1 to 25 of 39 OWASP Jobs in the South East

Kubernetes deployment experience. Prometheus or comparable observability platforms. AWS Karpenter. AWS Compute Optimizer. Experience operating highly distributed systems. Familiarity with ISO 27001, NIST SSDF, OWASP SAMM or similar security frameworks. Understanding of GDPR fundamentals. Experience working within defence, national security, critical infrastructure or other regulated environments. Security Clearance ...

distributed security culture across engineering. What you would bring - Strong hands-on experience in application security, with a solid understanding of secure software development, OWASP Top 10, common application vulnerabilities and secure SDLC practices. Proficiency in one or more programming languages, such as Python or JavaScript, with experience using code ...

distributed systems, scalability, resilience and performance tuning Experience with cloud-native applications, Docker, Kubernetes and CI/CD Strong knowledge of application security, OWASP principles and secure development practices Knowledge of a modern front-end node-based framework Other Information Permanent role – 37.5 hours per week. Monday to Friday ...

Knowledge of non-functional testing areas such as reliability, usability, security or stability Experience with performance, load, or penetration testing tools (e.g. JMeter, LoadRunner, OWASP ZAP) Knowledge of CI/CD and DevOps pipelines with integrated testing Familiarity with Agile/SAFe delivery and test automation in agile contexts Experience ...

remediation and closure. Required Experience 6+ years in IT, including 4+ years within Cyber Security. Strong threat modelling and application security experience. Knowledge of OWASP, CWE, authentication, authorisation, encryption and infrastructure security. Experience with Terraform/CloudFormation, CI/CD and Jira. Strong Python skills, including FastAPI and Pytest. Experience ...

cyber security or security engineering Strong experience securing cloud-native SaaS platforms, ideally within AWS environments Hands-on application security experience across threat modelling, OWASP and secure software development Good understanding of cloud security, identity, access controls, encryption and monitoring Experience delivering or implementing SOC 2 and/ ...

experience with IaC tools such as Terraform, CloudFormation, or Bicep.• Is familiar with relevant software and infrastructure security compliance frameworks and guidelines, e.g. OWASP, CVE and others.What we offerWe’re passionate about providing amazing opportunities and benefits, so you can continue and progress a lifelong career with us – here ...

conducting threat modelling (e.g. STRIDE, attack trees) and risk analysis Strong understanding of security frameworks and best practice such as ISO 27001, NIST, CIS, OWASP, NCSC guidance Experience working in the UK Public Sector and associated security standards and guidance including GovAssure/NCSC CAF, HMG Security Policy Framework. Knowledge ...

Python. Desirable Experience gained within a legal, financial services or similarly regulated organisation. Awareness of security frameworks and best practice including NCSC guidance, OWASP, NIST CSF, CIS Controls, ISO 27001, ISMS principles and GDPR. Experience with automation, security testing, forensic investigation activities, DLP monitoring, privileged access, key management ...

following Working knowledge of NIST frameworks (e.g. SP 800-53, SSDF) or equivalent (Software Cyber, AI Cyber Security Code of Practice, ISO 27001, CIS, OWASP) and their application within software development and DevSecOps practices Familiarity with scientific, engineering, or technical domains relevant to UKAEA’s mission, particularly where computing infrastructure ...

/CD, automated testing, code quality controls, observability, incident diagnosis, reliability engineering and DevSecOps practices. Knowledge of application security, identity and access management, OWASP guidance, threat modelling, privacy by design and relevant compliance requirements. Experience producing high‐quality architecture artefacts, including context and container views, integration diagrams, data‐flow diagrams ...

Copilot, AWS AI services, Google Vertex AI, or similar platforms.Knowledge of NIST AI Risk Management Framework (AI RMF), NIST Cybersecurity Framework (CSF), ISO 27001, OWASP Top 10 for LLM Applications, and related standards.Experience in regulated industries such as life sciences, healthcare, medical devices, software, or manufacturing.Professional certifications such as CISSP ...

Experience of SOA (service oriented architectures)You will have an advantage if you also have: Cloud experience (Azure) Containers (docker, K8s) Security best practice (OWASP top ten) OpenIDConnect/Identity server Micro service architecture MS SQL Server Azure DevOps, TeamCity Infrastructure as Code (Bicep, ARM templates, Terraform)Education ...

code with Terraform or Bicep, and PowerShell or Python to automate controls and response. Working knowledge of AKS and container security, and of the OWASP Top 10. Clear written communication: runbooks, incident reports and remediation plans that engineers and managers can act on. Desirable: Monitoring a multi‐tenant SaaS platform ...

/New Relic) testing across frontend and backend Comfortable working with CI/CD pipelines Understanding of secure coding practices across the stack (e.g. OWASP, input validation, authentication A team player with high energy and can-do attitude, able to work well within a team Versatile and adaptable, able ...

Reporting* SOC – Experienced in Security Ops, Incident Response, Threat Hunting, Malware/Forensic Analysis* WebApps – Experienced in WebApp DevSecOps best practices, WebApp scanning for OWASP top 10.* Good understanding of GRC strategies and tools, Threat Intelligence, SIEMs, XDR, ICS/OT security* Relevant industry certifications: CISSP, CEH, CCNP, Public Cloud ...

assessment, remediation tracking and risk‐based prioritisation. Understanding of common attack techniques, security monitoring, incident response and recognised application security risks such as the OWASP Top 10. Good understanding of the NIS/NIST Cybersecurity Framework (NIST CSF) and its practical application to identifying, protecting, detecting, responding to and recovering ...

following: Web Application Security Infrastructure Security Cloud Security API Security Mobile Security Strong understanding of common vulnerabilities and exploitation techniques, including the OWASP Top 10 and network security fundamentals whilst possessing the ability to communicate technical findings clearly in both written reports and verbal discussions. Practical experience with industry-standard ...

following: Security Engineering Identity & Access Management Email Security Vulnerability Management Security monitoring and logging Secure technical change Security frameworks including ISO 27001, NIST or OWASP Experience with Microsoft Defender, Purview, Intune, cloud automation or DevSecOps would be advantageous but isn't essential. What's in this for you This role ...

security Endpoint Protection Identity & Access Management Email Security Vulnerability Management Security monitoring and logging Secure technical change Security frameworks including ISO 27001, NIST or OWASP Experience with Microsoft Defender, Purview, Intune, cloud automation or DevSecOps would be advantageous but isn't essential. What's in this for you This role ...

parties, including conflict resolution due to changing priorities. Experience of using common information security management frameworks, such as NIST, PCI, GDPR, ISO Series, OWASP the IT Infrastructure Library (ITIL), the ISF Standards of Good Practice (SoGP) and ISACA’s Control Objectives for Information and related Technology (COBIT) frameworks. Actively represent ...

techniques across one or more of the following:Web Application SecurityInfrastructure SecurityCloud SecurityAPI SecurityMobile SecurityStrong understanding of common vulnerabilities and exploitation techniques, including the OWASP Top 10 and network security fundamentals whilst possessing the ability to communicate technical findings clearly in both written reports and verbal discussions.Practical experience with industry ...

techniques across one or more of the following: Web Application SecurityInfrastructure SecurityCloud SecurityAPI SecurityMobile SecurityStrong understanding of common vulnerabilities and exploitation techniques, including the OWASP Top 10 and network security fundamentals whilst possessing the ability to communicate technical findings clearly in both written reports and verbal discussions. Practical experience with ...

assessing security controls across cloud environments, APIs, CI/CD pipelines, identity services and data platforms. Working knowledge of relevant guidance, such as OWASP guidance for LLM and agentic applications, MITRE ATLAS and cloud-provider AI security guidance. Ability to participate in incident response and product security operations as required. ...

ramp on a new AI tool or technique in days, not months.You will have an advantage if you also have:Security best practice (OWASP top ten)Azure SQL ServerDevOps, Pipelines, TeamCity, GitHubWindows servicesExperience using AI tooling specifically in the architect role - for design review, ADR drafting, threat modelling, contract design ...