1 to 25 of 253 OWASP Jobs in the UK

utilise them In-depth knowledge of security principles, technologies, best practices, and threat detection and mitigation strategies Knowledge of common attack vectors and methodologies (OWASP Top 10, MITRE ATT&CK Framework and social engineering tactics) The ability to identify potential threats, attack vectors and vulnerabilities in systems and applications ...

Controls - SABSA - TOGAF Understanding of security operations concepts, incident response, and detection capabilities. Knowledge of application security principles, including secure coding practices and OWASP guidance. Experience with DevSecOps practices and security automation. Familiarity with container and Kubernetes security. Understanding of encryption, key management, and data protection principles. Strong documentation, communication ...

CloudWatch. Identity-first security principles. Least Privilege Access Controls. Threat Modelling. Prompt Injection Protection. Data Leakage Prevention. Secure Secrets Management. Operational Readiness Reviews. OWASP Security Standards. Container, Dependency and Vulnerability Scanning. Application Monitoring and Observability. Highly Desirable Public Sector experience. Central Government programme experience. Active SC Clearance. Agentic ...

with Terraform and infrastructure‐as‐code at scale Strong understanding of Kubernetes architecture and operating containerised workloads in cloud environments Good understanding of DevSecOps, OWASP principles and security‐by‐design Experience designing and implementing monitoring, logging and observability solutions Strong scripting skills using Python, Bash, PowerShell or similar Experience making ...

with Terraform and infrastructure-as-code at scale Strong understanding of Kubernetes architecture and operating containerised workloads in cloud environments Good understanding of DevSecOps, OWASP principles and security‐by‐design Experience designing and implementing monitoring, logging and observability solutions Strong scripting skills using Python, Bash, PowerShell or similar Experience making ...

with Terraform and infrastructure-as-code at scale • Strong understanding of Kubernetes architecture and operating containerised workloads in cloud environments • Good understanding of DevSecOps, OWASP principles and security-by-design • Experience designing and implementing monitoring, logging and observability solutions • Strong scripting skills using Python, Bash, PowerShell or similar • Experience making ...

with Terraform and infrastructure-as-code at scale • Strong understanding of Kubernetes architecture and operating containerised workloads in cloud environments • Good understanding of DevSecOps, OWASP principles and security-by-design • Experience designing and implementing monitoring, logging and observability solutions • Strong scripting skills using Python, Bash, PowerShell or similar • Experience making ...

Familiarity with CFTC system safeguards expectations, including 17 C.F.R. § 38.1051 and § 39.18 or similar regulatory requirements. AppSec Foundations: Strong grasp of application security principles (OWASP Top 10, NIST) and secure SDLC practices. CI/CD & Tooling: Proficiency with CI/CD tooling (GitHub Actions, GitLab CI, Jenkins, Azure DevOps, CircleCI ...

protocols, and operating systems. Experience with cloud platforms (AWS, Azure, GCP) and containerized environments (Docker, Kubernetes). Solid understanding of common vulnerabilities and exposures (OWASP Top 10, SANS Top 25) and secure coding practices in at least on major language stack (e.g. Java/Springboot, .NET, JavaScript/Node, Python ...

information security, with a strong focus on application security and DevSecOps Strong understanding of secure software development practices and common application security risks (e.g. OWASP Top 10) Hands-on experience working with or integrating DevSecOps tooling within CI/CD environments (e.g. GitLab pipelines) Experience with application security testing tools ...

similar security testing tools. Knowledge of SAST, DAST, SCA and vulnerability management. Understanding of cloud-hosted applications, containers and modern architectures. Familiarity with OWASP, ISO27001 and NCSC CAF frameworks. Strong stakeholder engagement and communication skills. Awareness of software supply chain threats, cloud security and emerging AI-related risks. Exposure ...

similar security testing tools. Knowledge of SAST, DAST, SCA and vulnerability management. Understanding of cloud-hosted applications, containers and modern architectures. Familiarity with OWASP, ISO27001 and NCSC CAF frameworks. Strong stakeholder engagement and communication skills. Awareness of software supply chain threats, cloud security and emerging AI-related risks. Exposure ...

product aligned security roles, with a track record of owning and driving security initiatives Familiarity with common web, mobile, and API vulnerabilities (e.g., OWASP Top 10) and practical experience preventing and remediate them at scale Experience securing applications and services in at least one major cloud provider (AWS preferred), including ...

segmentation, and host security. Hands on experience with the following security products Trellix, Ivanti, ClearSwift, Yubikey Understanding of secure coding practices and common vulnerabilities (OWASP Top 10, SANS Top 25). Expertise in identity and access management (IAM), including RBAC, ABAC, JWT and Cookie based authentication. Incident detection and response ...

Experience We Value Experience securing large language model applications, retrieval‐augmented generation pipelines, or agentic AI systems. Familiarity with AI security frameworks such as OWASP Top 10 for LLM Applications and MITRE ATLAS. Experience using AI security testing tools such as Garak, PyRIT, or equivalent solutions. Experience supporting enterprise client ...

experience.Additional Experience We ValueExperience securing large language model applications, retrieval-augmented generation pipelines, or agentic AI systems.Familiarity with AI security frameworks such as OWASP Top 10 for LLM Applications and MITRE ATLAS.Experience using AI security testing tools such as Garak, PyRIT, or equivalent solutions.Experience supporting enterprise client security reviews ...

application servers, databases, etc.) and how to leverage them in an assessment Good understanding of web technologies and how they are commonly subverted (e.g. OWASP Top 10) At least a basic understanding of development frameworks (.NET, Java,...) Good understanding of AI-assisted penetration testing capabilities: what level of human ...

such as github actions and Terraform. Hands‐on AWS security experience and Azure security experience (Entra ID, PIM, CAP, Defender, Policy) Deep knowledge of OWASP frameworks, secure SDLC, and application security assessment Experience conducting or coordinating penetration testing and threat modelling Experience with secure code and architecture review, ideally ...

such as github actions and Terraform. Hands‐on AWS security experience and Azure security experience (Entra ID, PIM, CAP, Defender, Policy) Deep knowledge of OWASP frameworks, secure SDLC, and application security assessment Experience conducting or coordinating penetration testing and threat modelling Experience with secure code and architecture review, ideally ...

such as github actions and Terraform. Hands‐on AWS security experience and Azure security experience (Entra ID, PIM, CAP, Defender, Policy) Deep knowledge of OWASP frameworks, secure SDLC, and application security assessment Experience conducting or coordinating penetration testing and threat modelling Experience with secure code and architecture review, ideally ...

such as github actions and Terraform. Hands‐on AWS security experience and Azure security experience (Entra ID, PIM, CAP, Defender, Policy) Deep knowledge of OWASP frameworks, secure SDLC, and application security assessment Experience conducting or coordinating penetration testing and threat modelling Experience with secure code and architecture review, ideally ...

Experience delivering large-scale digital transformation programmes. Kubernetes. Terraform. Infrastructure as Code. CI/CD automation and deployment pipelines. Application security best practices, including OWASP Top 10 awareness and secure-by-design principles. Experience within regulated or public-sector environments. Reasonable Adjustments: Respect and equality are core values to us. ...

performance) using frameworks such as pytest and Selenium, with test-driven development as standard practice. A strong understanding of secure coding, including the OWASP Top 10, static and dynamic analysis, encryption and secrets management. Confident use of Git workflows, including trunk-based development, branching strategies and pull request automation. ...

Design & Regulated Environments: Proven experience delivering solutions within highly regulated, security-sensitive or compliance-driven environments. Strong understanding of secure-by-design principles, OWASP, threat modelling, identity and access management, least-privilege principles and non-functional requirements.Software Engineering Authority: Extensive software engineering background with mastery of modern development practices, code ...

Jenkins, AWS CodePipeline, GitLab CI, or GitHub Actions Solid understanding of relational and NoSQL databases (e.g., PostgreSQL, MongoDB) Knowledge of security best practices (e.g. OWASP) and performance optimization Excellent leadership, communication, time management and mentoring skills, with the ability to influence technical direction Desirable Qualifications Experience in fintech, payments ...