Kubernetes and containerisation patterns • SQL Server, Redis, Cosmos DB or other Document DBs • Service Bus and more »

a bonus Azure Security skills e.g. in Azure B2c or Federated Account Experience with Application Security tools e.g. Vulnerability Scanners, Pen Testing, Code Analysis OWASP top 10 Knowledge of C# for diagnostics Fantastic opportunity to join a fairly greenfield operation working on a new platform. Interested? Please send your cv more »

and programming languages, including: How to test for/exploit them, Real world mitigations that can be applied Familiarity with vulnerability classification frameworks (e.g. OWASP Top 10, CVSS, MITRE CVE) Ability to threat model systems/applications/platforms to assess design and find flaws that can be exploited What more »

of repositories, code controls and development tools such as JIRA, Confluence and similar tools Application and Web Service security, Identity Management and Protocols (e.g. OWASP, WS-Security, SAML, OAuth2, OpenID Connect) Knowledge of or have worked with Cloud technologies. Azure preferred Working with: Agile development methodology, SAFe or SCRUM Understanding more »

products ? asynchronous request handling ? partial page updates ? AJAX(with JSON or XML) ? SEO principles and ensuring that application will adhere to them Understanding of OWASP guidelines, and how to implement them in the code Be able to build and maintain azure pipelines and how to integrate these with Octopus Understands more »

exchange trades, price data and information from credit rating agencies. Write clean, scalable, maintainable code. Apply the best modern coding standards, including SOLID principles, OWASP security standards and Design Patterns. Develop automated unit tests. Mentor junior members of staff, with a key focus on junior interface developers. Develop documentation throughout more »

deadline and personal time management skills Excellent communication skills Advantage to have awareness of : C# .NET Core and .NET Framework MVC Razor Azure services OWASP Chromatic Storybook Accessibility Node.js Ability to rollout solutions that are well tested and meet the needs of the end users Can work with other members more »

C# , MVC , and Razor for backend development Familiarity with .NET Core and .NET Framework Knowledge of Azure services for cloud-based solutions Understanding of OWASP principles for secure development practices Familiarity with Chromatic and Storybook for UI component testing Experience with Node.js for server-side development If you are passionate more »

Science or related fields. 3 plus years of progressive experience in computing and information security. knowledge of industry best practices on security hardening (CIS), OWASP, network security, security risk & management frameworks, national cybersecurity standards, ISO27001, etc. player with excellent communication skills, (oral, written, presentation), interpersonal and consultative skills. Able to more »

complex issues. Certifications such as CISSP, CEH, OSCP, or GSEC are preferred but not required. Knowledge of security principles, practices, and frameworks, such as OWASP, NIST, and ISO. Awareness of security tools and technologies, such as SAST, DAST, IAST, SCA, WAF, IDS, IPS. Experience in conducting threat modeling and risk more »

skilled at influencing and negotiating. Certifications such as CISSP, CEH, OSCP, or GSEC are preferrable. Knowledge of security principles, practices, and frameworks, such as OWASP, NIST, and ISO Awareness of security tools and technologies, such as SAST, DAST, IAST, SCA, WAF, IDS, IPS. Experience in conducting threat modelling and risk more »

the MVC pattern, REST APIs and asp.net controllers are a must. Web developers should be aware of security vulnerabilities, such as those identified in OWASP, and their code should mitigate these threats. Required: Web Developers need experience in the design, creation and maintenance of websites across multiple platforms. The most more »

helping to ensure technical competency and architecture alignment. Establish a strong partnership with Information Security, identifying opportunities/risks. ( following standards such as CIS & OWASP ) Strong relationship with Data Engineering and Platforms team and Data Architect to ensure connected vision across solution and data architecture. Externally connected bringing the outside more »

You have a good knowledge of DevOps and IaC concepts You have a good understanding of cloud based security (e.g. ISO27001, NIST, CIS, OWASP, SOC2) and Identity and Access Management (IAM) within Azure You're familiar with ARM templates and/or Pulumi You have automation and scripting (PowerShell or more »

on experience on Kali Linux and NMAP. 8. Able to perform application scans using Burp enterprise, Veracode etc. 9. Perform Application pen testing for OWASP top 10 issues. 10. Web application firewall Administration and management 11. Able to work on Azure Devops Pipeline. Benefits: Focused on talent development with quarterly more »

which matches the best, whilst ensuring compliance to regulatory requirements, company policy and standards. Experience with information security management frameworks (NIST, PCI, GDPR, ISO, OWASP, ITIL, ISF SoGP, COBIT) is essential. The role will involve supporting project managers in risk and issue management Creation, review, and approval of documentation such more »

to regulatory requirements, company policy and standards. Should have experience of using common information security management frameworks, such as NIST, PCI, GDPR, ISO Series, OWASP the IT Infrastructure Library (ITIL), the ISF Standards of Good Practice (SoGP) and ISACA's Control Objectives for Information and related Technology (COBIT) frameworks. The more »

outcomes with external partners, including resolving conflicts arising from changing priorities. · Familiarity with common information security management frameworks like NIST, PCI, GDPR, ISO Series, OWASP, ITIL, ISF Standards of Good Practice (SoGP), and ISACA’s Control Objectives for Information and related Technology (COBIT) frameworks. Areti Group – Carbon positive tech recruitment more »

as defined and required by the ISMS Policies. Candidate Profile In Depth knowledge of ISO 27001 standards Knowledge of ISO31000 & ISO22301. Good knowledge of OWASP and NCSC Experience of working within an InfoSec focused role. Able to solve problems identified through audit, risk assessment or incidents. Proven experience in implementing more »

control and associated procedures. Hands-on experience performing application static/dynamic security and penetration assessment with tools such as – SonarQube, CheckMarx, AppScan, BurpSuite, OWASP ZAP Proxy, WebInspect, Fortify, Veracode, Nessus etc. Familiarity with different types of security vulnerabilities and tools for countermeasure Experience with any high-level programming language. more »

cloud reporting issues - Manage DAST ans SAST scanning tools - 6 years + experience within the security testing field - Hands on experience testing and explaining OWASP top 10 vulnerabilities - Previously worked within the financial services industry Logistics: - 6 Month Rolling Contract - £700 - £750 p/d - Occasional visits to the London more »

Dev SecOps engineering position. Strong experience securing cloud platforms, primarily AWS and Mongo Atlas. Exposure to Audits/Compliance/Security frameworks (ISO27001, SOC2, OWASP, SAMM, DSOMM). Knowledge of embedded security (IDE plugins, SAST, DAST, SCA). Experience performing vulnerability scanning/penetration testing. Threat detection and prevention (IDS more »

knowledge of concepts of testing processes and methodologies Experience working across the software test life cycle to structure testing process. Knowledge or interest in OWASP ZAP or PortSwigger Burp JavaScript TypeScript Python Knowledge of low code automation test tools Manual and automation testing ISTQB certification is required. Spectrum IT Recruitment more »

and deploying production systems to the web. Contributions to OSS on your git. Cyber security awareness, experience of secure app design and mitigating the OWASP top 10. Experience of working with large and complex codebases. Experience of working directly with non-technical end-users to understand requirements, design solutions, provide more »