16 of 16 OWASP Jobs in the South East

Comfortable learning new languages, tools and observability technologies as required. Nice to Have: Experience with AWS or GCP; GraphQL, gRPC or REST API design; OWASP and GDPR; or mobile and web performance optimisation. MEASURES & GOALS (HOW WILL THE SUCCESS OF THE PERSON IN THIS POSITION BE MEASURED – WHAT ...

Python or Go, and experience integrating SAST and DASTDesirable: MLOps or LLMOps (SageMaker, Kubeflow, ZenML), Prometheus observability, AWS Karpenter, ISO 27001, NIST SSDF, OWASP SAMM, active SC or DV clearanceWhat's On OfferCompany pension with 4% employer contributionPrivate healthcare29 days holiday plus public holidaysHybrid working, 2 days a week ...

cloud architectures. Proven experience with risk assessment methodologies and maintaining enterprise risk registers. Working knowledge of risk assessment methodologies (e.g. ISO 31000, FAIR, OWASP risk rating). Strong understanding of Gov Assure, CAF, ISO 27001, Cyber Essentials, and NIST frameworks. Experience conducting or supporting security audits and implementing remediation plans. ...

design and experience with authentication and authorisation standards such as OAuth 2.0 and OpenID Connect. You'll understand security best practices, including the OWASP Top 10 and approaches to mitigating common vulnerabilities. You'll be a confident communicator who can translate complex technical concepts for both technical and non-technical ...

performance Familiarity with agent-to-agent orchestration protocols or the Model Context Protocol (MCP) Awareness of secure-by-design frameworks (ISO 27001, NIST, OWASP) Open-source AI/ML contributions Why Apply Real technical ownership: shape the architecture, not just work through a backlog Work at the leading edge ...

performance Familiarity with agent-to-agent orchestration protocols or the Model Context Protocol (MCP) Awareness of secure-by-design frameworks (ISO 27001, NIST, OWASP) Open-source AI/ML contributions Why Apply Real technical ownership: shape the architecture, not just work through a backlog Work at the leading edge ...

frameworks for Web, Mobile, and Microservices APIs. Testing Strategy & CI/CD: Drive TDD/BDD practices, execute non-functional testing (Performance, Security/OWASP), and integrate automated suites into CI/CD pipelines. Engineering Standards: Review backlogs to build risk-based test strategies, mentor engineers, and partner with developers ...

Experience with vulnerability scanning, secure configuration assessments and remediation tracking. An understanding of common attack techniques, security monitoring and incident response. Knowledge of the OWASP Top 10 and recognised cyber security principles. An understanding of the NIST Cybersecurity Framework and NIS Regulations. Experience working towards Cyber Essentials. The ability ...

controls and attack mitigation policies, rather than solely relying on out-of-the-box managed rules. Extensive knowledge of web application attack vectors, including OWASP Top 10 vulnerabilities, SQL Injection, Cross-Site Scripting (XSS), Remote Code Execution (RCE), bot attacks, credential stuffing and API abuse. Hands-on experience with attack ...

ramp on a new AI tool or technique in days, not months. You will have an advantage if you also have: Security best practice (OWASP top ten)Azure SQL ServerDevOps, Pipelines, TeamCity, GitHubWindows servicesExperience using AI tooling specifically in the architect role - for design review, ADR drafting, threat modelling, contract ...

ramp on a new AI tool or technique in days, not months. You will have an advantage if you also have: Security best practice (OWASP top ten)Azure SQL ServerDevOps, Pipelines, TeamCity, GitHubWindows servicesExperience using AI tooling specifically in the architect role - for design review, ADR drafting, threat modelling, contract ...

alongside VMware-based Core deployments. • Excellent analytical, technical, communication and leadership skills, with an Engineering or equivalent technical degree/experience. • Awareness of NIST, OWASP, GCF and UK TSA requirements, with willingness to support on-call and travel to customer locations when required. Due to the large volume of applications ...

alongside VMware-based Core deployments. • Excellent analytical, technical, communication and leadership skills, with an Engineering or equivalent technical degree/experience. • Awareness of NIST, OWASP, GCF and UK TSA requirements, with willingness to support on-call and travel to customer locations when required. Due to the large volume of applications ...

security risk and assurance, including LLM and agentic AI threat modelling, with knowledge of NIST AI RMF, ISO/IEC 42001 and OWASP guidance for LLM applications Experience supporting complex transformation programmes Energy and drive, with a real appetite for improving how a team works Desirable: Experience in a large … highly regulated organisation Knowledge of ISO 27001, NIST and OWASP CISSP, CISM or equivalent Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success ...

security risk and assurance, including LLM and agentic AI threat modelling, with knowledge of NIST AI RMF, ISO/IEC 42001 and OWASP guidance for LLM applications Experience supporting complex transformation programmes Energy and drive, with a real appetite for improving how a team works Desirable: Experience in a large … highly regulated organisation Knowledge of ISO 27001, NIST and OWASP CISSP, CISM or equivalent Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success ...

APIs and enterprise platforms. Identify, validate and exploit security vulnerabilities using recognised penetration testing methodologies and industry best practices. Conduct security testing aligned to OWASP guidance and application security frameworks. Produce detailed technical reports outlining findings, risk ratings, remediation recommendations and business impact. Work closely with application owners, technology teams … enterprise, consultancy or professional services environments. Strong practical experience conducting web application penetration testing, including manual assessment techniques and vulnerability validation. Excellent understanding of OWASP Top 10 vulnerabilities, web application security principles and offensive security methodologies. Experience performing independent security assessments and delivering findings from initial scoping through to final ...