151 to 175 of 213 OWASP Jobs in England

skills, knowledge and experience will you need? Demonstrative experience of conducting structured penetration tests following 2 out of 3 of the following established frameworks (OWASP, NIST Cybersecurity Framework, PTES). Experience in planning, executing and documenting security assessments with minimal supervision. Understanding of NIST SP 800-115 for technical security ...

queries. Experience developing secure code end to end: strong understanding of common vulnerabilities such as cross-site scripting, cross-site request forgery and other OWASP risks, along with authentication, authorisation and secrets handling, and best practices for testing and mitigating them. Solid grasp of frontend-backend integration, including asynchronous request ...

frameworks for Web, Mobile, and Microservices APIs. Testing Strategy & CI/CD: Drive TDD/BDD practices, execute non-functional testing (Performance, Security/OWASP), and integrate automated suites into CI/CD pipelines. Engineering Standards: Review backlogs to build risk-based test strategies, mentor engineers, and partner with developers ...

Proficiency with Maven/Nexus and GitLab CI/CD. · Understanding of distributed systems, clustering, and failover. · Strong knowledge of web security standards and OWASP Top 10. · Optional: Exposure to front-end tech, Python scripting, or AI/ML APIs. · 8+ years of professional Java development. · Enterprise-level backend/ ...

Proficiency with Maven/Nexus and GitLab CI/CD. Understanding of distributed systems, clustering, and failover. Strong knowledge of web security standards and OWASP Top 10. Optional: Exposure to front-end tech, Python scripting, or AI/ML APIs. 8+ years of professional Java development. Enterprise-level backend/ ...

critical service, regulated, infrastructure, cloud or technology-led environment. Understanding of frameworks such as NIST CSF, ISO 27001, CIS Controls, Cyber Essentials, OWASP or the NCSC Cyber Assessment Framework. Experience using scripting, workflow automation, data analysis, or reporting tools to improve vulnerability triage, remediation tracking, or reporting. Relevant cyber security ...

cost. You build validation, schema enforcement and safe failure behaviour for outputs that may be well-formed yet wrong. Authentication, authorisation, secrets, input validation, OWASP awareness and audit trails are part of everyday engineering. The delivery and cost You deploy and operate on AWS using EKS/ECS patterns ...

solutions using Terraform to support repeatable and compliant environments Implement automation across build, test and deployment workflows to ensure consistent and reliable delivery Apply OWASP security principles and DevSecOps practices throughout the delivery lifecycle Deploy and maintain containerised workloads using Kubernetes or AWS-native services such … pipeline management Demonstrable experience with Terraform and infrastructure-as-code delivery Deep understanding of Kubernetes architecture and operations in cloud environments Working knowledge of OWASP security principles and how to apply them in CI/CD and infrastructure design Competence in scripting languages such as Python, Bash or PowerShell Experience ...

Benchmarks, FIPS 140, ISO 27001 or Cyber Essentials Plus, ideally in defense, aerospace or another regulated sector. Security Tooling: Experience with tools such as OWASP ZAP, OWASP Dependency-Check, Trivy, Semgrep, SonarQube, Nessus or OpenSCAP, and with SBOM formats (CycloneDX, SPDX). Infrastructure: Experience with Terraform or Ansible, virtualization platforms ...

Development Lifecycle practices. What you'll do In this position, you are a passionate and talented application security engineer with very deep understanding of OWASP, CWE 25, Data Protection, Access management, software vulnerabilities, best practices design and threat modelling skills, who can work in a dynamic environment. You must … Product Security Prior experience in using AI models and cyber harnesses to support security evaluation of application and software code. GitHub, Copilot, Codex, OWASP Top 10 for Agentic AI, AI skills development and security triage. Ability to code in at least one programming language e.g. Python/JavaScript/CSharp ...

Experience with vulnerability scanning, secure configuration assessments and remediation tracking. An understanding of common attack techniques, security monitoring and incident response. Knowledge of the OWASP Top 10 and recognised cyber security principles. An understanding of the NIST Cybersecurity Framework and NIS Regulations. Experience working towards Cyber Essentials. The ability ...

Experience with vulnerability scanning, secure configuration assessments and remediation tracking. An understanding of common attack techniques, security monitoring and incident response. Knowledge of the OWASP Top 10 and recognised cyber security principles. An understanding of the NIST Cybersecurity Framework and NIS Regulations. Experience working towards Cyber Essentials. The ability ...

high-risk products and services. Conduct and oversee SAST, DAST, API security, fuzz testing and architecture-level assessments . Assess applications against the OWASP Top 10 and other relevant security standards. Identify vulnerabilities, understand their root causes and translate findings into practical remediation plans. Provide secure design and coding guidance … security , including model, data and prompt/model manipulation risks. Experience delivering developer-focused security training or workshops. Knowledge of frameworks such as OWASP SAMM, ASVS, NIST CSF or NIST SSDF . Relevant application security, cloud security or offensive security certifications. Experience working across multiple teams, countries or business entities. ...

Data Protection Act ISO 27001:2022, ISO 27005 and ISO 31000 PCI DSS NIST 800-30/53 CIS Top 18 and OWASP Top 10 Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome ...

architecture expertise to assess control effectiveness across modern engineering environments. You will review security tooling, map controls to frameworks such as NIST SSDF and OWASP DSOMM, conduct control assessments and facilitate engineering #J-18808-Ljbffr ...

testing Relevant security testing certifications such as CREST (CRT, CCT), OSCP, OSCE, GPEN or GXPN Demonstrable knowledge of common security vulnerabilities, including the OWASP Top 10 Strong analytical and problem-solving skills Excellent communication skills with the ability to engage confidently with both technical and non-technical stakeholders A collaborative ...

queries; Microsoft SQL Server preferred Git version control, including branching and reviewing changes Building and consuming REST APIs Secure coding practice, such as the OWASP Top 10 Understanding of data protection (UK GDPR) when handling personal data Clear written English, able to produce accurate technical documents and user guides Able ...

Selenium - Cypress - Performance Testing - JMeter DevOps Continuous Integration/Continuous Deployment (a.k.a., CICD) - Jenkins, GoCD, CircleCI, TeamCity - Security - For example: WhiteSource, Snyk, SonarQube, OAuth, OWASP Responsibilities Senior Contract Angular Developer, Leeds or UK Remote (occasional office time required), Angular Front End Developer to join a hugely impressive not for profit ...

particularly PostgreSQL, covering schema evolution, optimisation, and transaction management. Proficient in caching mechanisms using technologies like Redis. Understanding secure coding standards, with insights into OWASP principles. Experienced in containerization tools (Docker) throughout the development lifecycle. Advocate for test automation practices, emphasising reliability and rapid deployment. Capable of translating business requirements ...

particularly PostgreSQL, covering schema evolution, optimisation, and transaction management. Proficient in caching mechanisms using technologies like Redis. Understanding secure coding standards, with insights into OWASP principles. Experienced in containerization tools (Docker) throughout the development lifecycle. Advocate for test automation practices, emphasising reliability and rapid deployment. Capable of translating business requirements ...

practical terms. Experience with AI governance, responsible AI, model risk management or AI assurance. Familiarity with frameworks and guidance such as NIST AI RMF, OWASP Top 10 for LLM Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations ...

practical terms. Experience with AI governance, responsible AI, model risk management or AI assurance. Familiarity with frameworks and guidance such as NIST AI RMF, OWASP Top 10 for LLM Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations ...

engagement, and plan testing that meets their assurance needs. Apply manual and tool-assisted testing techniques aligned with recognised methodologies and frameworks, including the OWASP Web Security Testing Guide, PTES, and MITRE ATT&CK. Deliver Cyber Essentials Plus assessments, including scoping, conducting the required technical tests, verifying remediation and supporting ...

engagement, and plan testing that meets their assurance needs. * Apply manual and tool-assisted testing techniques aligned with recognised methodologies and frameworks, including the OWASP Web Security Testing Guide, PTES, and MITRE ATT&CK. * Deliver Cyber Essentials Plus assessments, including scoping, conducting the required technical tests, verifying remediation and supporting ...

AWS. You think in quality and resilience: You understand performance, reliability, scalability and secure design, and you work with established frameworks and OWASP practices. You get leverage from tools: You know how to use AI coding agents effectively without outsourcing your judgement. You keep things simple: You weigh existing tools ...