26 to 40 of 40 OWASP Jobs in the UK excluding London

areas such as: Cyber security audits/assessments Vulnerability management Product or application security Security testing strategy Secure SDLC Risk, controls and remediation planning OWASP principles Reviewing security tooling and processes Translating technical findings into clear business language You don’t need to be a pure pen tester for this ...

direction, embedding automation, and confidently challenging stakeholders and delivery teams. Tech: AWS (Kubernetes), Java/Spring Boot, React, GitLab CI/CD, Playwright, OWASP, Gatling Role: Lead QA strategy and delivery across multiple teams Drive automation and modern QA practices Embed repeatable frameworks and standards Own test planning, risk ...

achieved remarkable success with over 1.2 million downloads, providing essential web application security features to developers across the .NET ecosystem. The library implements OWASP Secure Headers Project recommendations, enabling developers to enhance their application security with minimal effort whilst maintaining clean, maintainable code. Beyond digital community engagement, Jamie demonstrates ...

Information Security, Vulnerability Management or Security Operations Strong understanding of vulnerability assessment, patch management and remediation processes Knowledge of secure web application principles (OWASP Top 10, SANS 25) Experience with application and infrastructure security, including: Firewalls, Web & Email Security, AD/Group Policy, MFA, DMARC, DKIM, SPF Good understanding ...

ASP.NET/ASP.NET Core, MVC JavaScript, HTML, CSS, JSON, Bootstrap Experience with debugging, testing, and deploying web applications Understanding of web security principles (e.g., OWASP) About you: Ideally, 3+ years’ experience in web development Strong problem-solving and analytical skills Able to work independently and as part of a team ...

C#, MVC, ASP.NET Core, JavaScript, HTML & CSS Experience debugging, profiling and deploying web applications Solid understanding of MVC patterns, ASP.NET controllers & web security (OWASP) Comfortable working with IIS Exposure to frameworks like React, Vue, Angular or Knockout is a plus Degree in Computer Science or related field preferred ...

delivery teams in Agile and DevOps environments to embed security by design. Support compliance with security and regulatory frameworks including ISO 27001, PCI DSS, OWASP and internal standards. Review security posture of vendors and outsourced services, providing due diligence and third-party risk assurance. Present security findings, risk opinions … security, secure application delivery, third-party risk management and access management practices. Experience applying recognised frameworks and standards such as ISO 27001, PCI DSS, OWASP, NIST and enterprise security control frameworks. Ability to translate complex technical risks into business language and provide clear, evidence-based recommendations. Exposure to contemporary architectures. ...

experience in software and/or firmware testing Engineering degree in Software, Computer Science, Cybersecurity or demonstrated knowledge. Proficiency with tools: Burp Suite, OWASP ZAP, Nessus, Nmap Fortify, Checkmarx, Metasploit, Wireshark. Knowledge of scripting languages such as Python, JavaScript, Bash, or PowerShell. Understanding of encryption algorithms, key management, & secure protocols … Strong understanding of common vulnerabilities (e.g., OWASP Top 10, CWE/SANS Top 25) Familiarity with Linux, Windows, and network protocols (TCP/IP, DNS, HTTP/S) Understanding of industrial protocols (e.g., Serial, Modbus, HART) Knowledge of industry standards: IEC 62443, ISO 27001, NIST, OWASP Nice-to-have: Experience ...

delivery teams in Agile and DevOps environments to embed security by design. Support compliance with security and regulatory frameworks including ISO 27001, PCI DSS, OWASP and internal standards. Review security posture of vendors and outsourced services, providing due diligence and third-party risk assurance. Present security findings, risk opinions … security, secure application delivery, third-party risk management and access management practices. Experience applying recognised frameworks and standards such as ISO 27001, PCI DSS, OWASP, NIST and enterprise security control frameworks. Ability to translate complex technical risks into business language and provide clear, evidence-based recommendations. Exposure to contemporary architectures. ...

years of experience in software and/or firmware testingEngineering degree in Software, Computer Science, Cybersecurity or demonstrated knowledge.Proficiency with tools: Burp Suite, OWASP ZAP, Nessus, Nmap Fortify, Checkmarx, Metasploit, Wireshark.Knowledge of scripting languages such as Python, JavaScript, Bash, or PowerShell.Understanding of encryption algorithms, key management, & secure protocols … Strong understanding of common vulnerabilities (e.g., OWASP Top 10, CWE/SANS Top 25)Familiarity with Linux, Windows, and network protocols (TCP/IP, DNS, of industrial protocols (e.g., Serial, Modbus, HART)Knowledge of industry standards: IEC 62443, ISO 27001, NIST, OWASPNice-to-have:Experience implementing DevSecOps best practices; Azure ...

delivery teams in Agile and DevOps environments to embed security by design. Support compliance with security and regulatory frameworks including ISO 27001, PCI DSS, OWASP and internal standards. Review security posture of vendors and outsourced services, providing due diligence and third-party risk assurance. Present security findings, risk opinions … security, secure application delivery, third-party risk management and access management practices. Experience applying recognised frameworks and standards such as ISO 27001, PCI DSS, OWASP, NIST and enterprise security control frameworks. Ability to translate complex technical risks into business language and provide clear, evidence-based recommendations. Exposure to contemporary architectures. ...

delivery teams in Agile and DevOps environments to embed security by design. Support compliance with security and regulatory frameworks including ISO 27001, PCI DSS, OWASP and internal standards. Review security posture of vendors and outsourced services, providing due diligence and third-party risk assurance. Present security findings, risk opinions … security, secure application delivery, third-party risk management and access management practices. Experience applying recognised frameworks and standards such as ISO 27001, PCI DSS, OWASP, NIST and enterprise security control frameworks. Ability to translate complex technical risks into business language and provide clear, evidence-based recommendations. Exposure to contemporary architectures. ...

delivery teams in Agile and DevOps environments to embed security by design. Support compliance with security and regulatory frameworks including ISO 27001, PCI DSS, OWASP and internal standards. Review security posture of vendors and outsourced services, providing due diligence and third-party risk assurance. Present security findings, risk opinions … security, secure application delivery, third-party risk management and access management practices. Experience applying recognised frameworks and standards such as ISO 27001, PCI DSS, OWASP, NIST and enterprise security control frameworks. Ability to translate complex technical risks into business language and provide clear, evidence-based recommendations. Exposure to contemporary architectures. ...

governance, assurance, and risk evaluation Design cloud-based solutions using Azure and/or AWS Produce architectural documentation, models, and prototypes Ensure compliance with OWASP, NCSC, and GDPR standards Contribute to architecture governance, standards, and best practices Support stakeholder engagement, bids, and technical assurance activities Mentor junior engineers and architects … Defence, Government, or secure environments Active SC Clearance (essential) Strong experience delivering complex, enterprise-scale systems Knowledge of secure development lifecycles (SSDLC) Experience with OWASP, NCSC Cloud Principles, GDPR Strong cloud experience (Azure and/or AWS) Background in microservices, APIs, and integration patterns Experience with DevOps and CI/ ...

experience as a Pen Tester delivering assessments across web applications, APIs, infrastructure, and cloud environments. Strong understanding of common vulnerability classes, including the OWASP Top 10, authentication and authorisation flaws, input validation issues, and business logic vulnerabilities. Knowledge of penetration testing methodologies such as OWASP, PTES, and NIST, with practical ...