26 to 50 of 111 OWASP Jobs in London

programmes. Experience conducting threat modelling and architecture security reviews. Deep understanding of application security principles, attack techniques, and risk management. Hands-on experience with OWASP Top 10, SAST, DAST, SCA, Container Security, Infrastructure as Code Security, CI/CD Security, and API Security. Experience securing cloud-native environments, particularly ...

programmes. Experience conducting threat modelling and architecture security reviews. Deep understanding of application security principles, attack techniques, and risk management. Hands-on experience with OWASP Top 10, SAST, DAST, SCA, Container Security, Infrastructure as Code Security, CI/CD Security, and API Security. Experience securing cloud-native environments, particularly ...

Kubernetes). Incident & Penetration Expertise: Experience leading incident response and management, with familiarity in pen testing of applications and infrastructure. Application Security: Familiarity with OWASP principles, web application security, security practices on native mobile apps (iOS and Android), and security-by-design principles. Tooling & Threat Landscape: Familiarity with project management ...

Kubernetes). Incident & Penetration Expertise: Experience leading incident response and management, with familiarity in pen testing of applications and infrastructure. Application Security: Familiarity with OWASP principles, web application security, security practices on native mobile apps (iOS and Android), and security-by-design principles. Tooling & Threat Landscape: Familiarity with project management ...

/Security Hub. Strong coding ability in TypeScript or Python or Go comfortable shipping production code, not just configs and scripts. Application security fluency: OWASP Top 10, threat modeling, and code‐level reviews on real systems. Experience securing a B2B SaaS multi‐tenant production environment. Comfort owning ...

monitoring. Experience applying AI/ML to security workflows – automated triage, behavioural analytics, or LLM‐assisted investigation. Understanding of AI security risks and frameworks: OWASP LLM Top 10, NIST AI RMF. Scripting proficiency in Python, PowerShell, or Bash for security automation. Strong grasp of PCI DSS, NIST ...

platforms Proven expertise in secure coding, endpoint protection, SIEM and IAM Familiarity with frameworks and standards such as ISO 27001, NIST and OWASP, alongside an understanding of responsible AI, security guardrails and human-in-the-loop controls Proficiency in Python, Bash, PowerShell or Go for security automation and tool development ...

engagement, and plan testing that meets their assurance needs. Apply manual and tool-assisted testing techniques aligned with recognised methodologies and frameworks, including the OWASP Web Security Testing Guide, PTES, and MITRE ATT&CK. Deliver Cyber Essentials Plus assessments, including scoping, conducting the required technical tests, verifying remediation and supporting ...

vulnerability management, network security, business continuity and monitoring. Experience assessing and evidencing controls against recognised frameworks such as NIST CSF, CIS Controls, ISO 27001, OWASP SAMM, NIST AI RMF and related standards. Ability to prioritise findings based on business impact, exploitability, remediation effort and financial exposure. Expertise ...

5+ years of relevant experience in the medical devicespace (either industry or through consulting/service provider). Proficiency in security frameworks (e.g., NIST, OWASP, MITRE ATT&CK, PASTA, STRIDE) and standards such as FDA cybersecurity guidance. Experience assessing security risks using industry standard methods (penetration test results, threat modelling ...

improving the security of production software or cloud infrastructure Application and API security depth. Strong command of common web and API vulnerabilities including the OWASP Top 10, and practical knowledge of authentication, authorisation, sessions, secrets and encryption Cloud security. Hands-on experience securing AWS or another major cloud platform, including ...

including containment, investigation, communication and the follow-up, and you stay clear-headed under pressure. You take application and AI security seriously. You understand OWASP-class vulnerabilities, and you're interested in the new risks that come with LLM agents, such as prompt injection and over-broad tool access. ...

such as IAM, cloud security, endpoint protection, SIEM, application security and vulnerability management, alongside working knowledge of frameworks such as NIST, ISO 27001 and OWASP Experience coordinating delivery across cloud, on-premise or hybrid technology environments and working effectively with security architects, engineers and business stakeholders Strong communication, organisation ...

Framework), NIST AI RMF (National Institute of Standards and Technology Artificial Intelligence Risk Management Framework), ISO/IEC 42001 (Artificial Intelligence Management Systems Standard), OWASP LLM (Open Worldwide Application Security Project) guidance, MITRE ATLAS (Adversarial Threat Landscape for Artificial Intelligence Systems) and CSA (Cloud Security Alliance) frameworksExperience assessing security posture ...

oContinuous Integration (CI/CD)oPair programmingoCode reviewsoVersion control systems such as Git Knowledge of application security principles and common vulnerabilities, including the OWASP Top 10. Experience working within agile, multidisciplinary teams. A proactive approach to learning new technologies and sharing knowledge with colleagues. If you are an experienced Ruby ...

tracking engineering milestones, and delivering complex client reports on time. Direct experience building or securing AI/ML pipelines, utilizing AI security frameworks (e.g., OWASP Top 10 for LLMs, NIST AI RMF), or configuring secure cloud AI environments. Strong experience securing multi-cloud environments and reviewing Infrastructure as Code ...

GitHub Actions Experience using AI coding tools such as Claude Code Systems design and integration experience Good knowledge of web security risks, including the OWASP Top 10 Experience diagnosing and fixing service faults Clear communication with non-technical colleagues Desirable: Experience building or running data services Experience in a multidisciplinary ...

practices, Agile, DevOps, SRE, DevSecOps, CI/CD, infrastructure as code and automated testing. Experience implementing secure engineering controls, including SAST, SCA, SBOM and OWASP principles, alongside observability and DORA metrics. Excellent technical leadership, communication and stakeholder management skills, with the confidence to influence across multiple teams without direct line ...

latest exploits, vulnerabilities (CVEs), and threatactor tactics Requirements Required Skills Strongproficiency in penetration testing tools (e.g., Kali Linux, BurpSuite, Metasploit, Nmap, Wireshark) Experiencewith OWASP Top 10 , vulnerability scanning, and exploit development Familiaritywith MITRE ATT&CK framework and red team methodology Solidknowledge of TCP/IP, firewalls, DNS, HTTP/HTTPS ...

/CD lifecycle. You will also do some pre-release manual PenTesting and threat modelling work. You’ll need strong application security experience, including OWASP Top 10, Veracode or similar scanning tools, DevSecOps/CI/CD and cloud security across Azure and/or AWS. You will also need ...

tools. • Experience with Continuous Security, Continuous Integration and Continuous Delivery techniques. • Experience of network security (e.g. OSI, TCP/IP), web application security (e.g. OWASP) and cryptographic controls (e.g. PKI, TLS). • We are passionate about developing people – a demonstrated ability in managing, mentoring and coaching members of your team ...

modeling and coaching others to use engineering best practices such as design patterns, customer‐centric design, test‐driven development, code refactoring, code review, and OWASP Top 10 security awareness Experience leading in Agile teams, including coaching and modeling Agile mindsets as part of sprint ceremonies, work definition and building developer ...

defining integration builds, coordinating build activity across systems, and undertaking or supporting integration testing. Information security: Understanding of common web security risks, including the OWASP Top 10, and appropriate mitigations. Development process optimisation: Ability to identify opportunities to improve development processes and contribute to implementing practical solutions. Candidates should demonstrate ...

laws (such as Hick's, Fitts's, Miller's and Jakob's) and when one outweighs another. Strong understanding of OWASP: the Top 10, the API Security Top 10 and ASVS. Strong understanding of API principles: REST, contracts and versioning, pagination, idempotency, error handling and least-privilege (OAuth, SAML ...

laws (such as Hick's, Fitts's, Miller's and Jakob's) and when one outweighs another. Strong understanding of OWASP: the Top 10, the API Security Top 10 and ASVS. Strong understanding of API principles: REST, contracts and versioning, pagination, idempotency, error handling and least-privilege (OAuth, SAML ...