101 to 111 of 111 OWASP Jobs in London

risk view, the test strategy and the tooling recommendations that other teams can reuse. Map findings and controls to recognised external frameworks (for example OWASP's agent-specific risk taxonomy, NIST's AI Risk Management Framework Govern function, and MITRE ATLAS) so ClearRoute's approach is defensible and auditable, Distinguish … test non‐deterministic systems and how to detect, quantify and mitigate hallucination Working knowledge of agentic‐AI‐specific risk frameworks and taxonomies, such as OWASP's agent risk categories and MITRE ATLAS Experience with the OWASP Top 10 for LLM Applications, including prompt injection and system‐prompt‐leakage risk categories ...

DevSecOps, or a similar hands-on cyber security roleStrong experience with SAST, DAST, and SCA tools such as Checkmarx, Snyk, Semgrep, Burp Suite, or OWASP ZAPExperience integrating automated security testing and controls into CI/CD pipelinesDemonstrable ability to investigate, validate, and remediate application security vulnerabilitiesExperience with attack surface management … common application vulnerabilitiesAwareness of emerging AI security risks, including prompt injection, data poisoning, and vulnerabilities affecting large language modelsFamiliarity with security frameworks such as OWASP Top 10 and MITRE ATLAS would be advantageousExcellent communication and stakeholder management skills, with the ability to work collaboratively across technical teamsApply now to speak ...

similar hands-on cyber security role Strong experience with SAST, DAST, and SCA tools such as Checkmarx, Snyk, Semgrep, Burp Suite, or OWASP ZAP Experience integrating automated security testing and controls into CI/CD pipelines Demonstrable ability to investigate, validate, and remediate application security vulnerabilities Experience with attack surface … vulnerabilities Awareness of emerging AI security risks, including prompt injection, data poisoning, and vulnerabilities affecting large language models Familiarity with security frameworks such as OWASP Top 10 and MITRE ATLAS would be advantageous Excellent communication and stakeholder management skills, with the ability to work collaboratively across technical teams Apply ...

similar hands-on cyber security role Strong experience with SAST, DAST, and SCA tools such as Checkmarx, Snyk, Semgrep, Burp Suite, or OWASP ZAP Experience integrating automated security testing and controls into CI/CD pipelines Demonstrable ability to investigate, validate, and remediate application security vulnerabilities Experience with attack surface … vulnerabilities Awareness of emerging AI security risks, including prompt injection, data poisoning, and vulnerabilities affecting large language models Familiarity with security frameworks such as OWASP Top 10 and MITRE ATLAS would be advantageous Excellent communication and stakeholder management skills, with the ability to work collaboratively across technical teams Apply ...

authentication, authorisation, injection, business logic and misconfiguration issues. Help identify attack paths, including privilege escalation, and explain their business impact. Follow recognised methodologies, including OWASP (WSTG, API Security Top 10), PTES and CHECK/CREST standards. Help prepare for engagements by confirming scope, access and prerequisites with the engagement lead. … years' commercial penetration testing experience across web applications, APIs and infrastructure. Good working knowledge of common web and API vulnerabilities, including the OWASP Top 10 and API Security Top 10. Practical experience with industry-standard tools such as Burp Suite, Nmap and Metasploit. Ability to validate findings, rule out false ...

establish and grow a security champions programme within our engineering teams Ensure our product security practices align with relevant frameworks and standards, such as OWASP, NIST, ISO 27001, GDPR and PCI DSS, supporting compliance and audit efforts while monitoring emerging threats and finding ways to strengthen our resilience … within CI/CD pipelines, ideally across cloud-native, containerised and infrastructure as code (IaC) environments Familiarity with industry standards and frameworks such as OWASP (ideally including the Mobile Application Security Verification Standard and API Security Top 10), PCI DSS, ISO 27001 and GDPR It would also be helpful ...

agentic tools. Implement access controls, secrets scanning and detection for internal AI systems and MCP integrations, mapped to frameworks such as the OWASP Top 10 for Agentic Applications. Research AI coding risks, such as slopsquatting and hallucinated packages, and feed findings into engineering practice. ISO 27001, compliance and client assurance … hear from you. Essential Hands-on experience in a security engineering, application security or cloud security role. Strong knowledge of web application security, including OWASP principles, authentication and authorisation, and secure API design. Practical experience of vulnerability management, from triage to working with engineers on remediation. Hands-on experience securing ...

systems such as Elastic APM or DataDog to track and diagnose issues in production A solid understanding of security principles and secure coding including OWASP Top 10 Strong experience in in modern C#, TypeScript, HTML and CSS Strong cloud platform experience, ideally AWS • Strong CI/CD experience Strong experience … systems such as Elastic APM or DataDog to track and diagnose issues in production A solid understanding of security principles and secure coding including OWASP Top 10 Nice to haves Experience in VOIP, (SIP and RTP advantageous) Experience of TDD/BDD/DDD Knowledge of PCI compliance and associated ...

hardening Monitor systems for irregular behaviour and proactively design detection and prevention mechanisms Ensure infrastructure and applications align with accepted industry standards (e.g. OWASP Top 10 , AWS Well-Architected Framework ) Conduct and lead risk assessments , including third-party/vendor reviews and internal evaluations Document and maintain security policies, procedures … ecosystem and can comfortably navigate enterprise security tools across vendors Have solid foundations in networking, systems, and cloud infrastructure, and can apply frameworks like OWASP and AWS Well-Architected to real-world scenarios Have experience reviewing and improving product and infrastructure security, including secure SDLC practices (e.g. threat modelling, secure ...

appropriate security posture. Design, implement, maintain and optimise WAF policies across multi-cloud environments. Lead the investigation and mitigation of web application attacks, including OWASP Top 10 threats, bot attacks, credential stuffing, scraping, Layer 7 DDoS attacks and other web-based threats. Develop, maintain and enhance custom WAF rules, managed … controls, and attack mitigation policies, rather than solely relying on out-of-the-box managed rules. Extensive knowledge of web application attack vectors, including OWASP Top 10 vulnerabilities, SQL Injection, Cross-Site Scripting (XSS), Remote Code Execution (RCE), bot attacks, credential stuffing, and API abuse. Advanced hands-on expertise ...

against. Design AI guardrails: input and output controls, tool and authorisation boundaries, and prompt-injection and abuse defences. Draw on MITRE ATLAS and the OWASP LLM Top 10. Run threat models: lead them on high-risk systems, working with engineers to trace trust boundaries and compromise paths. Turn the findings … Experience with Vault, KMS/HSM, or BYOK/HYOK designs. Experience designing for regulated environments, such as FedRAMP. Contributions to NIST, ISO, or OWASP, or talks and published research. An offensive grounding that you use to pressure-test designs. Our Commitment to Diversity, Equity, Inclusionand Belonging (DEIB) We believe ...