176 to 200 of 213 OWASP Jobs in England

AWS.You think in quality and resilience: You understand performance, reliability, scalability and secure design, and you work with established frameworks and OWASP practices.You get leverage from tools: You know how to use AI coding agents effectively without outsourcing your judgement.You keep things simple: You weigh existing tools, libraries and patterns ...

code generation, component refactoring, test generation, and architectural brainstorming. Enforce a strict zero-trust verification loop over all AI outputs to guarantee type safety, OWASP vulnerability defense, and performance standards. Enterprise Security & Audit Pipeline: Enforce rigorous authentication and authorization postures (JWT tokens, ApiKey schemes, single sign-on) and block malicious ...

dynamic working environment. You have an Engineering degree or equivalent experience in Computer Science, Electronics, Telecoms or a related field. Awareness of NIST, OWASP and UK TSR requirements and how they impact delivery and testing of secure networks Willing to support an on-call rota as required. Abilty to work ...

ramp on a new AI tool or technique in days, not months. You will have an advantage if you also have: Security best practice (OWASP top ten) Windows services Experience using AI tooling specifically in the architect role - for design review, ADR drafting, threat modelling, contract design, or similar. Familiarity ...

including SAST, SCA, DAST, secrets scanning, IaC scanning, API security, threat modelling and CI/CD security. Map controls against frameworks including NIST SSDF, OWASP SAMM and OWASP DSOMM. Review security tooling and integrations across GitHub, GitLab, CI/CD and cloud environments. Conduct control-effectiveness assessments, evidence reviews ...

converting SAST, SCA, secrets or ASPM findings into prioritised, remediated work rather than raw reporting Strong understanding of common vulnerability classes and the OWASP Top 10, with practical knowledge of how to remediate them The ability to read and review code in at least one of our core languages: Java … policy-as-code tooling Experience establishing a security champions programme Experience securing large language model (LLM) or agentic AI capabilities, such as applying the OWASP Top 10 for LLM Applications Familiarity with financial services regulations and standards, such as the Digital Operational Resilience Act (DORA ...

ensure we are secure and demonstrably so to our customers. You’ll embed secure-by-design practices, monitor for irregular behaviour, align with OWASP Top 10 and AWS Well-Architected, and lead risk assessments and policy documentation under ISO 27001 ISMS. #J-18808-Ljbffr ...

write deliverables to a high standard Experience with Attack & Threat Modelling Red Team testing and social engineering attack methodologies Extensive knowledge of the OWASP Testing Methodology Knowledge of networking protocols and the OSI Model Working knowledge of CobaltStrike Preferred Education, Training & Experience: 5 years testing Experience ...

agentic AI. You will work hands-on at first and grow into wider governance and mentorship across teams. You will map findings to OWASP, MITRE ATLAS and NIST AI RMF, define controls for internal vs client-facing views, and help roll out tooling and incident response processes across accounts. #J ...

advanced Security Operations, or high-level Technical Support/Incident Response for enterprise infrastructure Proven capability to handle both Application Security (including knowledge of OWASP Top 10 vulnerabilities, L7 WAF, HTTP/S anomalies, Bot mitigation) and Network Security (L3/L4 volumetric DDoS, protocol abuse) Working knowledge of threat ...

with a solid understanding of HTTP methods, status codes, headers, and payloads. Security & Reliability Awareness: Familiarity with foundational web security principles (such as the OWASP Top 10) and a proactive approach to non-functional testing. Shift-Left Quality Practice: Experience actively participating in refinement sessions alongside Product Managers and Engineers ...

The Apex Group was established in Bermuda in 2003 and is now one of the world’s largest fund administration and middle office solutions providers. Our business is unique in its ability to reach globally ...

regulated environment. Essential skills: 5+ years of full stack development with C#/.NET and TypeScript/JavaScript Hands-on remediation of OWASP Top 10 issues, CVEs and dependency vulnerabilities Scanning tools such as SonarQube, Snyk, Veracode or Checkmarx Building and securing REST API integrations Regulated environment experience, ideally financial ...

/CD security Hands‐on experience with AWS and Cloudflare (or equivalents) and Terraform or similar IaC A strong grasp of the OWASP Top 10 and the ability to assess exploitability and impact Solid coding skills (e.g. Python, Go, Scala) and experience building security tooling or automation Practical understanding … risks in AI‐assisted and agentic development and LLM applications (e.g. OWASP Top 10 for LLMs) Experience with security risk analysis and risk management methods The ability to explain trade‐offs clearly to engineers and senior stakeholders, and to win people over Nice to have Experience building guardrails, sandboxes ...

improving how our code ships Cloud infrastructure on AWS: configuration, automation, and sensible, secure operations Security across the platform: secure coding standards, the OWASP Top 10, hardening, secrets, and staying on top of vulnerabilities and updates Reliability and robustness: observability, alerting, and a steady pair of hands when an incident … security basics done well, including IAM, secrets handling and least privilege A genuine security mindset: fluent in secure coding practices and the OWASP Top 10, and able to spot and fix real risk across code and infrastructure Comfortable automating with infrastructure as code and scripting, and keeping systems robust, observable ...

mobile security standards and practices Technical Skills Mobile Development Kotlin Android Swift iOS SwiftUI UIKit Jetpack Android SDK Swift Package Manager Mobile Security OWASP Mobile Top 10 OWASP MASVS Mobile Application Security Secure Coding Threat Modelling Authentication & Authorisation EncryptionSecure Storage Certificate Pinning Biometrics Android Keystore iOS Keychain Device Integrity Controls ...

mobile security standards and practices Technical Skills Mobile Development Kotlin Android Swift iOS SwiftUI UIKit Jetpack Android SDK Swift Package Manager Mobile Security OWASP Mobile Top 10 OWASP MASVS Mobile Application Security Secure Coding Threat Modelling Authentication & Authorisation Encryption Secure Storage Certificate Pinning Biometrics Android Keystore iOS Keychain Device Integrity ...

Skills & Experience Strong background in DevSecOps, Application Security or Integration Security. Expertise in OAuth2, OIDC, JWT and API Security . Strong knowledge of OWASP Top 10 and OWASP API Security Top 10 . Experience securing AWS environments, including IAM, networking and hybrid integrations. Ability to review code across Java, Kotlin ...

risk view, the test strategy and the tooling recommendations that other teams can reuse. Map findings and controls to recognised external frameworks (for example OWASP's agent-specific risk taxonomy, NIST's AI Risk Management Framework Govern function, and MITRE ATLAS) so ClearRoute's approach is defensible and auditable, Distinguish … test non‐deterministic systems and how to detect, quantify and mitigate hallucination Working knowledge of agentic‐AI‐specific risk frameworks and taxonomies, such as OWASP's agent risk categories and MITRE ATLAS Experience with the OWASP Top 10 for LLM Applications, including prompt injection and system‐prompt‐leakage risk categories ...

DevSecOps, or a similar hands-on cyber security roleStrong experience with SAST, DAST, and SCA tools such as Checkmarx, Snyk, Semgrep, Burp Suite, or OWASP ZAPExperience integrating automated security testing and controls into CI/CD pipelinesDemonstrable ability to investigate, validate, and remediate application security vulnerabilitiesExperience with attack surface management … common application vulnerabilitiesAwareness of emerging AI security risks, including prompt injection, data poisoning, and vulnerabilities affecting large language modelsFamiliarity with security frameworks such as OWASP Top 10 and MITRE ATLAS would be advantageousExcellent communication and stakeholder management skills, with the ability to work collaboratively across technical teamsApply now to speak ...

similar hands-on cyber security role Strong experience with SAST, DAST, and SCA tools such as Checkmarx, Snyk, Semgrep, Burp Suite, or OWASP ZAP Experience integrating automated security testing and controls into CI/CD pipelines Demonstrable ability to investigate, validate, and remediate application security vulnerabilities Experience with attack surface … vulnerabilities Awareness of emerging AI security risks, including prompt injection, data poisoning, and vulnerabilities affecting large language models Familiarity with security frameworks such as OWASP Top 10 and MITRE ATLAS would be advantageous Excellent communication and stakeholder management skills, with the ability to work collaboratively across technical teams Apply ...

similar hands-on cyber security role Strong experience with SAST, DAST, and SCA tools such as Checkmarx, Snyk, Semgrep, Burp Suite, or OWASP ZAP Experience integrating automated security testing and controls into CI/CD pipelines Demonstrable ability to investigate, validate, and remediate application security vulnerabilities Experience with attack surface … vulnerabilities Awareness of emerging AI security risks, including prompt injection, data poisoning, and vulnerabilities affecting large language models Familiarity with security frameworks such as OWASP Top 10 and MITRE ATLAS would be advantageous Excellent communication and stakeholder management skills, with the ability to work collaboratively across technical teams Apply ...

authentication, authorisation, injection, business logic and misconfiguration issues. Help identify attack paths, including privilege escalation, and explain their business impact. Follow recognised methodologies, including OWASP (WSTG, API Security Top 10), PTES and CHECK/CREST standards. Help prepare for engagements by confirming scope, access and prerequisites with the engagement lead. … years' commercial penetration testing experience across web applications, APIs and infrastructure. Good working knowledge of common web and API vulnerabilities, including the OWASP Top 10 and API Security Top 10. Practical experience with industry-standard tools such as Burp Suite, Nmap and Metasploit. Ability to validate findings, rule out false ...

establish and grow a security champions programme within our engineering teams Ensure our product security practices align with relevant frameworks and standards, such as OWASP, NIST, ISO 27001, GDPR and PCI DSS, supporting compliance and audit efforts while monitoring emerging threats and finding ways to strengthen our resilience … within CI/CD pipelines, ideally across cloud-native, containerised and infrastructure as code (IaC) environments Familiarity with industry standards and frameworks such as OWASP (ideally including the Mobile Application Security Verification Standard and API Security Top 10), PCI DSS, ISO 27001 and GDPR It would also be helpful ...

agentic tools. Implement access controls, secrets scanning and detection for internal AI systems and MCP integrations, mapped to frameworks such as the OWASP Top 10 for Agentic Applications. Research AI coding risks, such as slopsquatting and hallucinated packages, and feed findings into engineering practice. ISO 27001, compliance and client assurance … hear from you. Essential Hands-on experience in a security engineering, application security or cloud security role. Strong knowledge of web application security, including OWASP principles, authentication and authorisation, and secure API design. Practical experience of vulnerability management, from triage to working with engineers on remediation. Hands-on experience securing ...