26 to 50 of 174 OWASP Jobs in England

/Security Hub. Strong coding ability in TypeScript or Python or Go comfortable shipping production code, not just configs and scripts. Application security fluency: OWASP Top 10, threat modeling, and code‐level reviews on real systems. Experience securing a B2B SaaS multi‐tenant production environment. Comfort owning ...

HITRUST, GDPR) Familiarity with data protection regulations and AI Security frameworks (e.g., GDPR, NIST AI RMF, ISO/IEC 27001, ISO/IEC 42001, OWASP Top 10 for LLMs, MITRE ATLAS) is a plus. Excellent communication and stakeholder management skills, capable of influencing at all levels and gaining a ‘Trusted ...

distributed systems, scalability, resilience and performance tuning Experience with cloud-native applications, Docker, Kubernetes and CI/CD Strong knowledge of application security, OWASP principles and secure development practices Knowledge of a modern front-end node-based framework Other Information Permanent role – 37.5 hours per week. Monday to Friday ...

Knowledge of non-functional testing areas such as reliability, usability, security or stability Experience with performance, load, or penetration testing tools (e.g. JMeter, LoadRunner, OWASP ZAP) Knowledge of CI/CD and DevOps pipelines with integrated testing Familiarity with Agile/SAFe delivery and test automation in agile contexts Experience ...

working within Agile delivery environments. Quality-first mindset with a focus on continuous improvement. Testing & Automation JUnit Playwright Selenium Cucumber Performance & Security Testing Gatling OWASP ZAP Cloud & Infrastructure AWS Docker Kubernetes Accessibility WCAG Wave Axe Technology Stack Front End Remix React JavaScript Back End Java Spring .NET Data & Messaging MongoDB ...

teams. Desirable Skills Experience with the following technologies and tools would be advantageous: Testing & Automation JUnit Playwright Selenium Cucumber Performance Testing Gatling Security Testing OWASP ZAP Cloud & Containerisation Docker Kubernetes AWS Accessibility Testing WCAG Standards WAVE ...

Proven coaching and team engagement skills. Ability to adapt and context switch across different priorities. Desirable JUnit Playwright/Selenium Cucumber/Gherkin Gatling OWASP ZAP SonarQube WireMock Kubernetes/Docker Microservices AWS OpenAPI WCAG/Axe/Wave GitHub Copilot Agile Scrum practices If this role is of interest ...

your background might be better suited to. 5+ years ofrelevantexperienceinthe medical devicespace (eitherindustryor through consulting/service provider) Proficiency in security frameworks (e.g., NIST, OWASP, MITRE ATT&CK, PASTA, STRIDE) and standards such as FDA cybersecurity guidance Experience assessing security risks using industry standard methods (penetration test results, threat modeling ...

products and architectures, conducting threat modeling exercises, and translating findings into actionable security controls. Practical understanding of web application security concepts (such as OWASP Top-10 and similar). Hands-on experience with IaC and related tools (Terraform, CloudFormation, Helm, Pulumi). Experience with automation and tooling development ...

customer, contractual, or compliance obligations. Familiarity with AI security frameworks and guidance such as the NIST AI Risk Management Framework, NIST Generative AI Profile, OWASP Top 10 for LLM Applications, or Cloud Security Alliance AI security guidance. Experience with RAG architecture, AI agents, vector databases, AI APIs, prompt engineering ...

customer, contractual, or compliance obligations. Familiarity with AI security frameworks and guidance such as the NIST AI Risk Management Framework, NIST Generative AI Profile, OWASP Top 10 for LLM Applications, or Cloud Security Alliance AI security guidance. Experience with RAG architecture, AI agents, vector databases, AI APIs, prompt engineering ...

release management in a controlled, regulated environment Desirable: ASP.NET/ASP.NET Core, Entity Framework, NUnit/xUnit, ServiceNow integration, Terraform, Docker/Kubernetes, OWASP, SBOM standards, CyberArk This is a chance to own the build and deployment platforms at the heart of a top-tier financial services technology function ...

blue or purple team activities - Experienced in software development or experience contributing to Open-Source projects - Experienced with DAST tools such as Burp Suite, OWASP Zap or similar - Experience with SAST/SCA tools such as Snyk, Veracode, Checkmarx or similar - Proficient in one or more of the following languages ...

engagement, and plan testing that meets their assurance needs. Apply manual and tool‐assisted testing techniques aligned with recognised methodologies and frameworks, including the OWASP Web Security Testing Guide, PTES, and MITRE ATT&CK. Deliver Cyber Essentials Plus assessments, including scoping, conducting the required technical tests, verifying remediation and supporting ...

.* Proficient in programming languages like C/C++, Java, JS, Python, Go, or Rust* Possess a deep understanding of common vulnerability frameworks (OWASP Top 10, SANS CWE Top 25).* Solid grasp of enterprise software development, Agile, CI/CD pipelines, and security tooling (SAST, DAST, OSA, Vulnerability Management ...

conducting threat modelling (e.g. STRIDE, attack trees) and risk analysis Strong understanding of security frameworks and best practice such as ISO 27001, NIST, CIS, OWASP, NCSC guidance Experience working in the UK Public Sector and associated security standards and guidance including GovAssure/NCSC CAF, HMG Security Policy Framework. Knowledge ...

with AI and agentic security risks (prompt injection, data poisoning, model and agent governance). Have experience mapping security frameworks (NIST CSF, ISO 27001, OWASP, NIST AI RMF). Have hands‐on exposure to detection and response, red‐team, or pen‐test work. Have experience with our stack: Azure/ ...

following Working knowledge of NIST frameworks (e.g. SP 800-53, SSDF) or equivalent (Software Cyber, AI Cyber Security Code of Practice, ISO 27001, CIS, OWASP) and their application within software development and DevSecOps practices Familiarity with scientific, engineering, or technical domains relevant to UKAEA’s mission, particularly where computing infrastructure ...

/CD, automated testing, code quality controls, observability, incident diagnosis, reliability engineering and DevSecOps practices. Knowledge of application security, identity and access management, OWASP guidance, threat modelling, privacy by design and relevant compliance requirements. Experience producing high‐quality architecture artefacts, including context and container views, integration diagrams, data‐flow diagrams ...

Dynatrace, Catchpoint or similar. Experience managing incidents, problem management, root cause analysis and live production environments. Understanding of application and cloud security, including OWASP principles, WAF, bot management and security scanning. Experience with CDN technologies and security controls, such as Akamai, Cloudflare or equivalent. TPBN1_UKTJ ...

DAST tools. Scripting with Python, Bash, or PowerShell for automation. Git and branching strategies with a security‐focused approach. Knowledge of WAF, API security, OWASP Top 10, and common cloud‐security frameworks. WAF rules management, including creation, tuning, and monitoring. SSL/TLS configuration best practices, certificate lifecycle management. Experience ...

programmes. Experience conducting threat modelling and architecture security reviews. Deep understanding of application security principles, attack techniques, and risk management. Hands‐on experience with OWASP Top 10, SAST, DAST, SCA, Container Security, Infrastructure as Code Security, CI/CD Security, and API Security. Experience securing cloud-native environments, particularly ...

Entra ID Practical expertise managing WAF technologies such as Cloudflare, Akamai, or equivalent enterprise platforms Strong understanding of web application security, API security, and OWASP Top 10 vulnerabilities Experience implementing identity and access management controls, including Conditional Access and identity governance Experience working within Agile, DevOps, or platform engineering environments ...

/New Relic) testing across frontend and backend Comfortable working with CI/CD pipelines Understanding of secure coding practices across the stack (e.g. OWASP, input validation, authentication A team player with high energy and can-do attitude, able to work well within a team Versatile and adaptable, able ...

TypeScript. - Synthetic and application monitoring platforms such as Dynatrace and Catchpoint. - Understanding of .NET applications - Knowledge of Akamai or similar CDNs, perimeter security, and OWASP security guidelines. - Strong networking experience across DNS, routing, load balancers, and firewalls. - Skilled with enterprise level deployments across microservices and multi server environments. - Azure certification ...