1 to 25 of 26 OWASP Jobs in the South East

Kubernetes deployment experience. Prometheus or comparable observability platforms. AWS Karpenter. AWS Compute Optimizer. Experience operating highly distributed systems. Familiarity with ISO 27001, NIST SSDF, OWASP SAMM or similar security frameworks. Understanding of GDPR fundamentals. Experience working within defence, national security, critical infrastructure or other regulated environments. Security Clearance ...

distributed security culture across engineering. What you would bring - Strong hands-on experience in application security, with a solid understanding of secure software development, OWASP Top 10, common application vulnerabilities and secure SDLC practices. Proficiency in one or more programming languages, such as Python or JavaScript, with experience using code ...

Knowledge of non-functional testing areas such as reliability, usability, security or stability Experience with performance, load, or penetration testing tools (e.g. JMeter, LoadRunner, OWASP ZAP) Knowledge of CI/CD and DevOps pipelines with integrated testing Familiarity with Agile/SAFe delivery and test automation in agile contexts Experience ...

remediation and closure. Required Experience 6+ years in IT, including 4+ years within Cyber Security. Strong threat modelling and application security experience. Knowledge of OWASP, CWE, authentication, authorisation, encryption and infrastructure security. Experience with Terraform/CloudFormation, CI/CD and Jira. Strong Python skills, including FastAPI and Pytest. Experience ...

distributed systems, scalability, resilience and performance tuning Experience with cloud-native applications, Docker, Kubernetes and CI/CD Strong knowledge of application security, OWASP principles and secure development practices Knowledge of a modern front-end node-based framework Other Information Permanent role – 37.5 hours per week. Monday to Friday ...

conducting threat modelling (e.g. STRIDE, attack trees) and risk analysis Strong understanding of security frameworks and best practice such as ISO 27001, NIST, CIS, OWASP, NCSC guidance Experience working in the UK Public Sector and associated security standards and guidance including GovAssure/NCSC CAF, HMG Security Policy Framework. Knowledge ...

following Working knowledge of NIST frameworks (e.g. SP 800-53, SSDF) or equivalent (Software Cyber, AI Cyber Security Code of Practice, ISO 27001, CIS, OWASP) and their application within software development and DevSecOps practices Familiarity with scientific, engineering, or technical domains relevant to UKAEA’s mission, particularly where computing infrastructure ...

/New Relic) testing across frontend and backend Comfortable working with CI/CD pipelines Understanding of secure coding practices across the stack (e.g. OWASP, input validation, authentication A team player with high energy and can-do attitude, able to work well within a team Versatile and adaptable, able ...

Reporting* SOC – Experienced in Security Ops, Incident Response, Threat Hunting, Malware/Forensic Analysis* WebApps – Experienced in WebApp DevSecOps best practices, WebApp scanning for OWASP top 10.* Good understanding of GRC strategies and tools, Threat Intelligence, SIEMs, XDR, ICS/OT security* Relevant industry certifications: CISSP, CEH, CCNP, Public Cloud ...

following: Web Application Security Infrastructure Security Cloud Security API Security Mobile Security Strong understanding of common vulnerabilities and exploitation techniques, including the OWASP Top 10 and network security fundamentals whilst possessing the ability to communicate technical findings clearly in both written reports and verbal discussions. Practical experience with industry-standard ...

following: Security Engineering Identity & Access Management Email Security Vulnerability Management Security monitoring and logging Secure technical change Security frameworks including ISO 27001, NIST or OWASP Experience with Microsoft Defender, Purview, Intune, cloud automation or DevSecOps would be advantageous but isn't essential. What's in this for you This role ...

security Endpoint Protection Identity & Access Management Email Security Vulnerability Management Security monitoring and logging Secure technical change Security frameworks including ISO 27001, NIST or OWASP Experience with Microsoft Defender, Purview, Intune, cloud automation or DevSecOps would be advantageous but isn't essential. What's in this for you This role ...

field, including leadership or management experience within IT or Cyber Security teams. Strong knowledge of industry security frameworks and standards, including ISO 27001, NIST, OWASP, PCI DSS and NIS2. Excellent communication skills, with the ability to translate complex technical concepts into clear, actionable guidance for both technical and non-technical ...

parties, including conflict resolution due to changing priorities. Experience of using common information security management frameworks, such as NIST, PCI, GDPR, ISO Series, OWASP the IT Infrastructure Library (ITIL), the ISF Standards of Good Practice (SoGP) and ISACA’s Control Objectives for Information and related Technology (COBIT) frameworks. Actively represent ...

assessing security controls across cloud environments, APIs, CI/CD pipelines, identity services and data platforms. Working knowledge of relevant guidance, such as OWASP guidance for LLM and agentic applications, MITRE ATLAS and cloud-provider AI security guidance. Ability to participate in incident response and product security operations as required. ...

Experience with vulnerability scanning, secure configuration assessments and remediation tracking. An understanding of common attack techniques, security monitoring and incident response. Knowledge of the OWASP Top 10 and recognised cyber security principles. An understanding of the NIST Cybersecurity Framework and NIS Regulations. Experience working towards Cyber Essentials. The ability ...

AWS. You think in quality and resilience: You understand performance, reliability, scalability and secure design, and you work with established frameworks and OWASP practices. You get leverage from tools: You know how to use AI coding agents effectively without outsourcing your judgement. You keep things simple: You weigh existing tools ...

ramp on a new AI tool or technique in days, not months. You will have an advantage if you also have: Security best practice (OWASP top ten) Windows services Experience using AI tooling specifically in the architect role - for design review, ADR drafting, threat modelling, contract design, or similar. Familiarity ...

automated rollback and infrastructure drift detection Integrating SAST, DAST, dependency and container scanning into development pipelines Conducting web application security testing using Burp Suite, OWASP ZAP or similar tools Identifying and managing vulnerabilities against OWASP Top 10 and CVSS principles Implementing secrets detection, credential rotation and secure Key Vault practices … applications in a production environment Practical experience using Burp Suite for application security testing Experience with SonarQube or comparable SAST tooling Strong knowledge of OWASP Top 10, vulnerability management and remediation Experience building repeatable Azure deployments using Terraform Scripting ability with PowerShell, Python or Bash Experience implementing secrets detection ...

Senior AI Engineer (BioTech/Pharma) | Outside IR35 Contract £600 - 700pd | Hybrid, Oxford | 6 Months Harvey Nash are working with an exciting consultancy who are looking to bring on a highly experienced AI Engineer to ...

Senior Cyber Security Risk Assessment Consultant - DAST/SAST/OWASP Location: London Contract: Long-term contract - 12 months Working Model: Hybrid Hiring: Multiple positions available Rate: £500 - £540 per day (Inside IR35 - must use umbrella) The Opportunity We are looking for experienced Senior Cyber Security Risk Assessment Consultants … closely with security-testing teams throughout execution. Review security-testing and penetration-testing reports and assess whether identified risks have been appropriately addressed. Apply OWASP principles and guidelines when assessing application security. Identify security gaps and recommend appropriate remediation and compensating controls. Produce and maintain security standards, principles, baselines ...

security reviews, threat modeling applications and identifying areas of risk Experience implementing strategies to support secure and compliant architectures Deep understanding of the OWASP Top 10 application security risks and how to address them Expert knowledge of Amazon AWS, Microsoft Azure or other cloud computing platform offerings and security related … experience Nice to Have Experience with assessing and providing recommendations for securing generative AI solutions Working knowledge of the Microsoft Security Development Lifecycle (SDL), OWASP Software Assurance Maturity Model (SAMM), or Building Security in Maturity Model (BSIMM). Familiar with compliance regulations like; ISO, GDPR, SOC2, SOX MS in Cyber ...

resolving production issues, performing root cause analysis. Contribute to architectural decisions, including system design, integrations, and data modelling. Champion best practices across performance, security (OWASP), and scalability. Identify technical debt and lead initiatives to reduce it. Guide adoption of modern tooling, frameworks, and patterns. Troubleshooting production issues and performing root … technical problems and working across large systems Have a strong understanding of software architecture and design patterns Take a security-first approach and understand OWASP principles Are confident balancing hands-on development with technical leadership Communicate effectively with both technical teams and stakeholders Are proactive, organised and take ownership ...

Senior Applied AI Engineer Private Sector Location: Harwell, Oxfordshire Hybrid (2 days per week on site, remainder remote) Contract: 6 months initially, with strong potential for extension Day Rate: £700£900 per day, depending on ...

Debug across whole chains, from application to integration to database to network, and write down what you found and changed - Code securely as standard: OWASP practice, secrets in OCI Vault rather than source code, and security testing in every pipeline - Join the on call rota for high priority incidents outside … debugged yourself: OAuth tokens, certificates and TLS - Delivery discipline you can show: Git branching, peer review, pipelines with security testing, OWASP secure coding practice, and rollbacks tested - Solid SQL and PL/SQL, used to trace and reconcile data, including on Oracle Autonomous AI Database - The habit of debugging across ...