51 to 75 of 213 OWASP Jobs in England

/Security Hub. Strong coding ability in TypeScript or Python or Go comfortable shipping production code, not just configs and scripts. Application security fluency: OWASP Top 10, threat modeling, and code‐level reviews on real systems. Experience securing a B2B SaaS multi‐tenant production environment. Comfort owning ...

monitoring. Experience applying AI/ML to security workflows – automated triage, behavioural analytics, or LLM‐assisted investigation. Understanding of AI security risks and frameworks: OWASP LLM Top 10, NIST AI RMF. Scripting proficiency in Python, PowerShell, or Bash for security automation. Strong grasp of PCI DSS, NIST ...

platforms Proven expertise in secure coding, endpoint protection, SIEM and IAM Familiarity with frameworks and standards such as ISO 27001, NIST and OWASP, alongside an understanding of responsible AI, security guardrails and human-in-the-loop controls Proficiency in Python, Bash, PowerShell or Go for security automation and tool development ...

engagement, and plan testing that meets their assurance needs. Apply manual and tool-assisted testing techniques aligned with recognised methodologies and frameworks, including the OWASP Web Security Testing Guide, PTES, and MITRE ATT&CK. Deliver Cyber Essentials Plus assessments, including scoping, conducting the required technical tests, verifying remediation and supporting ...

/CD, automated testing, code quality controls, observability, incident diagnosis, reliability engineering and DevSecOps practices. Knowledge of application security, identity and access management, OWASP guidance, threat modelling, privacy by design and relevant compliance requirements. Experience producing high‐quality architecture artefacts, including context and container views, integration diagrams, data‐flow diagrams ...

vulnerability management, network security, business continuity and monitoring. Experience assessing and evidencing controls against recognised frameworks such as NIST CSF, CIS Controls, ISO 27001, OWASP SAMM, NIST AI RMF and related standards. Ability to prioritise findings based on business impact, exploitability, remediation effort and financial exposure. Expertise ...

5+ years of relevant experience in the medical devicespace (either industry or through consulting/service provider). Proficiency in security frameworks (e.g., NIST, OWASP, MITRE ATT&CK, PASTA, STRIDE) and standards such as FDA cybersecurity guidance. Experience assessing security risks using industry standard methods (penetration test results, threat modelling ...

improving the security of production software or cloud infrastructure Application and API security depth. Strong command of common web and API vulnerabilities including the OWASP Top 10, and practical knowledge of authentication, authorisation, sessions, secrets and encryption Cloud security. Hands-on experience securing AWS or another major cloud platform, including ...

including containment, investigation, communication and the follow-up, and you stay clear-headed under pressure. You take application and AI security seriously. You understand OWASP-class vulnerabilities, and you're interested in the new risks that come with LLM agents, such as prompt injection and over-broad tool access. ...

such as IAM, cloud security, endpoint protection, SIEM, application security and vulnerability management, alongside working knowledge of frameworks such as NIST, ISO 27001 and OWASP Experience coordinating delivery across cloud, on-premise or hybrid technology environments and working effectively with security architects, engineers and business stakeholders Strong communication, organisation ...

infrastructure-as-code (e.g., terraform) Experience managing web application firewalls (e.g., Cloudflare) Awareness of common software security flaws and web application security best practices (OWASP top 10, CWE/SANS Top 25) Knowledge of CI/CD and DevOps principles and security considerations Experience of applying AI to your ...

threat landscape They need a working knowledge of AI-specific attack techniques and should be fluent in the reference frameworks, mainly the OWASP Top 10 for LLM Applications and MITRE ATLAS. Key threats include: Direct and indirect prompt injection Data and model poisoning Sensitive data leakage through prompts and outputs ...

threat landscape They need a working knowledge of AI-specific attack techniques and should be fluent in the reference frameworks, mainly the OWASP Top 10 for LLM Applications and MITRE ATLAS. Key threats include: Direct and indirect prompt injection Data and model poisoning Sensitive data leakage through prompts and outputs ...

design leadership. Deep understanding of AWS security, hybrid cloud design, and modern DevSecOps principles. Strong knowledge of frameworks such as NIST, ISO 27001, OWASP, and CIS. Experience designing and implementing secure, compliant PCI‐DSS solutions. Solid grounding in tools and technologies like SIEM, IDS/IPS, DLP, endpoint protection ...

Framework), NIST AI RMF (National Institute of Standards and Technology Artificial Intelligence Risk Management Framework), ISO/IEC 42001 (Artificial Intelligence Management Systems Standard), OWASP LLM (Open Worldwide Application Security Project) guidance, MITRE ATLAS (Adversarial Threat Landscape for Artificial Intelligence Systems) and CSA (Cloud Security Alliance) frameworksExperience assessing security posture ...

oContinuous Integration (CI/CD)oPair programmingoCode reviewsoVersion control systems such as Git Knowledge of application security principles and common vulnerabilities, including the OWASP Top 10. Experience working within agile, multidisciplinary teams. A proactive approach to learning new technologies and sharing knowledge with colleagues. If you are an experienced Ruby ...

/CD)oPair programmingoCode reviewsoVersion control systems such as Git \n \n \n Knowledge of application security principles and common vulnerabilities, including the OWASP Top 10. \n \n \n Experience working within agile, multidisciplinary teams. \n \n \n A proactive approach to learning new technologies and sharing knowledge with colleagues. ...

/CD)oPair programmingoCode reviewsoVersion control systems such as Git \n \n \n Knowledge of application security principles and common vulnerabilities, including the OWASP Top 10. \n \n \n Experience working within agile, multidisciplinary teams. \n \n \n A proactive approach to learning new technologies and sharing knowledge with colleagues. ...

tracking engineering milestones, and delivering complex client reports on time. Direct experience building or securing AI/ML pipelines, utilizing AI security frameworks (e.g., OWASP Top 10 for LLMs, NIST AI RMF), or configuring secure cloud AI environments. Strong experience securing multi-cloud environments and reviewing Infrastructure as Code ...

NoSQL databases and ORM's. Good development experience with any contemporary web application framework. Strong experience delivering solutions within an Agile environment. Knowledge of OWASP and web security best practices. Solid experience with source code management, e.g., git. Using unit test frameworks (e.g., moq) and knowledge of TDD. Experience with ...

GitHub Actions Experience using AI coding tools such as Claude Code Systems design and integration experience Good knowledge of web security risks, including the OWASP Top 10 Experience diagnosing and fixing service faults Clear communication with non-technical colleagues Desirable: Experience building or running data services Experience in a multidisciplinary ...

Google Cloud. Familiarity with automation and orchestration tools such as Jenkins or Rundeck. Knowledge of web application security principles and practices, including OWASP guidance. Experience working in Agile teams and contributing to iterative service improvement. We value engineers who take ownership, communicate openly, support their colleagues and are enthusiastic about ...

practices, Agile, DevOps, SRE, DevSecOps, CI/CD, infrastructure as code and automated testing. Experience implementing secure engineering controls, including SAST, SCA, SBOM and OWASP principles, alongside observability and DORA metrics. Excellent technical leadership, communication and stakeholder management skills, with the confidence to influence across multiple teams without direct line ...

latest exploits, vulnerabilities (CVEs), and threatactor tactics Requirements Required Skills Strongproficiency in penetration testing tools (e.g., Kali Linux, BurpSuite, Metasploit, Nmap, Wireshark) Experiencewith OWASP Top 10 , vulnerability scanning, and exploit development Familiaritywith MITRE ATT&CK framework and red team methodology Solidknowledge of TCP/IP, firewalls, DNS, HTTP/HTTPS ...

Stakeholder management A quality-focused, shift-left mindset Desirable Skills Experience with any of the following would be beneficial: Playwright Gatling for performance testing OWASP ZAP for security testing Docker Kubernetes AWS Accessibility testing, including WCAG, WAVE ...