19 of 19 OWASP Jobs in the South East

LLMOps experience (SageMaker, Kubeflow, ZenML). Prometheus or other observability tooling. AWS Karpenter and Compute Optimizer experience. Knowledge of ISO 27001, NIST or OWASP frameworks. Experience working within Defence or other secure environments. If you're an SC-cleared DevOps Engineer looking to take ownership of cloud platforms and work ...

distributed security culture across engineering. What you would bring - Strong hands-on experience in application security, with a solid understanding of secure software development, OWASP Top 10, common application vulnerabilities and secure SDLC practices. Proficiency in one or more programming languages, such as Python or JavaScript, with experience using code ...

conducting threat modelling (e.g. STRIDE, attack trees) and risk analysis Strong understanding of security frameworks and best practice such as ISO 27001, NIST, CIS, OWASP, NCSC guidance Experience working in the UK Public Sector and associated security standards and guidance including GovAssure/NCSC CAF, HMG Security Policy Framework. Knowledge ...

preferred; AWS or Google Cloud also valuable), including deployment, monitoring, and scaling of microservices and web applications. Deep understanding of secure coding practices (e.g. OWASP), privacy, auditability, and regulatory expectations in financial services or similarly regulated environments. Strong experience with observability, SLOs, incident management, and operational excellence (logging, tracing, metrics ...

specific threats and controls, such as prompt injection, data leakage through AI tooling, model and supply chain risk, and frameworks such as the OWASP Top 10 for LLM Applications and MITRE ATLAS. Familiarity with regulatory frameworks and industry standards (e.g., NIST, CIS, etc.). Strong analytical and problem-solving skills. ...

/CD, automated testing, code quality controls, observability, incident diagnosis, reliability engineering and DevSecOps practices. Knowledge of application security, identity and access management, OWASP guidance, threat modelling, privacy by design and relevant compliance requirements. Experience producing high‐quality architecture artefacts, including context and container views, integration diagrams, data‐flow diagrams ...

code with Terraform or Bicep, and PowerShell or Python to automate controls and response. Working knowledge of AKS and container security, and of the OWASP Top 10. Clear written communication: runbooks, incident reports and remediation plans that engineers and managers can act on. Desirable: Monitoring a multi‐tenant SaaS platform ...

Reporting* SOC – Experienced in Security Ops, Incident Response, Threat Hunting, Malware/Forensic Analysis* WebApps – Experienced in WebApp DevSecOps best practices, WebApp scanning for OWASP top 10.* Good understanding of GRC strategies and tools, Threat Intelligence, SIEMs, XDR, ICS/OT security* Relevant industry certifications: CISSP, CEH, CCNP, Public Cloud ...

/New Relic) testing across frontend and backend Comfortable working with CI/CD pipelines Understanding of secure coding practices across the stack (e.g. OWASP, input validation, authentication A team player with high energy and can-do attitude, able to work well within a team Versatile and adaptable, able ...

following: Web Application Security Infrastructure Security Cloud Security API Security Mobile Security Strong understanding of common vulnerabilities and exploitation techniques, including the OWASP Top 10 and network security fundamentals whilst possessing the ability to communicate technical findings clearly in both written reports and verbal discussions. Practical experience with industry-standard ...

frameworks for Web, Mobile, and Microservices APIs. Testing Strategy & CI/CD: Drive TDD/BDD practices, execute non-functional testing (Performance, Security/OWASP), and integrate automated suites into CI/CD pipelines. Engineering Standards: Review backlogs to build risk-based test strategies, mentor engineers, and partner with developers ...

frameworks for Web, Mobile, and Microservices APIs. Testing Strategy & CI/CD: Drive TDD/BDD practices, execute non-functional testing (Performance, Security/OWASP), and integrate automated suites into CI/CD pipelines. Engineering Standards: Review backlogs to build risk-based test strategies, mentor engineers, and partner with developers ...

Experience with vulnerability scanning, secure configuration assessments and remediation tracking. An understanding of common attack techniques, security monitoring and incident response. Knowledge of the OWASP Top 10 and recognised cyber security principles. An understanding of the NIST Cybersecurity Framework and NIS Regulations. Experience working towards Cyber Essentials. The ability ...

assessing security controls across cloud environments, APIs, CI/CD pipelines, identity services and data platforms. Working knowledge of relevant guidance, such as OWASP guidance for LLM and agentic applications, MITRE ATLAS and cloud-provider AI security guidance. Ability to participate in incident response and product security operations as required. ...

ramp on a new AI tool or technique in days, not months. You will have an advantage if you also have: Security best practice (OWASP top ten) Windows services Experience using AI tooling specifically in the architect role - for design review, ADR drafting, threat modelling, contract design, or similar. Familiarity ...

alongside VMware-based Core deployments. • Excellent analytical, technical, communication and leadership skills, with an Engineering or equivalent technical degree/experience. • Awareness of NIST, OWASP, GCF and UK TSA requirements, with willingness to support on-call and travel to customer locations when required. Benefits: • Generous holiday entitlement, plus additional birthday ...

alongside VMware-based Core deployments. • Excellent analytical, technical, communication and leadership skills, with an Engineering or equivalent technical degree/experience. • Awareness of NIST, OWASP, GCF and UK TSA requirements, with willingness to support on-call and travel to customer locations when required. Benefits: • Generous holiday entitlement, plus additional birthday ...

Debug across whole chains, from application to integration to database to network, and write down what you found and changed Code securely as standard: OWASP practice, secrets in OCI Vault rather than source code, and security testing in every pipeline Join the on call rota for high priority incidents outside … debugged yourself: OAuth tokens, certificates and TLS Delivery discipline you can show: Git branching, peer review, pipelines with security testing, OWASP secure coding practice, and rollbacks tested Solid SQL and PL/SQL, used to trace and reconcile data, including on Oracle Autonomous AI Database The habit of debugging across ...

finding. What You'll Do Own inbound product direction for your area. Research emerging agentic AI capabilities, attacker techniques, and adjacent standards (MCP, A2A, OWASP agentic-security guidance, agent identity frameworks) to determine what MARS for Agents should build next across the agent registry, Claude integration, Microsoft Copilot integration … integration platform. Direct experience with MCP, LLM/agent tool-calling architectures, or building integrations with Claude or other frontier model providers. Familiarity with OWASP frameworks, including emerging OWASP guidance for agentic AI security. Experience directly supporting a technical sales motion — SE enablement, competitive battlecards, customer discovery calls. Experience ...