1 to 25 of 28 OWASP Jobs in the South East

application servers, databases, etc.) and how to leverage them in an assessment Good understanding of web technologies and how they are commonly subverted (e.g. OWASP Top 10) At least a basic understanding of development frameworks (.NET, Java,...) Good understanding of AI-assisted penetration testing capabilities: what level of human ...

Experience delivering large-scale digital transformation programmes. Kubernetes. Terraform. Infrastructure as Code. CI/CD automation and deployment pipelines. Application security best practices, including OWASP Top 10 awareness and secure-by-design principles. Experience within regulated or public-sector environments. Reasonable Adjustments: Respect and equality are core values to us. ...

conducting threat modelling (e.g. STRIDE, attack trees) and risk analysis Strong understanding of security frameworks and best practice such as ISO 27001, NIST, CIS, OWASP, NCSC guidance Experience working in the UK Public Sector and associated security standards and guidance including GovAssure/NCSC CAF, HMG Security Policy Framework. Knowledge ...

Code of Practice and NCSC cloud security principles. Understanding of ITIL 4, SIAM principles, ISO/IEC 27001, ISO/IEC 20000-1 and OWASP practices. Strong stakeholder management and communication skills, with the ability to explain complex technical matters clearly to technical and non-technical audiences. Ability to provide ...

Comfortable learning new languages, tools and observability technologies as required. Nice to Have: Experience with AWS or GCP; GraphQL, gRPC or REST API design; OWASP and GDPR; or mobile and web performance optimisation. MEASURES & GOALS: (HOW WILL THE SUCCESS OF THE PERSON IN THIS POSITION BE MEASURED – WHAT ...

management within a software development or SaaS environment. Practical understanding of Security by Design (SbD) concepts, threat modelling principles, and application security baselines (e.g., OWASP, ISO 27001, NIST). Familiarity with modern software development lifecycles (SDLC), cloud hosting platforms (AWS, Azure, or GCP), and production service operations. Excellent stakeholder engagement ...

/CD, automated testing, code quality controls, observability, incident diagnosis, reliability engineering and DevSecOps practices. Knowledge of application security, identity and access management, OWASP guidance, threat modelling, privacy by design and relevant compliance requirements. Experience producing high‐quality architecture artefacts, including context and container views, integration diagrams, data‐flow diagrams ...

teams Essential requirements: Significant experience in threat modelling - experience using IriusRisk or comparable threat modelling tools Experience in application security, with detailed knowledge of OWASP standards and web application security Experience of DevSecOps practices, including integrating security controls into CI/CD pipelines Knowledge of the secure SDLC within agile ...

Reporting* SOC – Experienced in Security Ops, Incident Response, Threat Hunting, Malware/Forensic Analysis* WebApps – Experienced in WebApp DevSecOps best practices, WebApp scanning for OWASP top 10.* Good understanding of GRC strategies and tools, Threat Intelligence, SIEMs, XDR, ICS/OT security* Relevant industry certifications: CISSP, CEH, CCNP, Public Cloud ...

code with Terraform or Bicep, and PowerShell or Python to automate controls and response. Working knowledge of AKS and container security, and of the OWASP Top 10. Clear written communication: runbooks, incident reports and remediation plans that engineers and managers can act on. Desirable: Monitoring a multi‐tenant SaaS platform ...

tools. • Experience with Continuous Security, Continuous Integration and Continuous Delivery techniques. • Experience of network security (e.g. OSI, TCP/IP), web application security (e.g. OWASP) and cryptographic controls (e.g. PKI, TLS). • We are passionate about developing people – a demonstrated ability in managing, mentoring and coaching members of your team ...

architectural decisions and ensure the quality and reliability of delivered solutions. Desirable Skills CI/CD pipelines, TeamCity, GitHub and Azure DevOps. Windows Services. OWASP Top 10 and application security best practices. Experience using AI tools for architectural design, technical documentation, threat modelling or design reviews. Understanding of emerging ...

regulated environment, such as healthcare, financial services or another complex industry.Strong knowledge of security and risk frameworks such as ISO 27001, NIST, CIS, OWASP, ITIL or COBIT.Experience working with cloud technologies, particularly Azure, Google Cloud and modern identity and access management solutions.A good understanding of cyber threats, security operations ...

regulated environment, such as healthcare, financial services or another complex industry. Strong knowledge of security and risk frameworks such as ISO 27001, NIST, CIS, OWASP, ITIL or COBIT. Experience working with cloud technologies, particularly Azure, Google Cloud and modern identity and access management solutions. A good understanding of cyber threats ...

automated testing, test driven development (TDD), continuous integration, pair programming, code review and version control Understanding of common web security risks such as OWASP Top 10, and the corresponding mitigations Enjoy researching and learning new programming tools and techniques and sharing their skills with others Have experience working ...

performance Familiarity with agent-to-agent orchestration protocols or the Model Context Protocol (MCP) Awareness of secure-by-design frameworks (ISO 27001, NIST, OWASP) Open-source AI/ML contributions Why Apply Real technical ownership: shape the architecture, not just work through a backlog Work at the leading edge ...

performance Familiarity with agent-to-agent orchestration protocols or the Model Context Protocol (MCP) Awareness of secure-by-design frameworks (ISO 27001, NIST, OWASP) Open-source AI/ML contributions Why Apply Real technical ownership: shape the architecture, not just work through a backlog Work at the leading edge ...

frameworks for Web, Mobile, and Microservices APIs. Testing Strategy & CI/CD: Drive TDD/BDD practices, execute non-functional testing (Performance, Security/OWASP), and integrate automated suites into CI/CD pipelines. Engineering Standards: Review backlogs to build risk-based test strategies, mentor engineers, and partner with developers ...

Experience with vulnerability scanning, secure configuration assessments and remediation tracking. An understanding of common attack techniques, security monitoring and incident response. Knowledge of the OWASP Top 10 and recognised cyber security principles. An understanding of the NIST Cybersecurity Framework and NIS Regulations. Experience working towards Cyber Essentials. The ability ...

designing or evaluating security controls within cloud environments, APIs, CI/CD pipelines, identity services, and data platforms. Familiarity with security guidelines such as OWASP recommendations for large language models and agentic applications, MITRE ATLAS, and cloud provider-specific AI security guidance. Ability to participate in incident response and security ...

engagement, and plan testing that meets their assurance needs. * Apply manual and tool-assisted testing techniques aligned with recognised methodologies and frameworks, including the OWASP Web Security Testing Guide, PTES, and MITRE ATT&CK. * Deliver Cyber Essentials Plus assessments, including scoping, conducting the required technical tests, verifying remediation and supporting ...

AWS. You think in quality and resilience: You understand performance, reliability, scalability and secure design, and you work with established frameworks and OWASP practices. You get leverage from tools: You know how to use AI coding agents effectively without outsourcing your judgement. You keep things simple: You weigh existing tools ...

AWS.You think in quality and resilience: You understand performance, reliability, scalability and secure design, and you work with established frameworks and OWASP practices.You get leverage from tools: You know how to use AI coding agents effectively without outsourcing your judgement.You keep things simple: You weigh existing tools, libraries and patterns ...

ramp on a new AI tool or technique in days, not months. You will have an advantage if you also have: Security best practice (OWASP top ten) Windows services Experience using AI tooling specifically in the architect role - for design review, ADR drafting, threat modelling, contract design, or similar. Familiarity ...

Skills & Experience Strong background in DevSecOps, Application Security or Integration Security. Expertise in OAuth2, OIDC, JWT and API Security . Strong knowledge of OWASP Top 10 and OWASP API Security Top 10 . Experience securing AWS environments, including IAM, networking and hybrid integrations. Ability to review code across Java, Kotlin ...