17 of 17 OWASP Jobs in the North of England

with Terraform and infrastructure-as-code at scale Strong understanding of Kubernetes architecture and operating containerised workloads in cloud environments Good understanding of DevSecOps, OWASP principles and security‐by‐design Experience designing and implementing monitoring, logging and observability solutions Strong scripting skills using Python, Bash, PowerShell or similar Experience making ...

Entra ID Practical expertise managing WAF technologies such as Cloudflare, Akamai, or equivalent enterprise platforms Strong understanding of web application security, API security, and OWASP Top 10 vulnerabilities Experience implementing identity and access management controls, including Conditional Access and identity governance Experience working within Agile, DevOps, or platform engineering environments ...

DDoS mitigation, web proxy, vulnerability management) Understanding of Information Security principles, frameworks and regulatory requirements (e.g. ISO27001, FCA, PRA, ICO) Working knowledge of OWASP Top 10 and build/integration tools (e.g. Maven, Jenkins, Chef, TFS) Effective communication skills, including the ability to explain technical concepts and impacts ...

Kubernetes, and secure software development across Azure and/or AWS Good knowledge of security frameworks and standards, including NIST CSF, MITRE ATT&CK, OWASP, and how to apply security controls in DevOps platforms and processes Experience working across enterprise and solution architecture, with strong knowledge of application security, data ...

cloud environments Knowledge of Windows and Linux/Unix security Understanding of IAM, encryption, PKI and TLS Knowledge of web security principles, including OWASP Top 10, WAF and API security Experience with vulnerability management, patching and security remediation Knowledge of the MITRE ATT&CK Framework and common attack techniques Experience ...

design leadership. Deep understanding of AWS security, hybrid cloud design, and modern DevSecOps principles. Strong knowledge of frameworks such as NIST, ISO 27001, OWASP, and CIS. Experience designing and implementing secure, compliant PCI‐DSS solutions. Solid grounding in tools and technologies like SIEM, IDS/IPS, DLP, endpoint protection ...

appropriate tools. Familiarity with Continuous Security, Continuous Integration and Continuous Delivery practices. Solid understanding of network security (OSI, TCP/IP), web application security (OWASP) and cryptographic controls (PKI, TLS). Track record in managing, mentoring and coaching team members, with a passion for people development. Excellent communication skills, able ...

comfortable translating technical complexity into clear decisions, and confident working with stakeholders at all levels. You understand frameworks like NIST, ISO 27001, CIS, OWASP etc., and ideally have experience designing or supporting PCI compliant environments. You’re hands‐on with tools such as SIEM, IDS/ ...

GitOps and infrastructure as code experience at scale CI/CD pipeline automation experience Extensive experience with declarative orchestration and configuration management Knowledge of OWASP Top 10 CI/CD Security Risks and embedding security controls into delivery pipelines Experience mentoring engineers, leading technical initiatives or acting as a technical ...

DDoS mitigation, web proxy, vulnerability management) Understanding of Information Security principles, frameworks and regulatory requirements (e.g. ISO27001, FCA, PRA, ICO) Working knowledge of OWASP Top 10 and build/integration tools (e.g. Maven, Jenkins, Chef, TFS) Effective communication skills, including the ability to explain technical concepts and impacts ...

working with API Gateway products (Google Apigee, Azure APIM) Containers and Container Orchestration - Docker, Kubernetes & OpenShift Continuous Integration Pipelines Git, Jenkins, Azure AKS Security (OWASP, Certificates, JWT, Encryption techniques) Knowledge, understanding and experience of software delivery methodologies and the application of them using tools like JIRA, Confluence, Gitlab and Jenkins ...

generative AI, LLMs and AI-enabled solutions in a change environment. Knowledge of emerging AI security frameworks and standards, including NIST AI RMF, the OWASP Top 10 for LLM Applications, MITRE ATLAS and ISO 42001. The judgement to balance innovation with security, regulatory compliance and operational resilience. Clear communication skills ...

generative AI, LLMs and AI-enabled solutions in a change environment. Knowledge of emerging AI security frameworks and standards, including NIST AI RMF, the OWASP Top 10 for LLM Applications, MITRE ATLAS and ISO 42001. The judgement to balance innovation with security, regulatory compliance and operational resilience. Clear communication skills ...

genuinely blameless Post-Incident Review culture, building on the existing Incident Management SOP Security & Risk Embed secure coding practice, SAST/DAST scanning, and OWASP-aligned standards into the engineering definition of done Surface security risk in business terms (exposure, cost to fix vs cost to carry) and route ...

guardrails. Nice to have Working familiarity with AI security standards and references such as the NIST AI RMF, ISO 42001, MITRE ATLAS, or the OWASP LLM Top 10. Hands‐on experience with policy‐as‐code and turning standards into enforced controls. Contributions to security standards, frameworks, or industry practice. ...

similar technologies Drive improvements across CI/CD pipelines, automated testing and deployment processes Ensure applications are secure, maintainable and aligned with OWASP best practices Conduct code reviews and promote engineering standards across the development team Work closely with UI/UX teams to deliver high-quality user experiences Contribute … Terraform Experience building and maintaining CI/CD pipelines using Azure DevOps, GitHub Actions or similar Strong understanding of secure software development and OWASP principles Experience working within Agile development teams Excellent communication skills with the ability to engage technical and non-technical stakeholders A proactive, hands-on approach with ...

security testing tools such as Nessus, Nmap, Burp Suite, Metasploit, and similar platforms. In-depth knowledge of IT security standards and frameworks such as OWASP, NIST, and SANS Top 25. Familiarity with the OSI model, TCP/IP model, and core networking concepts. Hands‐on experience in manual penetration testing … experience with commercial and open-source tools/frameworks including Burp Suite, Metasploit, Core Impact, Scapy, AppScan, WebInspect, Qualys, Nessus, Nmap, SQLmap, and OWASP ZAP. Travel Travel may be required across the country for project execution, monitoring, assessments, testing activities, and coordination with geographically distributed teams, as and when required. ...