26 to 50 of 113 OWASP Jobs in London

risks, with a focus on recommendations for enhancements or remediation, and proficiency in multiple security assessment methodologies (e.g., Open Worldwide Application Security Project (OWASP) Top Ten, National Institute of Standards and Technology (NIST) Cybersecurity Framework), offensive testing tools, or resiliency testing equivalentsExcellent communication, collaboration, and report writing skills, with ...

risks, with a focus on recommendations for enhancements or remediation, and proficiency in multiple security assessment methodologies (e.g., Open Worldwide Application Security Project (OWASP) Top Ten, National Institute of Standards and Technology (NIST) Cybersecurity Framework), offensive testing tools, or resiliency testing equivalents Excellent communication, collaboration, and report writing skills, with ...

latest exploits, vulnerabilities (CVEs), and threatactor tactics Requirements Required Skills Strongproficiency in penetration testing tools (e.g., Kali Linux, BurpSuite, Metasploit, Nmap, Wireshark) Experiencewith OWASP Top 10 , vulnerability scanning, and exploit development Familiaritywith MITRE ATT&CK framework and red team methodology Solidknowledge of TCP/IP, firewalls, DNS, HTTP/HTTPS ...

years' hands-on experience in application security testing.Advanced knowledge of internet and network technologies.Expert understanding of web and API technologies and common vulnerabilities (OWASP Top 10, API/LLM Top 10, Mobile Top 10).Advanced mobile security testing (Android/iOS) — reverse engineering, runtime manipulation, Frida scripting, Objection.Advanced knowledge ...

leading offensive security programs (penetration testing, red teaming, bug bounty).Practical understanding of governance and assurance frameworks such as ISO 27001, SOC 2, and OWASP SAMM.Familiarity with AI/LLM tooling (e.g., Cursor, GitHub Copilot, custom LLM integrations) and the associated security and governance considerations.Experience working with AWS and securing ...

with AI and agentic security risks (prompt injection, data poisoning, model and agent governance). Have experience mapping security frameworks (NIST CSF, ISO 27001, OWASP, NIST AI RMF). Have hands‐on exposure to detection and response, red‐team, or pen‐test work. Have experience with our stack: Azure/ ...

risks, with a focus on recommendations for enhancements or remediation, and proficiency in multiple security assessment methodologies (e.g., Open Worldwide Application Security Project (OWASP) Top Ten, National Institute of Standards and Technology (NIST) Cybersecurity Framework), offensive testing tools, or resiliency testing equivalents Excellent communication, collaboration, and report writing skills, with ...

principles across all AI workloads, including prompt injection defence and data protection. Partner with AI Safety and Compliance teams to enforce standards aligned to OWASP GenAI, NIST AI RMF, and ISO/IEC 42001. Implement guardrails for model usage, data handling, and fairness/bias mitigation. Ensure full audit trails ...

design principles across all AI workloads, including prompt injection defence and data protection.Partner with AI Safety and Compliance teams to enforce standards aligned to OWASP GenAI, NIST AI RMF, and ISO/IEC 42001.Implement guardrails for model usage, data handling, and fairness/bias mitigation.Ensure full audit trails and traceability ...

Infrastructure as Code (Terraform), observability tooling (Grafana, Kibana, Datadog, CloudWatch), automated testing (NUnit, xUnit, Cypress, Playwright), Git‐based workflows, and secure development practices including OWASP, secrets management and Vault. Ways of Working, Comfortable in Scrum/Kanban environments with strong communication skills; experienced with Jira, Confluence, Slack and MS Teams ...

government standards Writing clean, maintainable, and reusable code/configuration Supporting issue investigation, resolution, and continuous improvement Applying secure development practices, including awareness of OWASP principles Collaborating with stakeholders and clearly communicating technical concepts Tech and environment: Microsoft Power Platform (Power Apps, Power Automate, Dataverse) Integration with wider enterprise systems ...

Lifecycle Professional) GWAPT (GIAC Web Application Penetration Tester) GCSA (GIAC Cloud Security Automation) CASE (Certified Application Security Engineer) Certified DevSecOps Professional Strong familiarity with OWASP (including Top 10 and ASVS) At least 5 years experience in information security assurance, with a strong focus on application security. Hands-on experience with ...

Lifecycle Professional) GWAPT (GIAC Web Application Penetration Tester) GCSA (GIAC Cloud Security Automation) CASE (Certified Application Security Engineer) Certified DevSecOps Professional Strong familiarity with OWASP (including Top 10 and ASVS) At least 5 years’ experience in information security assurance, with a strong focus on application security. Hands-on experience with ...

business terms to exec and board audiences, and technical terms to engineers, without losing precision in either direction. Technical foundation Strong AppSec expertise (OWASP, API security, SAST/DAST, SDLC) with practical threat modelling experience – enough to challenge and coach our most senior application security engineers. Hands‐on understanding ...

communicate risk in business terms to exec and board audiences, and technical terms to engineers, without losing precision in either direction.Technical foundationStrong AppSec expertise (OWASP, API security, SAST/DAST, SDLC) with practical threat modelling experience – enough to challenge and coach our most senior application security engineers.Handson understanding of data ...

HaveExperience securing AI-enabled products, platforms or digital services.Familiarity with recognised security frameworks such as ISO 27001, ISO 42001, SOC2, NIST AI RMF or OWASP AI Top 10.Experience working with cloud environments including Azure, AWS or Google Cloud.Security certifications such as CISSP, CISM, CCSP or equivalent.Who ...

tools.• Experience with Continuous Security, Continuous Integration and Continuous Delivery techniques.• Experience of network security (e.g. OSI, TCP/IP), web application security (e.g. OWASP) and cryptographic controls (e.g. PKI, TLS).• We are passionate about developing people – a demonstrated ability in managing, mentoring and coaching members of your team ...

threat intelligence monitoring.Experience applying AI/ML to security workflows - automated triage, behavioural analytics, or LLM-assisted investigation.Understanding of AI security risks and frameworks: OWASP LLM Top 10, NIST AI RMF.Scripting proficiency in Python, PowerShell, or Bash for security automation.Strong grasp of PCI DSS, NIST CSF, SOC 2, ISO27001 ...

monitoring. Experience applying AI/ML to security workflows – automated triage, behavioural analytics, or LLM‐assisted investigation. Understanding of AI security risks and frameworks: OWASP LLM Top 10, NIST AI RMF. Scripting proficiency in Python, PowerShell, or Bash for security automation. Strong grasp of PCI DSS, NIST ...

able to translate complex security risk into business language for C-suite and board audiences. Strong understanding of cybersecurity principles, attack vectors, defense strategies, OWASP Top 10, and the Mitre Attack framework Experience with cloud security (Azure/AWS), IAM, secrets management, encryption, & certificate management. Experience with Microsoft 365 security ...

security features Extensive RBAC/ABAC knowledge and implementation experience Experience with user, agent, and machine authentication workflows. Hands‐on experience with secure coding, OWASP Top 10, and threat modeling. Strong developer skills and extensive experience shipping code to production. Experienced in CI/CD, IaC, Python and Go. Track ...

modeling and coaching others to use engineering best practices such as design patterns, customer-centric design, test-driven development, code refactoring, code review, and OWASP Top 10 security awarenessExperience leading in Agile teams, including coaching and modeling Agile mindsets as part of sprint ceremonies, work definition and building developer capabilitiesExceptional ...

infrastructure, cloud, mobile and wireless security testing. Experience with black-box, grey-box and white-box testing methodologies. Knowledge of AWS, Azure, Google Cloud, OWASP, PTES and OSSTMM. Experience scoping, delivering and quality assuring complex security testing engagements. Strong communication skills with clients, stakeholders and technical teams. Desirable Experience Experience ...

infrastructure, cloud, mobile and wireless security testing. Experience with black-box, grey-box and white-box testing methodologies. Knowledge of AWS, Azure, Google Cloud, OWASP, PTES and OSSTMM. Experience scoping, delivering and quality assuring complex security testing engagements. Strong communication skills with clients, stakeholders and technical teams. Desirable Experience Experience ...

protocols (e.g. A2A) Familiarity with MCPs for tool and context integration in agentic systems Familiarity with secure-by-design development principles (ISO 27001, NIST, OWASP) Experience in defence, national security, or similarly regulated environments Contributions to open-source AI/ML projects Soft Skills Delivery-focused - you ship working systems ...