26 to 50 of 179 OWASP Jobs in England

security and security operations. Proven leadership of security engineering or SOC teams — including distributed, multi-region teams. Expert-level knowledge of secure SDL frameworks (OWASP SAMM, NIST SSDF), threat modelling, and security architecture. Deep experience with detection engineering, SIEM/XDR platforms, incident response, and MSSP management. Strong cloud security ...

distributed systems, scalability, resilience and performance tuning Experience with cloud-native applications, Docker, Kubernetes and CI/CD Strong knowledge of application security, OWASP principles and secure development practices Knowledge of a modern front-end node-based framework Other Information Permanent role – 37.5 hours per week. Monday to Friday ...

teams. Desirable Skills Experience with the following technologies and tools would be advantageous: Testing & Automation JUnit Playwright Selenium Cucumber Performance Testing Gatling Security Testing OWASP ZAP Cloud & Containerisation Docker Kubernetes AWS Accessibility Testing WCAG Standards WAVE ...

blue or purple team activities - Experienced in software development or experience contributing to Open-Source projects - Experienced with DAST tools such as Burp Suite, OWASP Zap or similar - Experience with SAST/SCA tools such as Snyk, Veracode, Checkmarx or similar - Proficient in one or more of the following languages ...

have the following experience: Experience assessing security impacts across codebases and APIs using languages such as Java, TypeScript and Python. Strong knowledge of the OWASP Top 10, secure coding practices, and common web and API vulnerabilities. Hands-on experience triaging, validating and remediating vulnerabilities with both technical and non-technical ...

engagement, and plan testing that meets their assurance needs.Apply manual and tool-assisted testing techniques aligned with recognised methodologies and frameworks, including the OWASP Web Security Testing Guide, PTES, and MITRE ATT&CK.Deliver Cyber Essentials Plus assessments, including scoping, conducting the required technical tests, verifying remediation and supporting clients through ...

audit engagements (ISO 27001, SOC 2, Cyber Essentials, GDPR). Fluent in security frameworks and threat methodologies (MITRE ATT&CK, NIST CSF, CIS Controls, OWASP) with practical application, not just theoretical knowledge. Experience securing cloud‐native and SaaS‐heavy environments (AWS preferred). Strategic thinker who can define a roadmap ...

it.Nice-to-haves:Experience with ElasticSearch/ELK stack in production.Familiarity with AWS, GCP, Snowflake, Datadog, Okta.Knowledge of security standards and frameworks (ISO 27001, OWASP, SOC 2, PCI-DSS).Experience in a regulated fintech or payments environment.Reverse engineering and analysis of minified/obfuscated code.Not ticking every ...

Boot, NodeJS, Python FastAPI, Oracle, PostgreSQL and MongoDB.Build solutions as part of a DevSecOps and Agile ecosystem supported by tooling including Atlassian, Jenkins, GitLab, OWASP and AWS componentry.Ensure your solution works in a reliable and resilient way using Site Reliability Engineering methods to increase availability while reducing costs and callouts.Help ...

Boot, NodeJS, Python FastAPI, Oracle, PostgreSQL and MongoDB.Build solutions as part of a DevSecOps and Agile ecosystem supported by tooling including Atlassian, Jenkins, GitLab, OWASP and AWS componentry.Ensure your solution works in a reliable and resilient way using Site Reliability Engineering methods to increase availability while reducing costs and callouts.Help ...

Boot, NodeJS, Python FastAPI, Oracle, PostgreSQL and MongoDB.Build solutions as part of a DevSecOps and Agile ecosystem supported by tooling including Atlassian, Jenkins, GitLab, OWASP and AWS componentry.Ensure your solution works in a reliable and resilient way using Site Reliability Engineering methods to increase availability while reducing costs and callouts.Help ...

Boot, NodeJS, Python FastAPI, Oracle, PostgreSQL and MongoDB.Build solutions as part of a DevSecOps and Agile ecosystem supported by tooling including Atlassian, Jenkins, GitLab, OWASP and AWS componentry.Ensure your solution works in a reliable and resilient way using Site Reliability Engineering methods to increase availability while reducing costs and callouts.Help ...

risks, with a focus on recommendations for enhancements or remediation, and proficiency in multiple security assessment methodologies (e.g., Open Worldwide Application Security Project (OWASP) Top Ten, National Institute of Standards and Technology (NIST) Cybersecurity Framework), offensive testing tools, or resiliency testing equivalentsExcellent communication, collaboration, and report writing skills, with ...

risks, with a focus on recommendations for enhancements or remediation, and proficiency in multiple security assessment methodologies (e.g., Open Worldwide Application Security Project (OWASP) Top Ten, National Institute of Standards and Technology (NIST) Cybersecurity Framework), offensive testing tools, or resiliency testing equivalents Excellent communication, collaboration, and report writing skills, with ...

communication skills Proven team engagement skills Proven coaching skills Quality Driven Adaptable/ability to context switch Stakeholder Management Optional Skills: Junit Playwright Gatling OWASP Zap SonarQube GitHub Co-pilot Wiremock Wave Axe Kubernetes Docker Micro-services AWS Open API WCAG Cucumber/Gherkin Selenium Agile Scrum Agile Practices ...

distributed systems, scalability, resilience and performance tuning Experience with cloud‐native applications, Docker, Kubernetes and CI/CD Strong knowledge of application security, OWASP principles and secure development practices Knowledge of a modern front‐end node‐based framework Other Information Permanent role – 37.5 hours per week. Monday to Friday ...

latest exploits, vulnerabilities (CVEs), and threatactor tactics Requirements Required Skills Strongproficiency in penetration testing tools (e.g., Kali Linux, BurpSuite, Metasploit, Nmap, Wireshark) Experiencewith OWASP Top 10 , vulnerability scanning, and exploit development Familiaritywith MITRE ATT&CK framework and red team methodology Solidknowledge of TCP/IP, firewalls, DNS, HTTP/HTTPS ...

functional, integration and non-functional testing Strong communication, stakeholder management and team collaboration skills Nice to have Cucumber/Gherkin Gatling performance testing OWASP ZAP security testing SonarQube GitHub Copilot WireMock Accessibility testing tools such as Axe or Wave Kubernetes and Docker AWS OpenAPI specifications If you're interested ...

functional, integration and non-functional testing Strong communication, stakeholder management and team collaboration skills Nice to have Cucumber/Gherkin Gatling performance testing OWASP ZAP security testing SonarQube GitHub Copilot WireMock Accessibility testing tools such as Axe or Wave Kubernetes and Docker AWS OpenAPI specifications If you're interested ...

years' hands-on experience in application security testing.Advanced knowledge of internet and network technologies.Expert understanding of web and API technologies and common vulnerabilities (OWASP Top 10, API/LLM Top 10, Mobile Top 10).Advanced mobile security testing (Android/iOS) — reverse engineering, runtime manipulation, Frida scripting, Objection.Advanced knowledge ...

leading offensive security programs (penetration testing, red teaming, bug bounty).Practical understanding of governance and assurance frameworks such as ISO 27001, SOC 2, and OWASP SAMM.Familiarity with AI/LLM tooling (e.g., Cursor, GitHub Copilot, custom LLM integrations) and the associated security and governance considerations.Experience working with AWS and securing ...

DevOps/SRE role with a strong security focus, eager to deepen across the security stack.Solid understanding of web application security (OWASP Top 10, common attack vectors).Hands-on experience with at least two of: vulnerability scanning tools, SIEM/log analysis, IAM systems (Okta, Google Workspace), or CI/ ...

with AI and agentic security risks (prompt injection, data poisoning, model and agent governance). Have experience mapping security frameworks (NIST CSF, ISO 27001, OWASP, NIST AI RMF). Have hands‐on exposure to detection and response, red‐team, or pen‐test work. Have experience with our stack: Azure/ ...

risks, with a focus on recommendations for enhancements or remediation, and proficiency in multiple security assessment methodologies (e.g., Open Worldwide Application Security Project (OWASP) Top Ten, National Institute of Standards and Technology (NIST) Cybersecurity Framework), offensive testing tools, or resiliency testing equivalents Excellent communication, collaboration, and report writing skills, with ...

security \n \n Experience in deploying resources using Infrastructure as Code (Terraform) \n \n Experience in securing Kubernetes services \n \n Extensive knowledge in OWASP Web Top 10 and CWE Top 25 \n \n \n Visa is an EEO Employer \n Qualified applicants will receive consideration for employment without regard ...