1 to 25 of 64 OWASP Jobs in the UK

Dynatrace, ELK, or Zabbix • Knowledge of cloud security, container security, and secure software delivery methodologies • Familiarity with security frameworks and governance standards such as OWASP, CIS Benchmarks, and NIST • Practical application of AI-assisted engineering tools to improve software delivery and operational outcomes • Ability to define governance, controls, and assurance ...

support, and participate in on‐call, recovery and post‐mortem activities to ensure availability and reliability. Produce high‐quality code aligned to standards (e.g. OWASP, GDPR, Git/Azure DevOps), supporting junior team members and contributing to DevOps culture. Advise internal teams and customers on DevOps principles, administer in‐house ...

understanding of CI/CD pipelines, version control (Git), and modern deployment practices.Familiarity with security best practices relevant to web and mobile applications (e.g. OWASP Top 10).Excellent communication skills, able to articulate technical decisions clearly to both technical and non-technical stakeholders.Experience working within Agile or cross-functional delivery ...

/CD pipelines, version control (Git), and modern deployment practices. Familiarity with security best practices relevant to web and mobile applications (e.g. OWASP Top 10). Excellent communication skills, able to articulate technical decisions clearly to both technical and non-technical stakeholders. Experience working within Agile or cross-functional delivery ...

Working with shared/common government tech stacks (Node.js, PostgreSQL, Redis) Investigating and resolving technical issues across the stack Applying secure development practices, including OWASP principles and vulnerability management Collaborating with stakeholders and communicating technical concepts clearly Tech stack includes: Node.js, HAPI (web framework) API development (REST, OpenAPI) PostgreSQL, MongoDB ...

availability, reliability, and performance of services Contribute to CI/CD pipelines, applying TDD/BDD practices Implement Secure by Design principles and address OWASP Top 10 risks Promote observability, monitoring, and incident management best practices Mentor team members and produce clear technical documentation Essential Skills & Experience Strong experience ...

conducting threat modelling (e.g. STRIDE, attack trees) and risk analysis Strong understanding of security frameworks and best practice such as ISO 27001, NIST, CIS, OWASP, NCSC guidance Experience working in the UK Public Sector and associated security standards and guidance including GovAssure/NCSC CAF, HMG Security Policy Framework. Knowledge ...

conducting threat modelling (e.g. STRIDE, attack trees) and risk analysis Strong understanding of security frameworks and best practice such as ISO 27001, NIST, CIS, OWASP, NCSC guidance Experience working in the UK Public Sector and associated security standards and guidance including GovAssure/NCSC CAF, HMG Security Policy Framework. Knowledge ...

tools in cloud environments is a plus Cloud Security skills (desired): Secure software development practices, including SecDevOps Sound knowledge of applicable frameworks & standards, including OWASP, MITRE ATT@CK & D3FEND, CIS, NIST CSF, CSA CCM & ISO 27107 Relevant industry certifications including CSCP Understanding of cyber risk frameworks or industry standards such ...

practical knowledge of offensive security across web applications, APIs, networks, and cloud environments Solid understanding of system internals, networking, and common vulnerability classes including OWASP Top 10, authentication and authorisation flaws, logic issues, and race conditions Familiarity with Windows and Linux environments from an attacker's perspective Proficiency with standard ...

Azure, or GCP), including identity, network security, and platform controls. Active SC Clearance Experience with security frameworks and standards (eg NIST, ISO 27001, CIS, OWASP). Hands-on understanding of modern application architectures (microservices, APIs, event-driven systems). Experience working within Agile/Scrum delivery environments. Strong stakeholder engagement ...

wireless, and mobile security testing. Experience leading security teams and managing the delivery of offensive security engagements. Deep understanding of penetration testing methodologies including OWASP Testing Guide, PTES, and OSSTMM. Experience working within Red Team, Blue Team, and Purple Team environments. Strong knowledge of common attack techniques, threat emulation, vulnerability ...

unit and automated testing using tools such as NUnit, Jasmine and SeleniumGood knowledge of SOLID principlesDesirable Skills:Containers (docker, K8s)Security best practice (OWASP top ten)OpenIDConnect/Identity serverMS SQL ServerAzure DevOps, TeamCityInfrastructure as Code (Bicep, ARM templates, Terraform)Please apply now or contact for more infoSpectrum IT Recruitment ...

penetration testing engagements. Provide technical guidance and support to penetration testers and security consultants. Ensure testing methodologies align with: NCSC CHECK requirements CREST standards OWASP Testing Guide Review and validate findings to ensure technical accuracy and consistency. Perform peer reviews and quality assurance of technical reports. Lead technical investigations ...

SAML, OAuth, OpenID Connect, Active Directory, LDAP, ADFS) Secure application development (Java or .NET) Agile delivery environments API-driven architectures Security frameworks and principles (OWASP, NCSC guidance) Data protection and GDPR-compliant design Desirable Experience Defence, central government or highly regulated environments SC cleared environments Data architecture and modern data ...

government standards Writing clean, maintainable, and reusable code/configuration Supporting issue investigation, resolution, and continuous improvement Applying secure development practices, including awareness of OWASP principles Collaborating with stakeholders and clearly communicating technical concepts Tech and environment: Microsoft Power Platform (Power Apps, Power Automate, Dataverse) Integration with wider enterprise systems ...

Lifecycle Professional) GWAPT (GIAC Web Application Penetration Tester) GCSA (GIAC Cloud Security Automation) CASE (Certified Application Security Engineer) Certified DevSecOps Professional Strong familiarity with OWASP (including Top 10 and ASVS) At least 5 years experience in information security assurance, with a strong focus on application security. Hands-on experience with ...

Lifecycle Professional) GWAPT (GIAC Web Application Penetration Tester) GCSA (GIAC Cloud Security Automation) CASE (Certified Application Security Engineer) Certified DevSecOps Professional Strong familiarity with OWASP (including Top 10 and ASVS) At least 5 years’ experience in information security assurance, with a strong focus on application security. Hands-on experience with ...

Microsoft Purview • Background in eComm, marketplace, or retail technology • Scripting (Python, PowerShell), Terraform, or detection-as-code experience • Familiarity with NIST CSF, ISO 27001, OWASP LLM Top 10, or similar frameworks What's on Offer for the Security Engineer • Real ownership — a genuine mandate to drive change, with the tooling ...

business terms to exec and board audiences, and technical terms to engineers, without losing precision in either direction. Technical foundation Strong AppSec expertise (OWASP, API security, SAST/DAST, SDLC) with practical threat modelling experience – enough to challenge and coach our most senior application security engineers. Hands‐on understanding ...

strong attention to detail A solid understanding of how web applications work including security, session management, and best development practices Full understanding of the OWASP framework. Enforcement of the framework throughout all coding Create, maintain and coordinate backup mechanisms for the purposes of business continuity while maintaining a high level ...

ViTest) Contributing to CI/CD pipeline improvements and secure deployment practices Participating in architecture and technical design reviews Ensuring all development aligns with OWASP security best practices Tech Stack & Environment Core technologies: .NET 10/ASP.NET Core Angular 21 (mandatory) DevExpress DevExtreme v25 (mandatory) Entity Framework Core TypeScript/ ...

influencing technical direction. Experience using AI to accelerate software delivery. Bonus Points For Cyber security or regulated industry experience. Kubernetes and cloud-native technologies. OWASP, ISO 27001 or IEC 62443. Open-source contributions. ...

influencing technical direction. Experience using AI to accelerate software delivery. Bonus Points For Cyber security or regulated industry experience. Kubernetes and cloud-native technologies. OWASP, ISO 27001 or IEC 62443. Open-source contributions. ...

Awareness of AI/ML in security operations and AI-specific threats (e.g. prompt injection, sensitive-data exposure via GenAI), with awareness of the OWASP LLM Top 10 and MITRE ATLAS. Exposure to cloud detection across Azure, AWS, and/or GCP and to cloud and identity log sources (e.g. ...