76 to 100 of 213 OWASP Jobs in England

integration and vulnerability management. Knowledge of SAST, DAST, SCA and automated security testing. Understanding of cloud security, containers and modern application architectures. Familiarity with OWASP, ISO27001 and NCSC CAF. Awareness of emerging threats, AI security risks and software supply chain vulnerabilities. Location: Hybrid working, with travel to Warwickshire required ...

/CD lifecycle. You will also do some pre-release manual PenTesting and threat modelling work. You’ll need strong application security experience, including OWASP Top 10, Veracode or similar scanning tools, DevSecOps/CI/CD and cloud security across Azure and/or AWS. You will also need ...

/CD lifecycle. You will also do some pre-release manual PenTesting and threat modelling work. You’ll need strong application security experience, including OWASP Top 10, Veracode or similar scanning tools, DevSecOps/CI/CD and cloud security across Azure and/or AWS. You will also need ...

review code and communicate security issues clearly to developers, primarily within a C# ecosystem, with exposure to Java or Python Strong knowledge of the OWASP Top 10 and practical mitigation patterns Experience implementing or improving SAST/DAST processes: tool tuning, triage workflows, and reducing signal to noise Working understanding ...

teams Essential requirements: Significant experience in threat modelling - experience using IriusRisk or comparable threat modelling tools Experience in application security, with detailed knowledge of OWASP standards and web application security Experience of DevSecOps practices, including integrating security controls into CI/CD pipelines Knowledge of the secure SDLC within agile ...

tools. • Experience with Continuous Security, Continuous Integration and Continuous Delivery techniques. • Experience of network security (e.g. OSI, TCP/IP), web application security (e.g. OWASP) and cryptographic controls (e.g. PKI, TLS). • We are passionate about developing people – a demonstrated ability in managing, mentoring and coaching members of your team ...

Experience working with security monitoring, vulnerability management and incident response processes. Scripting or automation experience using Python, JavaScript, C# or similar . Familiarity with OWASP, ISO27001 and NCSC CAF frameworks. Exposure to Palo Alto Cortex XDR/Cloud Security would be advantageous. Experience of GCP environments is desirable. What ...

Experience working with security monitoring, vulnerability management and incident response processes. Scripting or automation experience using Python, JavaScript, C# or similar . Familiarity with OWASP, ISO27001 and NCSC CAF frameworks. Exposure to Palo Alto Cortex XDR/Cloud Security would be advantageous. Experience of GCP environments is desirable. What ...

cloud architectures. Proven experience with risk assessment methodologies and maintaining enterprise risk registers. Working knowledge of risk assessment methodologies (e.g. ISO 31000, FAIR, OWASP risk rating). Strong understanding of Gov Assure, CAF, ISO 27001, Cyber Essentials, and NIST frameworks. Experience conducting or supporting security audits and implementing remediation plans. ...

Reporting* SOC – Experienced in Security Ops, Incident Response, Threat Hunting, Malware/Forensic Analysis* WebApps – Experienced in WebApp DevSecOps best practices, WebApp scanning for OWASP top 10.* Good understanding of GRC strategies and tools, Threat Intelligence, SIEMs, XDR, ICS/OT security* Relevant industry certifications: CISSP, CEH, CCNP, Public Cloud ...

modeling and coaching others to use engineering best practices such as design patterns, customer‐centric design, test‐driven development, code refactoring, code review, and OWASP Top 10 security awareness Experience leading in Agile teams, including coaching and modeling Agile mindsets as part of sprint ceremonies, work definition and building developer ...

defining integration builds, coordinating build activity across systems, and undertaking or supporting integration testing. Information security: Understanding of common web security risks, including the OWASP Top 10, and appropriate mitigations. Development process optimisation: Ability to identify opportunities to improve development processes and contribute to implementing practical solutions. Candidates should demonstrate ...

laws (such as Hick's, Fitts's, Miller's and Jakob's) and when one outweighs another. Strong understanding of OWASP: the Top 10, the API Security Top 10 and ASVS. Strong understanding of API principles: REST, contracts and versioning, pagination, idempotency, error handling and least-privilege (OAuth, SAML ...

laws (such as Hick's, Fitts's, Miller's and Jakob's) and when one outweighs another. Strong understanding of OWASP: the Top 10, the API Security Top 10 and ASVS. Strong understanding of API principles: REST, contracts and versioning, pagination, idempotency, error handling and least-privilege (OAuth, SAML ...

code with Terraform or Bicep, and PowerShell or Python to automate controls and response. Working knowledge of AKS and container security, and of the OWASP Top 10. Clear written communication: runbooks, incident reports and remediation plans that engineers and managers can act on. Desirable: Monitoring a multi‐tenant SaaS platform ...

with the Model Context Protocol (MCP) for tool and context integration in agentic systems Familiarity with secure‐by‐design development principles (ISO 27001, NIST, OWASP) Experience in defence, national security, or similarly regulated environments Contributions to open‐source AI/ML projects An active SC or DV clearance ...

with the Model Context Protocol (MCP) for tool and context integration in agentic systems • Familiarity with secure-by-design development principles (ISO 27001, NIST, OWASP) • Experience in defence, national security, or similarly regulated environments • Contributions to open-source AI/ML projects An active SC or DV clearance ...

Experience working in agile, multidisciplinary teams. Performance tools such as JMeter, k6 or Gatling. Accessibility testing to WCAG 2.2. Security testing tools, such as OWASP ZAP. Experience delivering services to the GDS Service Standard. Experience mentoring other testers. Why Join Scrumconnect Ltd? At Scrumconnect, we are more than just ...

DevOps: AWS‐native architectures, CI/CD automation using GitHub Actions,infrastructureand deployment optimisation. Security Engineering: Security‐by‐design mindset with applied knowledge of OWASP Top 10, WCAG, OAuth2, MFA, and secure identity patterns. Quality & Assurance: Proficient in unit testing frameworks; governance and execution of SAST, DAST, SCA, and penetration ...

Understanding of CI/CD pipelines and deployment strategies. Familiarity with feature toggling and A/B testing. Awareness of security best practices (e.g., OWASP Top 10). Interest in mentoring junior developers or apprentices. What do you get in return? 25 days annual leave rising to 30 5% pension ...

focus on secure code reviews, SAST/DAST, vulnerability assessments and embedding security throughout the CI/CD lifecycle. The role requires experience with OWASP Top 10, Veracode, DevSecOps, and cloud security across Azure/AWS, plus Kali Linux for manual testing. Hybrid work in London, Manchester or Glasgow with ...

focus on secure code reviews, SAST/DAST, vulnerability assessments and embedding security throughout the CI/CD lifecycle. The role requires experience with OWASP Top 10, Veracode, DevSecOps, and cloud security across Azure/AWS, plus Kali Linux for manual testing. Hybrid work in London, Manchester or Glasgow with ...

Microsoft Azure Entra ID Vercel Firewall configuration and security controls SIEM technologies; Terraform or other Infrastructure-as-Code DevSecOps CI/CD security OWASP PCI DSS AWS security certifications Working Approach & Key Outcomes 3 months initially AWS Engineer, Security Engineer, AWS Security Engineer, Web, Online, Digital, E-commerce, e.commerce ...

Microsoft Azure Entra ID Vercel Firewall configuration and security controls SIEM technologies; Terraform or other Infrastructure-as-Code DevSecOps CI/CD security OWASP PCI DSS AWS security certifications Working Approach & Key Outcomes 3 months initially AWS Engineer, Security Engineer, AWS Security Engineer, Web, Online, Digital, E-commerce, e.commerce ...

tools. • Experience with Continuous Security, Continuous Integration and Continuous Delivery techniques. • Experience of network security (e.g. OSI, TCP/IP), web application security (e.g. OWASP) and cryptographic controls (e.g. PKI, TLS). • We are passionate about developing people – a demonstrated ability in managing, mentoring and coaching members of your team ...