26 to 50 of 59 OWASP Jobs in the UK excluding London

strong attention to detail A solid understanding of how web applications work including security, session management, and best development practices Full understanding of the OWASP framework. Enforcement of the framework throughout all coding Create, maintain and coordinate backup mechanisms for the purposes of business continuity while maintaining a high level ...

tools.• Experience with Continuous Security, Continuous Integration and Continuous Delivery techniques• Experience of network security (e.g. OSI, TCP/IP), web application security (e.g. OWASP) and cryptographic controls (e.g. PKI, TLS).• We are passionate about developing people – a demonstrated ability in managing, mentoring and coaching members of your team ...

tools.• Experience with Continuous Security, Continuous Integration and Continuous Delivery techniques• Experience of network security (e.g. OSI, TCP/IP), web application security (e.g. OWASP) and cryptographic controls (e.g. PKI, TLS).• We are passionate about developing people – a demonstrated ability in managing, mentoring and coaching members of your team ...

across endpoint, network, cryptography, information management, and IAM in enterprise environments Awareness of industry security standards including ISO 27001, NIST, PCI DSS, COBIT, and OWASP, with experience in public and/or private cloud environments Desirable: security certifications such as CISSP, CISM, CCSP, CEH, or OSCP Contract Details Initial ...

design leadership. Deep understanding of AWS security, hybrid cloud design, and modern DevSecOps principles. Strong knowledge of frameworks such as NIST, ISO 27001, OWASP, and CIS. Experience designing and implementing secure, compliant PCI‐DSS solutions. Solid grounding in tools and technologies like SIEM, IDS/IPS, DLP, endpoint protection ...

strong attention to detail A solid understanding of how web applications work including security, session management, and best development practices Full understanding of the OWASP framework. Enforcement of the framework throughout all coding Create, maintain and coordinate backup mechanisms for the purposes of business continuity while maintaining a high level ...

delivery.Some of the responsibilities: Define and evolve backend architecture to ensure scalability, maintainability, and performance.Set coding standards and champion secure development practices (e.g. OWASP).Influence technology choices, frameworks, and tools to support engineering excellence.Oversee improvements to CI/CD pipelines, build processes, and operational workflows.Clearly and confidently articulate technical risks ...

processes such as penetration testing, vulnerability scanning and red/blue team activities would be advantageous. An understanding of security testing methodologies such as OWASP or NIST would be beneficial. Previous experience within a large enterprise or regulated environment would be advantageous. Exposure to security tooling, including vulnerability management platforms ...

communication protocols (e.g.A2A) Familiarity with MCPs for tool and context integration in agentic systems Familiarity with secure‐by‐design development principles (ISO 27001, NIST, OWASP) Experience in pharma/bio tech or highly regulated environments is a plus Contributions to open-source AI/ML projects Soft Skills Delivery-focused ...

rules.Conduct post-incident analysis and lessons learned to refine response strategies.Monitor emerging threats to proactively integrate new protections and ensure compliance with standards (OWASP, NIST).Basic RequirementsBasic Requirements & QualificationsExperience & Education: 7+ years in Security/Application Engineering; Bachelor’s degree in Computer Science, Information Security, or a related field.Leadership: Proven … DAST) into CI/CD pipelines.Software Engineering: Hands-on development experience, specifically in Go and C#.Standards & Frameworks: Knowledge of NIST, ISO 27001, CIS, and OWASP (ASVS/Testing Guides).Desirable QualificationsAdvanced Technical Skills: Deep vulnerability research, exploit R&D, manual pentesting (cloud/web/embedded/mobile), SIEM/ ...

following: TDD, automated acceptance testing or BDD or Cucumber, performance and scalability testing with tools such as JMeter, penetration testing knowledge or OWASP, Kubernetes or container orchestration, designing and consuming HTTP APIs, SQL databases such as Postgres, MySQL or MariaDB Experience with 3 or more AWS services including ...

principles and techniques for both manual and automated application security assessments of desktop and web applications.Good knowledge of common web security vulnerabilities (e.g., OWASP Top 10), attack techniques and remediation tactics/strategies.Good understanding of common low-level vulnerabilities (e.g. use-after-free and buffer overflows)and common mitigations.Good understanding ...

principles and techniques for both manual and automated application security assessments of desktop and web applications.Good knowledge of common web security vulnerabilities (e.g., OWASP Top 10), attack techniques and remediation tactics/strategies.Good understanding of common low-level vulnerabilities (e.g. use-after-free and buffer overflows)and common mitigations.Good understanding ...

attack types (e.g. SQL injection, phishing, malware) Experience with log analysis and incident investigation Familiarity with Windows and/or Linux environments Understanding of OWASP Top 10 security risks Ability to work in a fast-paced, incident-driven environment Desirable Security certifications such as CompTIA Security+, GIAC GSEC, or ISC2 ...

attack types (e.g. SQL injection, phishing, malware) Experience with log analysis and incident investigation Familiarity with Windows and/or Linux environments Understanding of OWASP Top 10 security risks Ability to work in a fast-paced, incident-driven environment Desirable Security certifications such as CompTIA Security+, GIAC GSEC, or ISC2 ...

grounding in identity and access management: OAuth2, OIDC, SAML, SSO, JWT, MFA Desirable: AWS security services experience (IAM, Cognito, KMS, Secrets Manager) Familiarity with OWASP Top 10 and threat modelling Prior technical leadership or mentorship experience Benefits & Package £80,000-£90,000 salary Hybrid working model (Extremely flexible) Global business ...

manual testing where it delivers the greatest value Provide clear, risk-based recommendations to support release decisions Contribute to security focused testing, including OWASP principles and lightweight threat modelling Help ensure products meet accessibility standards by testing against WCAG guidelines Continuously identify opportunities to improve testing processes, tooling, and overall ...

dynamic working environment. You have an Engineering degree or equivalent experience in Computer Science, Electronics, Telecoms or a related field. Awareness of NIST, OWASP, GCF and UK TSA requirements and how they impact delivery and testing of secure networks Willing to support an on‐call rota as required. Ability ...

guardrails. Nice to have Working familiarity with AI security standards and references such as the NIST AI RMF, ISO 42001, MITRE ATLAS, or the OWASP LLM Top 10. Hands‐on experience with policy‐as‐code and turning standards into enforced controls. Contributions to security standards, frameworks, or industry practice. ...

management. Excellent attention to detail. Adheres to and promotes high standards. Understanding of vulnerability and threat assessment frameworks, such as: CVSS, CVE, CWE,OWASP, MITRE. Operational Technology (OT) management experience in vulnerability scanning. Competent at keeping up to date on CTI (Cyber Threat Intelligence) Desirable Experience with security or compliance ...

developer tooling used inside our own delivery pipelines. Threat modelling and risk Lead threat modelling for applications, APIs and AI features using STRIDE and OWASP methods, supported by appropriate HL TM tooling, driving the resulting mitigations to closure. Assess the security implications of new products, technologies and third-party integrations … sector; mobile application security; software supply chain and secure SDLC; hands-on experience with Amazon Bedrock or comparable managed model platforms; familiarity with the OWASP Top 10 for LLM and Agentic Applications; working knowledge of OWASP ASVS, Top 10 and API Security Top 10. Azure exposure is useful, although ...

manually confirming exploitability beyond what scanners or AI analysis reports. Use Interactive Application Security Testing (IAST) tools for runtime analysis, such as Burp Suite, OWASP ZAP, Frida, applying hands‐on technique to validate and extend automated results. Conduct Static Application Security Testing (SAST) and Software Composition Analysis (SCA) on source … secure coding training and promote a positive security posture. Requirements Have hands‐on experience with DAST, IAST and penetration testing tools (e.g., Burp Suite, OWASP ZAP, Frida), and can manually identify and exploit vulnerabilities beyond what these tools surface automatically. Can demonstrate independent, hands‐on technical ability, for example through ...

C#, MVC, ASP.NET Core, JavaScript, HTML & CSS Experience debugging, profiling and deploying web applications Solid understanding of MVC patterns, ASP.NET controllers & web security (OWASP) Comfortable working with IIS Exposure to frameworks like React, Vue, Angular or Knockout is a plus Degree in Computer Science or related field preferred ...

development experience- Experience with SQL Server or similar relational databases- Experience building web applications using Angular, React, Blazor or similar frameworks- An understanding of OWASP security best practices and secure by design principles- The ability to communicate effectively with technical and non-technical stakeholders- The ability to estimate, prioritise ...

Expertise in Continuous Security, Continuous Integration and Continuous Delivery techniques• Knowledge of international security standards and regulations such as NCSC, NIST, CIS, PCI, GDPR, OWASP ASVS, HIPPA, SOC2 etc.• Knowledge of typical cyber security attack vectors (e.g. OWASP Top 10, SQL, XSS, XXE, MITM etc.) and can articulate threats … equivalent)• Experience of working with the external penetration test companies to translate report findings into actionable tasks.• Experience with security tools (e.g. Burp Suite, OWASP-ZAP, NMAP, Nessus, Kali, Metasploit etc.)• Knowledge about main cyber security areas (e.g. OSINT, network scanning, enumeration, sniffing, session hijacking, social engineering, firewalls, honeypots ...