151 to 174 of 174 OWASP Jobs in England

Expertise in Continuous Security, Continuous Integration and Continuous Delivery techniques Knowledge of international security standards and regulations such as NCSC, NIST, CIS, PCI, GDPR, OWASP ASVS, HIPPA, SOC2 etc. Knowledge of typical cyber security attack vectors (e.g. OWASP Top 10, SQL, XSS, XXE, MITM etc.) and can articulate threats … equivalent) Experience of working with the external penetration test companies to translate report findings into actionable tasks. Experience with security tools (e.g. Burp Suite, OWASP-ZAP, NMAP, Nessus, Kali, Metasploit etc.) Knowledge about main cyber security areas (e.g. OSINT, network scanning, enumeration, sniffing, session hijacking, social engineering, firewalls, honeypots ...

The Apex Group was established in Bermuda in 2003 and is now one of the world’s largest fund administration and middle office solutions providers. Our business is unique in its ability to reach globally ...

similar technologies Drive improvements across CI/CD pipelines, automated testing and deployment processes Ensure applications are secure, maintainable and aligned with OWASP best practices Conduct code reviews and promote engineering standards across the development team Work closely with UI/UX teams to deliver high-quality user experiences Contribute … Terraform Experience building and maintaining CI/CD pipelines using Azure DevOps, GitHub Actions or similar Strong understanding of secure software development and OWASP principles Experience working within Agile development teams Excellent communication skills with the ability to engage technical and non-technical stakeholders A proactive, hands-on approach with ...

injection, machine identities), hardening against AI-driven threats (phishing-resistant MFA, supply chain/developer guardrails, help desk impersonation defenses), and implementing NIST/OWASP/ATLAS risk frameworks. Additionally, you will oversee enterprise architecture, secure-by-default software lifecycles, and risk-based vulnerability management. Job Responsibilities … engineer, an executive, and an enterprise customer on the same incident and land it with all three. Nice to have: securing AI product features, OWASP Top 10 for LLM Applications, the NIST AI Risk Management Framework, MITRE ATLAS, SOC 2, or ISO 27001. Education Degree in a STEM field, preferably ...

Senior Applied AI Engineer Defence & National Security Location: London/Oxford Hybrid Contract: 6 months initially, with strong potential for extension Day Rate: £700£900 per day, depending on experience IR35: Outside IR35 Start Date ...

your team. Set and enforce best practices across coding standards, testing, observability, and documentation. Ensure the team follows secure software development practices, including OWASP standards, data privacy, and compliance requirements. Guide architectural decisions for low‐latency, high‐availability backend systems and microservices. Champion an AI‐first engineering culture, setting standards … understanding of microservices and event‐driven architectures, APIs, and integration patterns. Experience with SQL and relational databases. Knowledge of secure software development practices and OWASP principles. Champion of AI‐first development — experience setting standards for AI‐assisted coding, automated testing, and code generation using LLMs and tools like Claude Code ...

Senior AI Engineer (BioTech/Pharma) | Outside IR35 Contract £600 - 700pd | Hybrid, Oxford | 6 Months Harvey Nash are working with an exciting consultancy who are looking to bring on a highly experienced AI Engineer to ...

Information Security Manager 12-Month Fixed-Term Contract Hybrid (Cambridge once a week) Salary: £85,000 - £100,000 FTE REED Technology is exclusively partnering with an innovative digital health organisation that develops market-leading healthcare ...

security reviews, threat modeling applications and identifying areas of risk Experience implementing strategies to support secure and compliant architectures Deep understanding of the OWASP Top 10 application security risks and how to address them Expert knowledge of Amazon AWS, Microsoft Azure or other cloud computing platform offerings and security related … experience Nice to Have Experience with assessing and providing recommendations for securing generative AI solutions Working knowledge of the Microsoft Security Development Lifecycle (SDL), OWASP Software Assurance Maturity Model (SAMM), or Building Security in Maturity Model (BSIMM). Familiar with compliance regulations like; ISO, GDPR, SOC2, SOX MS in Cyber ...

Debug across whole chains, from application to integration to database to network, and write down what you found and changed Code securely as standard: OWASP practice, secrets in OCI Vault rather than source code, and security testing in every pipeline Join the on call rota for high priority incidents outside … debugged yourself: OAuth tokens, certificates and TLS Delivery discipline you can show: Git branching, peer review, pipelines with security testing, OWASP secure coding practice, and rollbacks tested Solid SQL and PL/SQL, used to trace and reconcile data, including on Oracle Autonomous AI Database The habit of debugging across ...

resolving production issues, performing root cause analysis. Contribute to architectural decisions, including system design, integrations, and data modelling. Champion best practices across performance, security (OWASP), and scalability. Identify technical debt and lead initiatives to reduce it. Guide adoption of modern tooling, frameworks, and patterns. Troubleshooting production issues and performing root … technical problems and working across large systems Have a strong understanding of software architecture and design patterns Take a security-first approach and understand OWASP principles Are confident balancing hands-on development with technical leadership Communicate effectively with both technical teams and stakeholders Are proactive, organised and take ownership ...

Senior Applied AI Engineer Private Sector Location: Harwell, Oxfordshire Hybrid (2 days per week on site, remainder remote) Contract: 6 months initially, with strong potential for extension Day Rate: £700£900 per day, depending on ...

hardening Monitor systems for irregular behaviour and proactively design detection and prevention mechanisms Ensure infrastructure and applications align with accepted industry standards (e.g. OWASP Top 10 , AWS Well-Architected Framework ) Conduct and lead risk assessments , including third-party/vendor reviews and internal evaluations Document and maintain security policies, procedures … ecosystem and can comfortably navigate enterprise security tools across vendors Have solid foundations in networking, systems, and cloud infrastructure, and can apply frameworks like OWASP and AWS Well‐Architected to real‐world scenarios Have experience reviewing and improving product and infrastructure security, including secure SDLC practices (e.g. threat modelling, secure ...

appropriate security posture. Design, implement, maintain and optimise WAF policies across multi-cloud environments. Lead the investigation and mitigation of web application attacks, including OWASP Top 10 threats, bot attacks, credential stuffing, scraping, Layer 7 DDoS attacks and other web-based threats. Develop, maintain and enhance custom WAF rules, managed … controls, and attack mitigation policies, rather than solely relying on out-of-the-box managed rules. Extensive knowledge of web application attack vectors, including OWASP Top 10 vulnerabilities, SQL Injection, Cross-Site Scripting (XSS), Remote Code Execution (RCE), bot attacks, credential stuffing, and API abuse. Advanced hands-on expertise ...

Debug across whole chains, from application to integration to database to network, and write down what you found and changed - Code securely as standard: OWASP practice, secrets in OCI Vault rather than source code, and security testing in every pipeline - Join the on call rota for high priority incidents outside … debugged yourself: OAuth tokens, certificates and TLS - Delivery discipline you can show: Git branching, peer review, pipelines with security testing, OWASP secure coding practice, and rollbacks tested - Solid SQL and PL/SQL, used to trace and reconcile data, including on Oracle Autonomous AI Database - The habit of debugging across ...

Code. A solid grounding in secure by default engineering, observability and production operability, with practical knowledge of AI security practices such as the OWASP Top 10 for LLM and Generative AI applications and OWASP guidance for agentic AI. We believe in equal opportunity for all and actively encourage applications from ...

Code. A solid grounding in secure by default engineering, observability and production operability, with practical knowledge of AI security practices such as the OWASP Top 10 for LLM and Generative AI applications and OWASP guidance for agentic AI. By applying for this role, you consent to SGI contacting ...

security testing tools such as Nessus, Nmap, Burp Suite, Metasploit, and similar platforms. In-depth knowledge of IT security standards and frameworks such as OWASP, NIST, and SANS Top 25. Familiarity with the OSI model, TCP/IP model, and core networking concepts. Hands‐on experience in manual penetration testing … experience with commercial and open-source tools/frameworks including Burp Suite, Metasploit, Core Impact, Scapy, AppScan, WebInspect, Qualys, Nessus, Nmap, SQLmap, and OWASP ZAP. Travel Travel may be required across the country for project execution, monitoring, assessments, testing activities, and coordination with geographically distributed teams, as and when required. ...

Infrastructure as Code. A solid grounding in secure-by-default engineering, observability and production operability. Practical knowledge of AI security practices, including the OWASP Top 10 for LLM and Generative AI applications and OWASP guidance for agentic AI. Previous experience working within Information Security or Security engineering environments would ...

finding. What You'll Do Own inbound product direction for your area. Research emerging agentic AI capabilities, attacker techniques, and adjacent standards (MCP, A2A, OWASP agentic-security guidance, agent identity frameworks) to determine what MARS for Agents should build next across the agent registry, Claude integration, Microsoft Copilot integration … integration platform. Direct experience with MCP, LLM/agent tool-calling architectures, or building integrations with Claude or other frontier model providers. Familiarity with OWASP frameworks, including emerging OWASP guidance for agentic AI security. Experience directly supporting a technical sales motion — SE enablement, competitive battlecards, customer discovery calls. Experience ...

application security principles across the full software development lifecycle Hands on experience with SAST and SCA tooling such as Semgrep, Checkmarx, Snyk, and OWASP Dependency Check Experience configuring and operating DAST tools such as OWASP ZAP, Burp Suite Enterprise, and Invicti Ability to triage, validate, and reproduce vulnerabilities through manual ...

protection capabilities. Strong hands on experience with Web Application Firewalls (WAF), including policy design, rule tuning, exception management and application onboarding. Good understanding of OWASP Top 10 and OWASP API Security Top 10. Knowledge of HTTP/S, REST APIs and application layer attack mitigation. Experience with vulnerability management, Qualys ...

authentication mechanisms. Security Expertise Runtime Application Self‐Protection (RASP) Anti‐tampering protections Anti‐debugging mechanisms Certificate pinning Application integrity validation Strong understanding of: OWASP Mobile Top 10 OWASP MASVS Secure SDLC practices Mobile attack techniques and adversarial behaviour Knowledge of: Frida Objection Dynamic instrumentation frameworks Jailbreak environments Runtime hooking methodologies ...

penetration tests and red-team exercises against the apps, reverse-engineer builds to find what static review misses, and use the OWASP Mobile Application Security Verification Standard (MASVS) and Testing Guide (MASTG) as your working framework rather than a checklist you fill in after the fact. You’ll work closely … binaries to surface sandboxing, permission, and platform-security weaknesses before an outside attacker finds them. You’ll test Klarna's mobile apps against the OWASP MASVS and MASTG, and use the results to drive concrete fixes with engineering teams. You’ll evaluate and stress-test app-hardening and RASP protections ...