19 of 19 OWASP Jobs in the South East

conducting threat modelling (e.g. STRIDE, attack trees) and risk analysis Strong understanding of security frameworks and best practice such as ISO 27001, NIST, CIS, OWASP, NCSC guidance Experience working in the UK Public Sector and associated security standards and guidance including GovAssure/NCSC CAF, HMG Security Policy Framework. Knowledge ...

Comfortable learning new languages, tools and observability technologies as required. Nice to Have: Experience with AWS or GCP; GraphQL, gRPC or REST API design; OWASP and GDPR; or mobile and web performance optimisation. MEASURES & GOALS: (HOW WILL THE SUCCESS OF THE PERSON IN THIS POSITION BE MEASURED – WHAT ...

Python or Go, and experience integrating SAST and DASTDesirable: MLOps or LLMOps (SageMaker, Kubeflow, ZenML), Prometheus observability, AWS Karpenter, ISO 27001, NIST SSDF, OWASP SAMM, active SC or DV clearanceWhat's On OfferCompany pension with 4% employer contributionPrivate healthcare29 days holiday plus public holidaysHybrid working, 2 days a week ...

management within a software development or SaaS environment. Practical understanding of Security by Design (SbD) concepts, threat modelling principles, and application security baselines (e.g., OWASP, ISO 27001, NIST). Familiarity with modern software development lifecycles (SDLC), cloud hosting platforms (AWS, Azure, or GCP), and production service operations. Excellent stakeholder engagement ...

/CD, automated testing, code quality controls, observability, incident diagnosis, reliability engineering and DevSecOps practices. Knowledge of application security, identity and access management, OWASP guidance, threat modelling, privacy by design and relevant compliance requirements. Experience producing high‐quality architecture artefacts, including context and container views, integration diagrams, data‐flow diagrams ...

Reporting* SOC – Experienced in Security Ops, Incident Response, Threat Hunting, Malware/Forensic Analysis* WebApps – Experienced in WebApp DevSecOps best practices, WebApp scanning for OWASP top 10.* Good understanding of GRC strategies and tools, Threat Intelligence, SIEMs, XDR, ICS/OT security* Relevant industry certifications: CISSP, CEH, CCNP, Public Cloud ...

code with Terraform or Bicep, and PowerShell or Python to automate controls and response. Working knowledge of AKS and container security, and of the OWASP Top 10. Clear written communication: runbooks, incident reports and remediation plans that engineers and managers can act on. Desirable: Monitoring a multi‐tenant SaaS platform ...

architectural decisions and ensure the quality and reliability of delivered solutions. Desirable Skills CI/CD pipelines, TeamCity, GitHub and Azure DevOps. Windows Services. OWASP Top 10 and application security best practices. Experience using AI tools for architectural design, technical documentation, threat modelling or design reviews. Understanding of emerging ...

performance Familiarity with agent-to-agent orchestration protocols or the Model Context Protocol (MCP) Awareness of secure-by-design frameworks (ISO 27001, NIST, OWASP) Open-source AI/ML contributions Why Apply Real technical ownership: shape the architecture, not just work through a backlog Work at the leading edge ...

Experience with vulnerability scanning, secure configuration assessments and remediation tracking. An understanding of common attack techniques, security monitoring and incident response. Knowledge of the OWASP Top 10 and recognised cyber security principles. An understanding of the NIST Cybersecurity Framework and NIS Regulations. Experience working towards Cyber Essentials. The ability ...

assessing security controls across cloud environments, APIs, CI/CD pipelines, identity services and data platforms. Working knowledge of relevant guidance, such as OWASP guidance for LLM and agentic applications, MITRE ATLAS and cloud-provider AI security guidance. Ability to participate in incident response and product security operations as required. ...

designing or evaluating security controls within cloud environments, APIs, CI/CD pipelines, identity services, and data platforms. Familiarity with security guidelines such as OWASP recommendations for large language models and agentic applications, MITRE ATLAS, and cloud provider-specific AI security guidance. Ability to participate in incident response and security ...

AWS. You think in quality and resilience: You understand performance, reliability, scalability and secure design, and you work with established frameworks and OWASP practices. You get leverage from tools: You know how to use AI coding agents effectively without outsourcing your judgement. You keep things simple: You weigh existing tools ...

AWS.You think in quality and resilience: You understand performance, reliability, scalability and secure design, and you work with established frameworks and OWASP practices.You get leverage from tools: You know how to use AI coding agents effectively without outsourcing your judgement.You keep things simple: You weigh existing tools, libraries and patterns ...

ramp on a new AI tool or technique in days, not months. You will have an advantage if you also have: Security best practice (OWASP top ten) Windows services Experience using AI tooling specifically in the architect role - for design review, ADR drafting, threat modelling, contract design, or similar. Familiarity ...

alongside VMware-based Core deployments. • Excellent analytical, technical, communication and leadership skills, with an Engineering or equivalent technical degree/experience. • Awareness of NIST, OWASP, GCF and UK TSA requirements, with willingness to support on-call and travel to customer locations when required. Due to the large volume of applications ...

alongside VMware-based Core deployments. • Excellent analytical, technical, communication and leadership skills, with an Engineering or equivalent technical degree/experience. • Awareness of NIST, OWASP, GCF and UK TSA requirements, with willingness to support on-call and travel to customer locations when required. Due to the large volume of applications ...

security risk and assurance, including LLM and agentic AI threat modelling, with knowledge of NIST AI RMF, ISO/IEC 42001 and OWASP guidance for LLM applications Experience supporting complex transformation programmes Energy and drive, with a real appetite for improving how a team works Desirable: Experience in a large … highly regulated organisation Knowledge of ISO 27001, NIST and OWASP CISSP, CISM or equivalent Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success ...

finding. What You'll Do Own inbound product direction for your area. Research emerging agentic AI capabilities, attacker techniques, and adjacent standards (MCP, A2A, OWASP agentic-security guidance, agent identity frameworks) to determine what MARS for Agents should build next across the agent registry, Claude integration, Microsoft Copilot integration … integration platform. Direct experience with MCP, LLM/agent tool-calling architectures, or building integrations with Claude or other frontier model providers. Familiarity with OWASP frameworks, including emerging OWASP guidance for agentic AI security. Experience directly supporting a technical sales motion — SE enablement, competitive battlecards, customer discovery calls. Experience ...