51 to 75 of 111 OWASP Jobs in London

with the Model Context Protocol (MCP) for tool and context integration in agentic systems Familiarity with secure‐by‐design development principles (ISO 27001, NIST, OWASP) Experience in defence, national security, or similarly regulated environments Contributions to open‐source AI/ML projects An active SC or DV clearance ...

with the Model Context Protocol (MCP) for tool and context integration in agentic systems • Familiarity with secure-by-design development principles (ISO 27001, NIST, OWASP) • Experience in defence, national security, or similarly regulated environments • Contributions to open-source AI/ML projects An active SC or DV clearance ...

DevOps: AWS‐native architectures, CI/CD automation using GitHub Actions,infrastructureand deployment optimisation. Security Engineering: Security‐by‐design mindset with applied knowledge of OWASP Top 10, WCAG, OAuth2, MFA, and secure identity patterns. Quality & Assurance: Proficient in unit testing frameworks; governance and execution of SAST, DAST, SCA, and penetration ...

focus on secure code reviews, SAST/DAST, vulnerability assessments and embedding security throughout the CI/CD lifecycle. The role requires experience with OWASP Top 10, Veracode, DevSecOps, and cloud security across Azure/AWS, plus Kali Linux for manual testing. Hybrid work in London, Manchester or Glasgow with ...

Microsoft Azure Entra ID Vercel Firewall configuration and security controls SIEM technologies; Terraform or other Infrastructure-as-Code DevSecOps CI/CD security OWASP PCI DSS AWS security certifications Working Approach & Key Outcomes 3 months initially AWS Engineer, Security Engineer, AWS Security Engineer, Web, Online, Digital, E-commerce, e.commerce ...

tools. • Experience with Continuous Security, Continuous Integration and Continuous Delivery techniques. • Experience of network security (e.g. OSI, TCP/IP), web application security (e.g. OWASP) and cryptographic controls (e.g. PKI, TLS). • We are passionate about developing people – a demonstrated ability in managing, mentoring and coaching members of your team ...

through model outputs, training data poisoning, and preventing unauthorised data egress in regulated environments. Threat Landscape Awareness: Familiarity with AI-specific risk frameworks (e.g., OWASP Top 10 for LLMs, NIST AI Risk Management Framework) and emerging threat vectors such as prompt injection, model inversion, and inference attacks. Regulated Environment Navigation ...

mitigate security risks.Understanding of the security risks of AI itself, including prompt injection, data leakage and model misuse, and of frameworks such as the OWASP Top 10 for LLM Applications and ISO/IEC 42001.What's in it for you: Hybrid working and flexible start times24 days holiday (+ ...

Framework), NIST AI RMF (National Institute of Standards and Technology Artificial Intelligence Risk Management Framework), ISO/IEC 42001 (Artificial Intelligence Management Systems Standard), OWASP LLM (Open Worldwide Application Security Project) guidance, MITRE ATLAS (Adversarial Threat Landscape for Artificial Intelligence Systems) and CSA (Cloud Security Alliance) frameworks Experience assessing security ...

senior leadership, governance forums, and risk committees Ensure alignment with recognised frameworks and standards including NIST AI RMF, MITRE ATT&CK, MITRE ATLAS, OWASP LLM Top 10, ISO 27001, the EU AI Act, and evolving UK regulatory requirements What it takes Significant experience within Cyber Security, Threat Intelligence, Incident Response ...

engineering with software development. You will collaborate with a Tier 1 bank to implement secure coding practices across the SDLC. The role requires deep OWASP knowledge, threat modelling, cloud security in Azure/AWS, and hands-on coding in Python/JavaScript/C#/PowerShell with strong collaboration across ...

implement Security Operations Centre (SOC) operating models. Conduct vulnerability management programmes, gap analyses, and remediation tracking. Lead penetration testing and application security assessments (OWASP Top 10). Oversee DLP and DDA monitoring strategies. Compliance & Regulatory Alignment Support ISMS implementation aligned with ISO 27001. Ensure alignment with GDPR, PCI‐DSS, DORA ...

programming languages (e.g. Python, Go, Bash) to build security tooling, automate workflows, and integrate security capabilities. Application Security Knowledge: Familiarity with secure development practices, OWASP top risks, and the ability to perform code reviews or work with developers to remediate security findings. Security Frameworks & Standards: Working knowledge of relevant security ...

programming languages (e.g. Python, Go, Bash) to build security tooling, automate workflows, and integrate security capabilities.Application Security Knowledge: Familiarity with secure development practices, OWASP top risks, and the ability to perform code reviews or work with developers to remediate security findings.Security Frameworks Standards: Working knowledge of relevant security frameworks (e.g. ...

OSCP certification is essential (OSEP, OSCE3, or other advanced Offensive Security certifications also accepted) Demonstrable knowledge of Web Application security, including common vulnerabilities (e.g., OWASP Top 10) Strong desire to deepen technical capabilities across various domains, including infrastructure, cloud, and red teaming Excellent written and verbal communication skills Exposure ...

Kubernetes Experience with SQL databases such as PostgreSQL Experience of machine learning applications Knowledge of application security best practices and secure coding principles (e.g., OWASP Top 10) Note: We want Arondite to bring together individuals from diverse backgrounds and perspectives. We don't expect everyone to have experience across each ...

automated testing, test driven development (TDD), continuous integration, pair programming, code review and version control Understanding of common web security risks such as OWASP Top 10, and the corresponding mitigations Enjoy researching and learning new programming tools and techniques and sharing their skills with others Have experience working ...

automated testing, test driven development (TDD), continuous integration, pair programming, code review and version control Understanding of common web security risks such as OWASP Top 10, and the corresponding mitigations Enjoy researching and learning new programming tools and techniques and sharing their skills with others Have experience working ...

costs (invalidation, staleness, consistency). · Security - A working grasp of secure design: authentication and authorisation, secrets handling, input validation and common vulnerabilities (e.g. OWASP Top 10). · Engineering fundamentals - Strong grasp of design patterns, clean code and SOLID principles, with a habit of writing well-tested code. · Backend development - Solid ...

sites, including updates, plugin management, hardening and backups. Experience building accessible interfaces that meet WCAG 2.2 AA. Experience with secure development practice, such as OWASP, authentication, and secrets and dependency management. Experience with CI/CD pipelines and automated testing. Experience working in agile, multidisciplinary teams, with clear written communication. ...

processes, conduct threat modelling for web, mobile and API services, and drive secure coding practices across CI/CD pipelines with a focus on OWASP, NIST, ISO 27001, GDPR and PCI DSS. #J-18808-Ljbffr ...

against web applications) Experience securing cloud-based infrastructures and solutions Previous experience working on an information security team Advanced knowledge of common security vulnerabilities (OWASP) and best practices Familiarity with SOC II controls and how to review them Experience in other technical roles (SysAdmin, Helpdesk, etc.) Strong understanding of Linux ...

write code, configure systems, and implement fixes personally Strong understanding of application security, secure coding practices, and common vulnerabilities such as those outlined by OWASP Experience with penetration testing, vulnerability assessments, and security testing tools Strong understanding of API security, authentication, authorization, OAuth, access tokens, and credential management Experience managing ...

development principles Understanding of AI and large language model security, including prompt-injection testing, AI red teaming, data-leakage and access-control testing, and OWASP AI security guidance Scripting ability in PowerShell and/or Python; experience with Microsoft Copilot Studio or Azure AI is desirable Ability to communicate technical ...

That is how we build too. You have real depth in application and product security: secure SDLC, threat modeling, secure design and code review, OWASP and how vulnerabilities actually get authored and designed out. You need this to be able to build software that does it. Knowing it is table ...