1 to 25 of 99 OWASP Jobs in London

Access Management (IAM) Data Protection & Privacy Controls Enterprise Security Architecture Frameworks Familiarity with: NCSC Cloud Security Principles ISO 27001 NIST Cybersecurity Framework CIS Controls OWASP Technical Experience Cloud Platforms AWS Microsoft Azure Google Cloud Platform (GCP) Security Technologies Microsoft Defender Suite Splunk Microsoft Sentinel CrowdStrike Prisma Cloud Wiz Lacework Tenable ...

utilise them In-depth knowledge of security principles, technologies, best practices, and threat detection and mitigation strategies Knowledge of common attack vectors and methodologies (OWASP Top 10, MITRE ATT&CK Framework and social engineering tactics) The ability to identify potential threats, attack vectors and vulnerabilities in systems and applications ...

utilise them In-depth knowledge of security principles, technologies, best practices, and threat detection and mitigation strategies Knowledge of common attack vectors and methodologies (OWASP Top 10, MITRE ATT&CK Framework and social engineering tactics) The ability to identify potential threats, attack vectors and vulnerabilities in systems and applications ...

programming and FastAPI, plus unit testing with Pytest. Experience applying security standards and SDLC controls to software platforms. Experience identifying vulnerabilities using CWE or OWASP, hardening operating systems, and designing or reviewing technical architectures. Working knowledge of agile/DevOps delivery, Jira, CDK/GitOps, penetration testing and technologies such ...

Controls - SABSA - TOGAF Understanding of security operations concepts, incident response, and detection capabilities. Knowledge of application security principles, including secure coding practices and OWASP guidance. Experience with DevSecOps practices and security automation. Familiarity with container and Kubernetes security. Understanding of encryption, key management, and data protection principles. Strong documentation, communication ...

Controls - SABSA - TOGAF Understanding of security operations concepts, incident response, and detection capabilities. Knowledge of application security principles, including secure coding practices and OWASP guidance. Experience with DevSecOps practices and security automation. Familiarity with container and Kubernetes security. Understanding of encryption, key management, and data protection principles. Strong documentation, communication ...

with Terraform and infrastructure-as-code at scale Strong understanding of Kubernetes architecture and operating containerised workloads in cloud environments Good understanding of DevSecOps, OWASP principles and security-by-design Experience designing and implementing monitoring, logging and observability solutions Strong scripting skills using Python, Bash, PowerShell or similar Experience making ...

with Terraform and infrastructure‐as‐code at scale Strong understanding of Kubernetes architecture and operating containerised workloads in cloud environments Good understanding of DevSecOps, OWASP principles and security‐by‐design Experience designing and implementing monitoring, logging and observability solutions Strong scripting skills using Python, Bash, PowerShell or similar Experience making ...

Familiarity with CFTC system safeguards expectations, including 17 C.F.R. § 38.1051 and § 39.18 or similar regulatory requirements. AppSec Foundations: Strong grasp of application security principles (OWASP Top 10, NIST) and secure SDLC practices. CI/CD & Tooling: Proficiency with CI/CD tooling (GitHub Actions, GitLab CI, Jenkins, Azure DevOps, CircleCI ...

global financial services business models, regional compliance regulations and applicable laws advantageous. Understanding and knowledge of common industry cybersecurity frameworks, standards, and methodologies, including OWASP, ISO2700x series, PCI DSS, GLBA, Global data security and privacy acts, FFIEC guidelines, CIS, and NIST standards advantageous. Skills sre site reliability azure devops bash ...

/SSL, certificates, and access control Experience with observability, monitoring, and alerting tools Security & Compliance Practical experience implementing ISO27001 and SOC2 controls Knowledge of OWASP methodologies and secure development lifecycle practices Experience with vulnerability management, PAM, secrets management, and secure access Platform & Operations Excellence Experience running and scaling highly available ...

Jenkins, AWS CodePipeline, GitLab CI, or GitHub Actions* Solid understanding of relational and NoSQL databases (e.g., PostgreSQL, MongoDB)* Knowledge of security best practices (e.g. OWASP) and performance optimization* Excellent leadership, communication, time management and mentoring skills, with the ability to influence technical direction **Desirable Qualifications*** Experience in fintech, payments ...

Jenkins, AWS CodePipeline, GitLab CI, or GitHub Actions Solid understanding of relational and NoSQL databases (e.g., PostgreSQL, MongoDB) Knowledge of security best practices (e.g. OWASP) and performance optimization Excellent leadership, communication, time management and mentoring skills, with the ability to influence technical direction Desirable Qualifications Experience in fintech, payments ...

information security, with a strong focus on application security and DevSecOps Strong understanding of secure software development practices and common application security risks (e.g. OWASP Top 10) Hands-on experience working with or integrating DevSecOps tooling within CI/CD environments (e.g. GitLab pipelines) Experience with application security testing tools ...

high-risk products and services. Conduct and oversee SAST, DAST, API security, fuzz testing and architecture-level assessments . Assess applications against the OWASP Top 10 and other relevant security standards. Identify vulnerabilities, understand their root causes and translate findings into practical remediation plans. Provide secure design and coding guidance ...

continuous deployment (CI/CD) Experience with security testing tools, such as static Code analysis and dynamic Application security testing (DAST) Strong understanding of OWASP Top 10, application security vulnerabilities and web security testing methodologies Understanding of secure coding practices for compliance requirements within SOC2, ISO, HIPAA, HITRUST, etc. Able ...

/Security Hub. Strong coding ability in TypeScript or Python or Go comfortable shipping production code, not just configs and scripts. Application security fluency: OWASP Top 10, threat modeling, and code‐level reviews on real systems. Experience securing a B2B SaaS multi‐tenant production environment. Comfort owning ...

HITRUST, GDPR) Familiarity with data protection regulations and AI Security frameworks (e.g., GDPR, NIST AI RMF, ISO/IEC 27001, ISO/IEC 42001, OWASP Top 10 for LLMs, MITRE ATLAS) is a plus. Excellent communication and stakeholder management skills, capable of influencing at all levels and gaining a ‘Trusted ...

your background might be better suited to. 5+ years ofrelevantexperienceinthe medical devicespace (eitherindustryor through consulting/service provider) Proficiency in security frameworks (e.g., NIST, OWASP, MITRE ATT&CK, PASTA, STRIDE) and standards such as FDA cybersecurity guidance Experience assessing security risks using industry standard methods (penetration test results, threat modeling ...

products and architectures, conducting threat modeling exercises, and translating findings into actionable security controls. Practical understanding of web application security concepts (such as OWASP Top-10 and similar). Hands-on experience with IaC and related tools (Terraform, CloudFormation, Helm, Pulumi). Experience with automation and tooling development ...

hold a security position under delivery pressure. Nice to have skills Familiarity with AI security and governance frameworks including NIST AI RMF, the OWASP Top 10 for LLM applications, MITRE ATLAS, ISO/IEC 42001, and the security provisions of the EU AI Act. AI red teaming, adversarial testing, adversarial ...

customer, contractual, or compliance obligations. Familiarity with AI security frameworks and guidance such as the NIST AI Risk Management Framework, NIST Generative AI Profile, OWASP Top 10 for LLM Applications, or Cloud Security Alliance AI security guidance. Experience with RAG architecture, AI agents, vector databases, AI APIs, prompt engineering ...

release management in a controlled, regulated environment Desirable: ASP.NET/ASP.NET Core, Entity Framework, NUnit/xUnit, ServiceNow integration, Terraform, Docker/Kubernetes, OWASP, SBOM standards, CyberArk This is a chance to own the build and deployment platforms at the heart of a top-tier financial services technology function ...

blue or purple team activities - Experienced in software development or experience contributing to Open-Source projects - Experienced with DAST tools such as Burp Suite, OWASP Zap or similar - Experience with SAST/SCA tools such as Snyk, Veracode, Checkmarx or similar - Proficient in one or more of the following languages ...

engagement, and plan testing that meets their assurance needs. Apply manual and tool‐assisted testing techniques aligned with recognised methodologies and frameworks, including the OWASP Web Security Testing Guide, PTES, and MITRE ATT&CK. Deliver Cyber Essentials Plus assessments, including scoping, conducting the required technical tests, verifying remediation and supporting ...