26 to 50 of 107 OWASP Jobs in the UK excluding London

MySQL Amazon RDS Amazon Aurora MariaDB CI/CD and build pipeline automation Tooling including: Helm Terragrunt Git ArgoCD Government cloud security standards: NIST OWASP CIS NCSC BASH scripting Python development RESTful microservices IT Service Management (ITSM) Leadership & Product Management Proven ability to lead teams in the design, implementation, administration ...

management within a software development or SaaS environment. Practical understanding of Security by Design (SbD) concepts, threat modelling principles, and application security baselines (e.g., OWASP, ISO 27001, NIST). Familiarity with modern software development lifecycles (SDLC), cloud hosting platforms (AWS, Azure, or GCP), and production service operations. Excellent stakeholder engagement ...

achieving alignment across multiple product portfolios and stakeholder group**Desirable Skills** * Working knowledge of application and API security concepts, including common vulnerability classes (e.g., OWASP Top 10) and attack techniques (e.g., MITRE ATT&CK)* Experience implementing or integrating security mechanisms such as authentication, authorization, and identity based access controls within ...

/CD, automated testing, code quality controls, observability, incident diagnosis, reliability engineering and DevSecOps practices. Knowledge of application security, identity and access management, OWASP guidance, threat modelling, privacy by design and relevant compliance requirements. Experience producing high‐quality architecture artefacts, including context and container views, integration diagrams, data‐flow diagrams ...

achieving alignment across multiple product portfolios and stakeholder group. Desirable Skills Working knowledge of application and API security concepts, including common vulnerability classes (e.g., OWASP Top 10) and attack techniques (e.g., MITRE ATT&CK). Experience implementing or integrating security mechanisms such as authentication, authorization, and identity based access controls ...

threat landscape They need a working knowledge of AI-specific attack techniques and should be fluent in the reference frameworks, mainly the OWASP Top 10 for LLM Applications and MITRE ATLAS. Key threats include: Direct and indirect prompt injection Data and model poisoning Sensitive data leakage through prompts and outputs ...

design leadership. Deep understanding of AWS security, hybrid cloud design, and modern DevSecOps principles. Strong knowledge of frameworks such as NIST, ISO 27001, OWASP, and CIS. Experience designing and implementing secure, compliant PCI‐DSS solutions. Solid grounding in tools and technologies like SIEM, IDS/IPS, DLP, endpoint protection ...

Must have the ability to take ownership for high complexity Security Assessments. Ability to operate Spacelabs Medical Devices and Solutions. Secure Coding and Development (OWASP SAMM), MITRE/SANS Top 25) Secure Software Development Life Cycle Security Frameworks (ISO 2700x, NIST Special Publications) Static Code Analysis Cloud Development and Cloud ...

/CD)oPair programmingoCode reviewsoVersion control systems such as Git \n \n \n Knowledge of application security principles and common vulnerabilities, including the OWASP Top 10. \n \n \n Experience working within agile, multidisciplinary teams. \n \n \n A proactive approach to learning new technologies and sharing knowledge with colleagues. ...

/CD)oPair programmingoCode reviewsoVersion control systems such as Git \n \n \n Knowledge of application security principles and common vulnerabilities, including the OWASP Top 10. \n \n \n Experience working within agile, multidisciplinary teams. \n \n \n A proactive approach to learning new technologies and sharing knowledge with colleagues. ...

NoSQL databases and ORM's. Good development experience with any contemporary web application framework. Strong experience delivering solutions within an Agile environment. Knowledge of OWASP and web security best practices. Solid experience with source code management, e.g., git. Using unit test frameworks (e.g., moq) and knowledge of TDD. Experience with ...

Stakeholder management A quality-focused, shift-left mindset Desirable Skills Experience with any of the following would be beneficial: Playwright Gatling for performance testing OWASP ZAP for security testing Docker Kubernetes AWS Accessibility testing, including WCAG, WAVE ...

MySQL compatible DBs: MySQL, RDS, Aurora, MariaDB Build Pipeline automation, CI/CD Build Tooling: Helm, Terragrunt, Git, ArgoCD Government Cloud Security standards (NIST, OWASP, CIS, NCSC etc...) BASH, Python RESTful microservices IT Service Management #J-18808-Ljbffr ...

/CD lifecycle. You will also do some pre-release manual PenTesting and threat modelling work. You’ll need strong application security experience, including OWASP Top 10, Veracode or similar scanning tools, DevSecOps/CI/CD and cloud security across Azure and/or AWS. You will also need ...

/CD lifecycle. You will also do some pre-release manual PenTesting and threat modelling work. You’ll need strong application security experience, including OWASP Top 10, Veracode or similar scanning tools, DevSecOps/CI/CD and cloud security across Azure and/or AWS. You will also need ...

review code and communicate security issues clearly to developers, primarily within a C# ecosystem, with exposure to Java or Python Strong knowledge of the OWASP Top 10 and practical mitigation patterns Experience implementing or improving SAST/DAST processes: tool tuning, triage workflows, and reducing signal to noise Working understanding ...

teams Essential requirements: Significant experience in threat modelling - experience using IriusRisk or comparable threat modelling tools Experience in application security, with detailed knowledge of OWASP standards and web application security Experience of DevSecOps practices, including integrating security controls into CI/CD pipelines Knowledge of the secure SDLC within agile ...

Experience working with security monitoring, vulnerability management and incident response processes. Scripting or automation experience using Python, JavaScript, C# or similar . Familiarity with OWASP, ISO27001 and NCSC CAF frameworks. Exposure to Palo Alto Cortex XDR/Cloud Security would be advantageous. Experience of GCP environments is desirable. What ...

Experience working with security monitoring, vulnerability management and incident response processes. Scripting or automation experience using Python, JavaScript, C# or similar . Familiarity with OWASP, ISO27001 and NCSC CAF frameworks. Exposure to Palo Alto Cortex XDR/Cloud Security would be advantageous. Experience of GCP environments is desirable. What ...

Reporting* SOC – Experienced in Security Ops, Incident Response, Threat Hunting, Malware/Forensic Analysis* WebApps – Experienced in WebApp DevSecOps best practices, WebApp scanning for OWASP top 10.* Good understanding of GRC strategies and tools, Threat Intelligence, SIEMs, XDR, ICS/OT security* Relevant industry certifications: CISSP, CEH, CCNP, Public Cloud ...

code with Terraform or Bicep, and PowerShell or Python to automate controls and response. Working knowledge of AKS and container security, and of the OWASP Top 10. Clear written communication: runbooks, incident reports and remediation plans that engineers and managers can act on. Desirable: Monitoring a multi‐tenant SaaS platform ...

Experience working in agile, multidisciplinary teams. Performance tools such as JMeter, k6 or Gatling. Accessibility testing to WCAG 2.2. Security testing tools, such as OWASP ZAP. Experience delivering services to the GDS Service Standard. Experience mentoring other testers. Why Join Scrumconnect Ltd? At Scrumconnect, we are more than just ...

Experience working in agile, multidisciplinary teams. Performance tools such as JMeter, k6 or Gatling. Accessibility testing to WCAG 2.2. Security testing tools, such as OWASP ZAP. Experience delivering services to the GDS Service Standard. Experience mentoring other testers. Why Join Scrumconnect Ltd? At Scrumconnect, we are more than just ...

Understanding of CI/CD pipelines and deployment strategies. Familiarity with feature toggling and A/B testing. Awareness of security best practices (e.g., OWASP Top 10). Interest in mentoring junior developers or apprentices. What do you get in return? 25 days annual leave rising to 30 5% pension ...

focus on secure code reviews, SAST/DAST, vulnerability assessments and embedding security throughout the CI/CD lifecycle. The role requires experience with OWASP Top 10, Veracode, DevSecOps, and cloud security across Azure/AWS, plus Kali Linux for manual testing. Hybrid work in London, Manchester or Glasgow with ...