126 to 150 of 176 OWASP Jobs in England

application security reviews for high-risk products and services.Conduct and oversee SAST, DAST, API security, fuzz testing and architecture-level assessments.Assess applications against the OWASP Top 10 and other relevant security standards.Identify vulnerabilities, understand their root causes and translate findings into practical remediation plans.Provide secure design and coding guidance throughout … environments.Awareness of AI security, including model, data and prompt/model manipulation risks.Experience delivering developer-focused security training or workshops.Knowledge of frameworks such as OWASP SAMM, ASVS, NIST CSF or NIST SSDF.Relevant application security, cloud security or offensive security certifications.Experience working across multiple teams, countries or business entities.In return ...

large scale enterprise IT system environmentsKnowledge of security vulnerabilities and common software engineering flaws and Network Defence analytical models (Kill Chain, ATT&CK, OWASP top 10etc.)Strong verbal & written communication skills & presentation skillsAbility to work in a fast-paced environment as a problem solver and barrier breaker with initiativeCareer Stage ...

London base. The ideal candidate will assess security across codebases and APIs using Java, TypeScript and Python, and will be well-versed in OWASP Top 10 and secure coding practices. You will triage, validate and remediate vulnerabilities with both technical and non-technical stakeholders, and embed security tooling into ...

manual testing where it delivers the greatest value Provide clear, risk-based recommendations to support release decisions Contribute to security focused testing, including OWASP principles and lightweight threat modelling Help ensure products meet accessibility standards by testing against WCAG guidelines Continuously identify opportunities to improve testing processes, tooling, and overall ...

dynamic working environment. You have an Engineering degree or equivalent experience in Computer Science, Electronics, Telecoms or a related field. Awareness of NIST, OWASP, GCF and UK TSA requirements and how they impact delivery and testing of secure networks Willing to support an on‐call rota as required. Ability ...

Experience with infrastructure and DevOps fundamentals: CI/CD, cloud platforms, CDN, monitoring/observability, and deployment strategies. Strong understanding of security best practices (OWASP, authentication/authorization patterns, secure data handling) — especially in a financial context. Experience hiring, mentoring, and growing engineers — building a high‐performing team, not just ...

understanding of secure, scalable application architecture, APIs and modern CI/CD development practices using Git and Jira. Knowledge of accessibility standards (WCAG), GDPR, OWASP security principles and age-appropriate design. Experience working collaboratively within multidisciplinary teams, with the confidence to communicate technical ideas clearly and effectively. Why join ...

Experience with infrastructure and DevOps fundamentals: CI/CD, cloud platforms, CDN, monitoring/observability, and deployment strategies. Strong understanding of security best practices (OWASP, authentication/authorization patterns, secure data handling) — especially in a financial context. Experience hiring, mentoring, and growing engineers — building a high‐performing team, not just ...

experience, including technical leadership.Expertise in Java/Kotlin, Spring Boot, REST APIs, and MongoDB.Experience with ReactJS, JavaScript, and TypeScript.Strong understanding of secure coding (e.g., OWASP principles).Strong experience with CI/CD, Git workflows, automated testing.Experience leading AI feature development or integrating ML models into production systems.Career Stage:ManagerLondon Stock ...

leadership.* Expertise in Java/Kotlin, Spring Boot, REST APIs, and MongoDB.* Experience with ReactJS, JavaScript, and TypeScript.* Strong understanding of secure coding (e.g., OWASP principles).* Strong experience with CI/CD, Git workflows, automated testing.* Experience leading AI feature development or integrating ML models into production systems.**Career ...

Strong stakeholder communication skills, able to advise Engineering, Product and Pre-Sales credibly. Extremely strong documentation skills. Experience with AI/LLM security testing (OWASP LLM Top 10, prompt injection, model/vendor risk assessment). Familiarity with the Microsoft 365 E5 security stack (Entra ID, Defender for Endpoint, Intune … deployment plan). AI & Emerging Risk Provide technical engineering support to the AI Security & Governance function for LLM/model security testing (OWASP LLM Top 10 etc.), including scripted test harnesses and repeatable validation tooling, where execution capacity is needed. Support technical validation of AI/cloud vendor control claims ...

with technical and non-technical stakeholders alike.Nice to have:Experience in high-growth tech environments, BioTech, ML-centric companies, or the pharmaceutical industry.Familiarity with OWASP Top 10 for LLMs, prompt injection prevention, and secure integration of internal AI assistants.Hands-on experience building or integrating AI-driven automation, agentic workflows ...

technical stakeholders alike. Nice to have: Experience in high-growth tech environments, BioTech, ML-centric companies, or the pharmaceutical industry. Familiarity with OWASP Top 10 for LLMs, prompt injection prevention, and secure integration of internal AI assistants. Hands-on experience building or integrating AI-driven automation, agentic workflows, or custom ...

pattern, REST APIs and asp.net controllers are a must. Web developers should be aware of security vulnerabilities, such as those identified in OWASP, and their code should mitigate these threats.Knowledge Required:Web Developers will need experience in the design, creation and maintenance of websites across multiple platforms as follows:Writing ...

ensure we are secure and demonstrably so to our customers. You’ll embed secure-by-design practices, monitor for irregular behaviour, align with OWASP Top 10 and AWS Well-Architected, and lead risk assessments and policy documentation under ISO 27001 ISMS. #J-18808-Ljbffr ...

manually auditing source code to find security issues or programming skills in one or more of: Java, .NET, Python or JavaScript frameworks.Strong understanding on OWASP TOP 10 vulnerabilities.Strong understanding of common API security risksStrong understanding on Cloud-Native application architecture, microservices, containerization technologies, secure deployment and implementation issues.Proven experience … relation to application securityExperience working with threat modeling methodologies such as MITRE ATT&CK, STRIDE, PASTA etc.Efficiency with web proxies such as Burp or OWASP ZAP or FiddlerUnderstanding of OAuth and JWT implementations.Ability to organize & communicate effectively, both written and verbal, with technical and non-technical people across functional teamsA ...

application architecture for Enterprise scale web applications including Microservices and Micro Frontends.Experience with cloud solutions & containerised web application designA good understanding of the OWASP top 10, and common patterns to protect against those vulnerabilitiesDeep knowledge of web infrastructure subjects i.e. CDNs, WAFs, DNSs, SSL and TLSDemonstrable hands-on experience designing ...

architecture for Enterprise scale web applications including Microservices and Micro Frontends.* Experience with cloud solutions & containerised web application design* A good understanding of the OWASP top 10, and common patterns to protect against those vulnerabilities* Deep knowledge of web infrastructure subjects i.e. CDNs, WAFs, DNSs, SSL and TLS* Demonstrable hands ...

architecture for Enterprise scale web applications including Microservices and Micro Frontends. Experience with cloud solutions & containerised web application design A good understanding of the OWASP top 10, and common patterns to protect against those vulnerabilities Deep knowledge of web infrastructure subjects i.e. CDNs, WAFs, DNSs, SSL and TLS Demonstrable hands ...

guardrails. Nice to have Working familiarity with AI security standards and references such as the NIST AI RMF, ISO 42001, MITRE ATLAS, or the OWASP LLM Top 10. Hands‐on experience with policy‐as‐code and turning standards into enforced controls. Contributions to security standards, frameworks, or industry practice. ...

guardrails. Nice to have Working familiarity with AI security standards and references such as the NIST AI RMF, ISO 42001, MITRE ATLAS, or the OWASP LLM Top 10. Hands‐on experience with policy‐as‐code and turning standards into enforced controls. Contributions to security standards, frameworks, or industry practice. ...

need for guardrails.Nice to haveWorking familiarity with AI security standards and references such as the NIST AI RMF, ISO 42001, MITRE ATLAS, or the OWASP LLM Top 10.Hands-on experience with policy-as-code and turning standards into enforced controls.Contributions to security standards, frameworks, or industry practice.Our Commitment to Diversity ...

management. Excellent attention to detail. Adheres to and promotes high standards. Understanding of vulnerability and threat assessment frameworks, such as: CVSS, CVE, CWE,OWASP, MITRE. Operational Technology (OT) management experience in vulnerability scanning. Competent at keeping up to date on CTI (Cyber Threat Intelligence) Desirable Experience with security or compliance ...

developer tooling used inside our own delivery pipelines. Threat modelling and risk Lead threat modelling for applications, APIs and AI features using STRIDE and OWASP methods, supported by appropriate HL TM tooling, driving the resulting mitigations to closure. Assess the security implications of new products, technologies and third-party integrations … sector; mobile application security; software supply chain and secure SDLC; hands-on experience with Amazon Bedrock or comparable managed model platforms; familiarity with the OWASP Top 10 for LLM and Agentic Applications; working knowledge of OWASP ASVS, Top 10 and API Security Top 10. Azure exposure is useful, although ...

manually confirming exploitability beyond what scanners or AI analysis reports. Use Interactive Application Security Testing (IAST) tools for runtime analysis, such as Burp Suite, OWASP ZAP, Frida, applying hands‐on technique to validate and extend automated results. Conduct Static Application Security Testing (SAST) and Software Composition Analysis (SCA) on source … secure coding training and promote a positive security posture. Requirements Have hands‐on experience with DAST, IAST and penetration testing tools (e.g., Burp Suite, OWASP ZAP, Frida), and can manually identify and exploit vulnerabilities beyond what these tools surface automatically. Can demonstrate independent, hands‐on technical ability, for example through ...