76 to 100 of 111 OWASP Jobs in London

queries. Experience developing secure code end to end: strong understanding of common vulnerabilities such as cross-site scripting, cross-site request forgery and other OWASP risks, along with authentication, authorisation and secrets handling, and best practices for testing and mitigating them. Solid grasp of frontend-backend integration, including asynchronous request ...

Proficiency with Maven/Nexus and GitLab CI/CD. · Understanding of distributed systems, clustering, and failover. · Strong knowledge of web security standards and OWASP Top 10. · Optional: Exposure to front-end tech, Python scripting, or AI/ML APIs. · 8+ years of professional Java development. · Enterprise-level backend/ ...

Proficiency with Maven/Nexus and GitLab CI/CD. Understanding of distributed systems, clustering, and failover. Strong knowledge of web security standards and OWASP Top 10. Optional: Exposure to front-end tech, Python scripting, or AI/ML APIs. 8+ years of professional Java development. Enterprise-level backend/ ...

critical service, regulated, infrastructure, cloud or technology-led environment. Understanding of frameworks such as NIST CSF, ISO 27001, CIS Controls, Cyber Essentials, OWASP or the NCSC Cyber Assessment Framework. Experience using scripting, workflow automation, data analysis, or reporting tools to improve vulnerability triage, remediation tracking, or reporting. Relevant cyber security ...

cost. You build validation, schema enforcement and safe failure behaviour for outputs that may be well-formed yet wrong. Authentication, authorisation, secrets, input validation, OWASP awareness and audit trails are part of everyday engineering. The delivery and cost You deploy and operate on AWS using EKS/ECS patterns ...

solutions using Terraform to support repeatable and compliant environments Implement automation across build, test and deployment workflows to ensure consistent and reliable delivery Apply OWASP security principles and DevSecOps practices throughout the delivery lifecycle Deploy and maintain containerised workloads using Kubernetes or AWS-native services such … pipeline management Demonstrable experience with Terraform and infrastructure-as-code delivery Deep understanding of Kubernetes architecture and operations in cloud environments Working knowledge of OWASP security principles and how to apply them in CI/CD and infrastructure design Competence in scripting languages such as Python, Bash or PowerShell Experience ...

Development Lifecycle practices. What you'll do In this position, you are a passionate and talented application security engineer with very deep understanding of OWASP, CWE 25, Data Protection, Access management, software vulnerabilities, best practices design and threat modelling skills, who can work in a dynamic environment. You must … Product Security Prior experience in using AI models and cyber harnesses to support security evaluation of application and software code. GitHub, Copilot, Codex, OWASP Top 10 for Agentic AI, AI skills development and security triage. Ability to code in at least one programming language e.g. Python/JavaScript/CSharp ...

high-risk products and services. Conduct and oversee SAST, DAST, API security, fuzz testing and architecture-level assessments . Assess applications against the OWASP Top 10 and other relevant security standards. Identify vulnerabilities, understand their root causes and translate findings into practical remediation plans. Provide secure design and coding guidance … security , including model, data and prompt/model manipulation risks. Experience delivering developer-focused security training or workshops. Knowledge of frameworks such as OWASP SAMM, ASVS, NIST CSF or NIST SSDF . Relevant application security, cloud security or offensive security certifications. Experience working across multiple teams, countries or business entities. ...

architecture expertise to assess control effectiveness across modern engineering environments. You will review security tooling, map controls to frameworks such as NIST SSDF and OWASP DSOMM, conduct control assessments and facilitate engineering #J-18808-Ljbffr ...

particularly PostgreSQL, covering schema evolution, optimisation, and transaction management. Proficient in caching mechanisms using technologies like Redis. Understanding secure coding standards, with insights into OWASP principles. Experienced in containerization tools (Docker) throughout the development lifecycle. Advocate for test automation practices, emphasising reliability and rapid deployment. Capable of translating business requirements ...

particularly PostgreSQL, covering schema evolution, optimisation, and transaction management. Proficient in caching mechanisms using technologies like Redis. Understanding secure coding standards, with insights into OWASP principles. Experienced in containerization tools (Docker) throughout the development lifecycle. Advocate for test automation practices, emphasising reliability and rapid deployment. Capable of translating business requirements ...

practical terms. Experience with AI governance, responsible AI, model risk management or AI assurance. Familiarity with frameworks and guidance such as NIST AI RMF, OWASP Top 10 for LLM Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations ...

engagement, and plan testing that meets their assurance needs. Apply manual and tool-assisted testing techniques aligned with recognised methodologies and frameworks, including the OWASP Web Security Testing Guide, PTES, and MITRE ATT&CK. Deliver Cyber Essentials Plus assessments, including scoping, conducting the required technical tests, verifying remediation and supporting ...

engagement, and plan testing that meets their assurance needs. * Apply manual and tool-assisted testing techniques aligned with recognised methodologies and frameworks, including the OWASP Web Security Testing Guide, PTES, and MITRE ATT&CK. * Deliver Cyber Essentials Plus assessments, including scoping, conducting the required technical tests, verifying remediation and supporting ...

code generation, component refactoring, test generation, and architectural brainstorming. Enforce a strict zero-trust verification loop over all AI outputs to guarantee type safety, OWASP vulnerability defense, and performance standards. Enterprise Security & Audit Pipeline: Enforce rigorous authentication and authorization postures (JWT tokens, ApiKey schemes, single sign-on) and block malicious ...

including SAST, SCA, DAST, secrets scanning, IaC scanning, API security, threat modelling and CI/CD security. Map controls against frameworks including NIST SSDF, OWASP SAMM and OWASP DSOMM. Review security tooling and integrations across GitHub, GitLab, CI/CD and cloud environments. Conduct control-effectiveness assessments, evidence reviews ...

converting SAST, SCA, secrets or ASPM findings into prioritised, remediated work rather than raw reporting Strong understanding of common vulnerability classes and the OWASP Top 10, with practical knowledge of how to remediate them The ability to read and review code in at least one of our core languages: Java … policy-as-code tooling Experience establishing a security champions programme Experience securing large language model (LLM) or agentic AI capabilities, such as applying the OWASP Top 10 for LLM Applications Familiarity with financial services regulations and standards, such as the Digital Operational Resilience Act (DORA ...

ensure we are secure and demonstrably so to our customers. You’ll embed secure-by-design practices, monitor for irregular behaviour, align with OWASP Top 10 and AWS Well-Architected, and lead risk assessments and policy documentation under ISO 27001 ISMS. #J-18808-Ljbffr ...

write deliverables to a high standard Experience with Attack & Threat Modelling Red Team testing and social engineering attack methodologies Extensive knowledge of the OWASP Testing Methodology Knowledge of networking protocols and the OSI Model Working knowledge of CobaltStrike Preferred Education, Training & Experience: 5 years testing Experience ...

agentic AI. You will work hands-on at first and grow into wider governance and mentorship across teams. You will map findings to OWASP, MITRE ATLAS and NIST AI RMF, define controls for internal vs client-facing views, and help roll out tooling and incident response processes across accounts. #J ...

advanced Security Operations, or high-level Technical Support/Incident Response for enterprise infrastructure Proven capability to handle both Application Security (including knowledge of OWASP Top 10 vulnerabilities, L7 WAF, HTTP/S anomalies, Bot mitigation) and Network Security (L3/L4 volumetric DDoS, protocol abuse) Working knowledge of threat ...

The Apex Group was established in Bermuda in 2003 and is now one of the world’s largest fund administration and middle office solutions providers. Our business is unique in its ability to reach globally ...

regulated environment. Essential skills: 5+ years of full stack development with C#/.NET and TypeScript/JavaScript Hands-on remediation of OWASP Top 10 issues, CVEs and dependency vulnerabilities Scanning tools such as SonarQube, Snyk, Veracode or Checkmarx Building and securing REST API integrations Regulated environment experience, ideally financial ...

/CD security Hands‐on experience with AWS and Cloudflare (or equivalents) and Terraform or similar IaC A strong grasp of the OWASP Top 10 and the ability to assess exploitability and impact Solid coding skills (e.g. Python, Go, Scala) and experience building security tooling or automation Practical understanding … risks in AI‐assisted and agentic development and LLM applications (e.g. OWASP Top 10 for LLMs) Experience with security risk analysis and risk management methods The ability to explain trade‐offs clearly to engineers and senior stakeholders, and to win people over Nice to have Experience building guardrails, sandboxes ...

improving how our code ships Cloud infrastructure on AWS: configuration, automation, and sensible, secure operations Security across the platform: secure coding standards, the OWASP Top 10, hardening, secrets, and staying on top of vulnerabilities and updates Reliability and robustness: observability, alerting, and a steady pair of hands when an incident … security basics done well, including IAM, secrets handling and least privilege A genuine security mindset: fluent in secure coding practices and the OWASP Top 10, and able to spot and fix real risk across code and infrastructure Comfortable automating with infrastructure as code and scripting, and keeping systems robust, observable ...