1 to 25 of 107 OWASP Jobs in the UK excluding London

with Terraform and infrastructure-as-code at scale Strong understanding of Kubernetes architecture and operating containerised workloads in cloud environments Good understanding of DevSecOps, OWASP principles and security‐by‐design Experience designing and implementing monitoring, logging and observability solutions Strong scripting skills using Python, Bash, PowerShell or similar Experience making ...

with Terraform and infrastructure-as-code at scale • Strong understanding of Kubernetes architecture and operating containerised workloads in cloud environments • Good understanding of DevSecOps, OWASP principles and security-by-design • Experience designing and implementing monitoring, logging and observability solutions • Strong scripting skills using Python, Bash, PowerShell or similar • Experience making ...

similar security testing tools. Knowledge of SAST, DAST, SCA and vulnerability management. Understanding of cloud-hosted applications, containers and modern architectures. Familiarity with OWASP, ISO27001 and NCSC CAF frameworks. Strong stakeholder engagement and communication skills. Awareness of software supply chain threats, cloud security and emerging AI-related risks. Exposure ...

similar security testing tools. Knowledge of SAST, DAST, SCA and vulnerability management. Understanding of cloud-hosted applications, containers and modern architectures. Familiarity with OWASP, ISO27001 and NCSC CAF frameworks. Strong stakeholder engagement and communication skills. Awareness of software supply chain threats, cloud security and emerging AI-related risks. Exposure ...

segmentation, and host security. Hands on experience with the following security products Trellix, Ivanti, ClearSwift, Yubikey Understanding of secure coding practices and common vulnerabilities (OWASP Top 10, SANS Top 25). Expertise in identity and access management (IAM), including RBAC, ABAC, JWT and Cookie based authentication. Incident detection and response ...

application servers, databases, etc.) and how to leverage them in an assessment Good understanding of web technologies and how they are commonly subverted (e.g. OWASP Top 10) At least a basic understanding of development frameworks (.NET, Java,...) Good understanding of AI-assisted penetration testing capabilities: what level of human ...

such as github actions and Terraform. Hands‐on AWS security experience and Azure security experience (Entra ID, PIM, CAP, Defender, Policy) Deep knowledge of OWASP frameworks, secure SDLC, and application security assessment Experience conducting or coordinating penetration testing and threat modelling Experience with secure code and architecture review, ideally ...

such as github actions and Terraform. Hands‐on AWS security experience and Azure security experience (Entra ID, PIM, CAP, Defender, Policy) Deep knowledge of OWASP frameworks, secure SDLC, and application security assessment Experience conducting or coordinating penetration testing and threat modelling Experience with secure code and architecture review, ideally ...

such as github actions and Terraform. Hands‐on AWS security experience and Azure security experience (Entra ID, PIM, CAP, Defender, Policy) Deep knowledge of OWASP frameworks, secure SDLC, and application security assessment Experience conducting or coordinating penetration testing and threat modelling Experience with secure code and architecture review, ideally ...

Experience delivering large-scale digital transformation programmes. Kubernetes. Terraform. Infrastructure as Code. CI/CD automation and deployment pipelines. Application security best practices, including OWASP Top 10 awareness and secure-by-design principles. Experience within regulated or public-sector environments. Reasonable Adjustments: Respect and equality are core values to us. ...

SaaS applications and backend services across API gateways, identity and access management, data protection, and SIEM-based security monitoring. \n Security Standards: Familiarity with OWASP Top 10 and CWE Top 25 vulnerabilities. \n Cloud Security: Direct experience with, or a strong understanding of, SaaS, PaaS and IaaS services and their ...

conducting threat modelling (e.g. STRIDE, attack trees) and risk analysis Strong understanding of security frameworks and best practice such as ISO 27001, NIST, CIS, OWASP, NCSC guidance Experience working in the UK Public Sector and associated security standards and guidance including GovAssure/NCSC CAF, HMG Security Policy Framework. Knowledge ...

following... Cloud and infrastructure security : Experience or interest in Azure, Linux, networking, firewalls or identity and access management Application security : Secure coding, the OWASP Top 10, code or dependency scanning Security operations : Log analysis, SIEM tools, threat intelligence or incident response Governance and risk : Interest in security frameworks and standards ...

practices including CI/CD, source control, automated testing, and Agile delivery methodologies Desirable Skills Working knowledge of industry security frameworks and standards including OWASP Top 10, MITRE ATT&CK, NIST Cybersecurity Framework, OAuth 2.0, OpenID Connect, and SAML Experience supporting Security Operations, Incident Response, SOC, or breach modeling activities ...

Black Duck; policy as code; or threat modelling. Familiarity with relevant security standards and frameworks, such as NCSC Secure by Design, ISO 27001, OWASP or SLSA. Site reliability engineering practices, disaster recovery testing or supplier‐to‐operations handover. Candidates are not expected to have used every technology listed. Strong core ...

Black Duck; policy as code; or threat modelling. Familiarity with relevant security standards and frameworks, such as NCSC Secure by Design, ISO 27001, OWASP or SLSA. Site reliability engineering practices, disaster recovery testing or supplier‐to‐operations handover. Candidates are not expected to have used every technology listed. Strong core ...

Black Duck; policy as code; or threat modelling. Familiarity with relevant security standards and frameworks, such as NCSC Secure by Design, ISO 27001, OWASP or SLSA. Site reliability engineering practices, disaster recovery testing or supplier‐to‐operations handover. Candidates are not expected to have used every technology listed. Strong core ...

practices including CI/CD, source control, automated testing, and Agile delivery methodologies. Desirable Skills: Working knowledge of industry security frameworks and standards including OWASP Top 10, MITRE ATT&CK, NIST Cybersecurity Framework, OAuth 2.0, OpenID Connect, and SAML. Experience supporting Security Operations, Incident Response, SOC, or breach modeling activities. ...

Desirable Technical Skills Experience with any of the following would be advantageous: Test Automation: Playwright, Selenium, JUnit, Cucumber/Gherkin Performance & Security Testing: Gatling, OWASP ZAP, SonarQube Accessibility Testing: Axe, WAVE, WCAG Development & Testing Tools: WireMock, GitHub Copilot, OpenAPI Cloud & Infrastructure: AWS, Docker, Kubernetes, Microservices Contract Details Rate ...

Code experience using Terraform and/or Bicep. Automation experience using PowerShell and/or Python. Knowledge of Kubernetes, AKS, container security and OWASP principles. Ability to communicate effectively with both technical and business stakeholders. Desirable Experience Multi-tenant SaaS platform environments. Microsoft Defender XDR suite. Building or transforming ...

modelling, security architecture reviews and control design activities. Strong knowledge of security frameworks including NIST CSF, NIST AI RMF, ISO 27001, ISO 42001 and OWASP AI security guidance. Experience working within highly regulated environments such as healthcare, financial services or government. Excellent communication skills with the ability to explain complex ...

Comfortable learning new languages, tools and observability technologies as required. Nice to Have: Experience with AWS or GCP; GraphQL, gRPC or REST API design; OWASP and GDPR; or mobile and web performance optimisation. MEASURES & GOALS: (HOW WILL THE SUCCESS OF THE PERSON IN THIS POSITION BE MEASURED – WHAT ...

systems, alongside broader governance, risk and compliance work Working knowledge of NIST frameworks Practical use of AI security and control frameworks such as the OWASP Top 10 for LLMs and MITRE ATLAS A drive to deliver rigorous assurance quickly and at scale SC clearance, or eligibility to obtain it Desirable ...

Code (Terraform knowledge beneficial). CI/CD pipeline experience (GitHub Actions, SonarQube for test coverage). Performance and security testing knowledge - familiarity with OWASP and monitoring tools. ...

frameworks including Selenium, Cypress, Postman, or REST Assured. Familiarity with performance testing tools such as k6, JMeter, Gatling, or NeoLoad. Understanding of DevSecOps principles, OWASP, SAST/DAST, SonarQube, and Snyk. Active SC Clearance is essential. What's on Offer: Hybrid working from Telford. Opportunity to deliver critical government ...