26 to 50 of 213 OWASP Jobs in England

Azure, or GCP). Proficient in programming languages like C/C++, Java, JS, Python, Go, or Rust. Deep understanding of common vulnerability frameworks (OWASP Top 10, SANS CWE Top 25). Solid grasp of enterprise software development, Agile, CI/CD pipelines, and security tooling (SAST, DAST, OSA, Vulnerability ...

controls for SaaS applications and backend services across API gateways, identity and access management, data protection, and SIEM-based security monitoring.Security Standards: Familiarity with OWASP Top 10 and CWE Top 25 vulnerabilities.Cloud Security: Direct experience with, or a strong understanding of, SaaS, PaaS and IaaS services and their security considerations.Development ...

SaaS applications and backend services across API gateways, identity and access management, data protection, and SIEM-based security monitoring. \n Security Standards: Familiarity with OWASP Top 10 and CWE Top 25 vulnerabilities. \n Cloud Security: Direct experience with, or a strong understanding of, SaaS, PaaS and IaaS services and their ...

conducting threat modelling (e.g. STRIDE, attack trees) and risk analysis Strong understanding of security frameworks and best practice such as ISO 27001, NIST, CIS, OWASP, NCSC guidance Experience working in the UK Public Sector and associated security standards and guidance including GovAssure/NCSC CAF, HMG Security Policy Framework. Knowledge ...

following... Cloud and infrastructure security : Experience or interest in Azure, Linux, networking, firewalls or identity and access management Application security : Secure coding, the OWASP Top 10, code or dependency scanning Security operations : Log analysis, SIEM tools, threat intelligence or incident response Governance and risk : Interest in security frameworks and standards ...

Black Duck; policy as code; or threat modelling. Familiarity with relevant security standards and frameworks, such as NCSC Secure by Design, ISO 27001, OWASP or SLSA. Site reliability engineering practices, disaster recovery testing or supplier‐to‐operations handover. Candidates are not expected to have used every technology listed. Strong core ...

Black Duck; policy as code; or threat modelling. Familiarity with relevant security standards and frameworks, such as NCSC Secure by Design, ISO 27001, OWASP or SLSA. Site reliability engineering practices, disaster recovery testing or supplier‐to‐operations handover. Candidates are not expected to have used every technology listed. Strong core ...

Black Duck; policy as code; or threat modelling. Familiarity with relevant security standards and frameworks, such as NCSC Secure by Design, ISO 27001, OWASP or SLSA. Site reliability engineering practices, disaster recovery testing or supplier‐to‐operations handover. Candidates are not expected to have used every technology listed. Strong core ...

Desirable Technical Skills Experience with any of the following would be advantageous: Test Automation: Playwright, Selenium, JUnit, Cucumber/Gherkin Performance & Security Testing: Gatling, OWASP ZAP, SonarQube Accessibility Testing: Axe, WAVE, WCAG Development & Testing Tools: WireMock, GitHub Copilot, OpenAPI Cloud & Infrastructure: AWS, Docker, Kubernetes, Microservices Contract Details Rate ...

your background might be better suited to. 5+ years ofrelevantexperienceinthe medical devicespace (eitherindustryor through consulting/service provider) Proficiency in security frameworks (e.g., NIST, OWASP, MITRE ATT&CK, PASTA, STRIDE) and standards such as FDA cybersecurity guidance Experience assessing security risks using industry standard methods (penetration test results, threat modeling ...

security vulnerabilities.Experience performing threat modeling and application security reviews.Strong understanding of authentication, authorization, session management, web security, API security and mobile security.Strong knowledge of OWASP Top 10s and their practical remediation.Hands-on experience with application security technologies such as SAST, SCA, DAST, API Security, WAF.Experience with microservices, APIs, containers, Kubernetes ...

. Proficient in programming languages like C/C++, Java, JS, Python, Go, or Rust. Possess a deep understanding of common vulnerability frameworks (OWASP Top 10, SANS CWE Top 25). Solid grasp of enterprise software development, Agile, CI/CD pipelines, and security tooling (SAST, DAST, OSA, Vulnerability Management ...

PowerShell or Python. Experience gained within a legal, financial services or similarly regulated organisation. Awareness of security frameworks and best practice including NCSC guidance, OWASP, NIST CSF, CIS Controls, ISO 27001, ISMS principles and GDPR. Experience with automation, security testing, forensic investigation activities, DLP monitoring, privileged access, key management ...

Code experience using Terraform and/or Bicep. Automation experience using PowerShell and/or Python. Knowledge of Kubernetes, AKS, container security and OWASP principles. Ability to communicate effectively with both technical and business stakeholders. Desirable Experience Multi-tenant SaaS platform environments. Microsoft Defender XDR suite. Building or transforming ...

modelling, security architecture reviews and control design activities. Strong knowledge of security frameworks including NIST CSF, NIST AI RMF, ISO 27001, ISO 42001 and OWASP AI security guidance. Experience working within highly regulated environments such as healthcare, financial services or government. Excellent communication skills with the ability to explain complex ...

with AI and agentic security risks (prompt injection, data poisoning, model and agent governance). Have experience mapping security frameworks (NIST CSF, ISO 27001, OWASP, NIST AI RMF). Have hands‐on exposure to detection and response, red‐team, or pen‐test work. Have experience with our stack: Azure/ ...

your background might be better suited to. 5+ years ofrelevantexperienceinthe medical devicespace (eitherindustryor through consulting/service provider) Proficiency in security frameworks (e.g., NIST, OWASP, MITRE ATT&CK, PASTA, STRIDE) and standards such as FDA cybersecurity guidance Experience assessing security risks using industry standard methods (penetration test results, threat modeling ...

Comfortable learning new languages, tools and observability technologies as required. Nice to Have: Experience with AWS or GCP; GraphQL, gRPC or REST API design; OWASP and GDPR; or mobile and web performance optimisation. MEASURES & GOALS: (HOW WILL THE SUCCESS OF THE PERSON IN THIS POSITION BE MEASURED – WHAT ...

Code (Terraform knowledge beneficial). CI/CD pipeline experience (GitHub Actions, SonarQube for test coverage). Performance and security testing knowledge - familiarity with OWASP and monitoring tools. ...

frameworks including Selenium, Cypress, Postman, or REST Assured. Familiarity with performance testing tools such as k6, JMeter, Gatling, or NeoLoad. Understanding of DevSecOps principles, OWASP, SAST/DAST, SonarQube, and Snyk. Active SC Clearance is essential. What's on Offer: Hybrid working from Telford. Opportunity to deliver critical government ...

programmes. Experience conducting threat modelling and architecture security reviews. Deep understanding of application security principles, attack techniques, and risk management. Hands-on experience with OWASP Top 10, SAST, DAST, SCA, Container Security, Infrastructure as Code Security, CI/CD Security, and API Security. Experience securing cloud-native environments, particularly ...

programmes. Experience conducting threat modelling and architecture security reviews. Deep understanding of application security principles, attack techniques, and risk management. Hands-on experience with OWASP Top 10, SAST, DAST, SCA, Container Security, Infrastructure as Code Security, CI/CD Security, and API Security. Experience securing cloud-native environments, particularly ...

Kubernetes). Incident & Penetration Expertise: Experience leading incident response and management, with familiarity in pen testing of applications and infrastructure. Application Security: Familiarity with OWASP principles, web application security, security practices on native mobile apps (iOS and Android), and security-by-design principles. Tooling & Threat Landscape: Familiarity with project management ...

Kubernetes). Incident & Penetration Expertise: Experience leading incident response and management, with familiarity in pen testing of applications and infrastructure. Application Security: Familiarity with OWASP principles, web application security, security practices on native mobile apps (iOS and Android), and security-by-design principles. Tooling & Threat Landscape: Familiarity with project management ...

management within a software development or SaaS environment. Practical understanding of Security by Design (SbD) concepts, threat modelling principles, and application security baselines (e.g., OWASP, ISO 27001, NIST). Familiarity with modern software development lifecycles (SDLC), cloud hosting platforms (AWS, Azure, or GCP), and production service operations. Excellent stakeholder engagement ...