76 to 100 of 107 OWASP Jobs in the UK excluding London

problems through to resolution Desirable RESTful API and systems integration experience Azure DevOps or Jenkins for CI/CD Awareness of secure development (OWASP Top 10) ITIL 4 Foundation or service desk/ITSM experience What’s on offer Annual cost of living pay review Pension contributions ...

Experience in a cyber-security role Working knowledge of technical and cyber security standards Working knowledge of industry best practices (such as NIST Framework, OWASP top ten, SANS and NCSC Guidance) Technical knowledge of information systems, infrastructure, and networks Security monitoring and testing technologies such as vulnerability scanning, penetration testing ...

skills, knowledge and experience will you need? Demonstrative experience of conducting structured penetration tests following 2 out of 3 of the following established frameworks (OWASP, NIST Cybersecurity Framework, PTES). Experience in planning, executing and documenting security assessments with minimal supervision. Understanding of NIST SP 800-115 for technical security ...

skills, knowledge and experience will you need? Demonstrative experience of conducting structured penetration tests following 2 out of 3 of the following established frameworks (OWASP, NIST Cybersecurity Framework, PTES). Experience in planning, executing and documenting security assessments with minimal supervision. Understanding of NIST SP 800-115 for technical security ...

skills, knowledge and experience will you need? Demonstrative experience of conducting structured penetration tests following 2 out of 3 of the following established frameworks (OWASP, NIST Cybersecurity Framework, PTES). Experience in planning, executing and documenting security assessments with minimal supervision. Understanding of NIST SP 800-115 for technical security ...

frameworks for Web, Mobile, and Microservices APIs. Testing Strategy & CI/CD: Drive TDD/BDD practices, execute non-functional testing (Performance, Security/OWASP), and integrate automated suites into CI/CD pipelines. Engineering Standards: Review backlogs to build risk-based test strategies, mentor engineers, and partner with developers ...

Benchmarks, FIPS 140, ISO 27001 or Cyber Essentials Plus, ideally in defense, aerospace or another regulated sector. Security Tooling: Experience with tools such as OWASP ZAP, OWASP Dependency-Check, Trivy, Semgrep, SonarQube, Nessus or OpenSCAP, and with SBOM formats (CycloneDX, SPDX). Infrastructure: Experience with Terraform or Ansible, virtualization platforms ...

delivering client‐facing engagements. Network testing: external and internal, Active Directory attack paths, privilege escalation, lateral movement, post‐exploitation. Web and API testing: the OWASP Top 10 and, more importantly, what it misses, meaning business logic flaws, authentication and session weaknesses, and multi‐step chains. Red teaming: objective‐based operations ...

Experience with vulnerability scanning, secure configuration assessments and remediation tracking. An understanding of common attack techniques, security monitoring and incident response. Knowledge of the OWASP Top 10 and recognised cyber security principles. An understanding of the NIST Cybersecurity Framework and NIS Regulations. Experience working towards Cyber Essentials. The ability ...

Experience with vulnerability scanning, secure configuration assessments and remediation tracking. An understanding of common attack techniques, security monitoring and incident response. Knowledge of the OWASP Top 10 and recognised cyber security principles. An understanding of the NIST Cybersecurity Framework and NIS Regulations. Experience working towards Cyber Essentials. The ability ...

Data Protection Act ISO 27001:2022, ISO 27005 and ISO 31000 PCI DSS NIST 800-30/53 CIS Top 18 and OWASP Top 10 Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome ...

testing Relevant security testing certifications such as CREST (CRT, CCT), OSCP, OSCE, GPEN or GXPN Demonstrable knowledge of common security vulnerabilities, including the OWASP Top 10 Strong analytical and problem-solving skills Excellent communication skills with the ability to engage confidently with both technical and non-technical stakeholders A collaborative ...

queries; Microsoft SQL Server preferred Git version control, including branching and reviewing changes Building and consuming REST APIs Secure coding practice, such as the OWASP Top 10 Understanding of data protection (UK GDPR) when handling personal data Clear written English, able to produce accurate technical documents and user guides Able ...

Selenium - Cypress - Performance Testing - JMeter DevOps Continuous Integration/Continuous Deployment (a.k.a., CICD) - Jenkins, GoCD, CircleCI, TeamCity - Security - For example: WhiteSource, Snyk, SonarQube, OAuth, OWASP Responsibilities Senior Contract Angular Developer, Leeds or UK Remote (occasional office time required), Angular Front End Developer to join a hugely impressive not for profit ...

practical terms. Experience with AI governance, responsible AI, model risk management or AI assurance. Familiarity with frameworks and guidance such as NIST AI RMF, OWASP Top 10 for LLM Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations ...

engagement, and plan testing that meets their assurance needs. * Apply manual and tool-assisted testing techniques aligned with recognised methodologies and frameworks, including the OWASP Web Security Testing Guide, PTES, and MITRE ATT&CK. * Deliver Cyber Essentials Plus assessments, including scoping, conducting the required technical tests, verifying remediation and supporting ...

AWS. You think in quality and resilience: You understand performance, reliability, scalability and secure design, and you work with established frameworks and OWASP practices. You get leverage from tools: You know how to use AI coding agents effectively without outsourcing your judgement. You keep things simple: You weigh existing tools ...

AWS.You think in quality and resilience: You understand performance, reliability, scalability and secure design, and you work with established frameworks and OWASP practices.You get leverage from tools: You know how to use AI coding agents effectively without outsourcing your judgement.You keep things simple: You weigh existing tools, libraries and patterns ...

dynamic working environment. You have an Engineering degree or equivalent experience in Computer Science, Electronics, Telecoms or a related field. Awareness of NIST, OWASP and UK TSR requirements and how they impact delivery and testing of secure networks Willing to support an on-call rota as required. Abilty to work ...

ramp on a new AI tool or technique in days, not months. You will have an advantage if you also have: Security best practice (OWASP top ten) Windows services Experience using AI tooling specifically in the architect role - for design review, ADR drafting, threat modelling, contract design, or similar. Familiarity ...

mobile security standards and practices Technical Skills Mobile Development Kotlin Android Swift iOS SwiftUI UIKit Jetpack Android SDK Swift Package Manager Mobile Security OWASP Mobile Top 10 OWASP MASVS Mobile Application Security Secure Coding Threat Modelling Authentication & Authorisation Encryption Secure Storage Certificate Pinning Biometrics Android Keystore iOS Keychain Device Integrity ...

Skills & Experience Strong background in DevSecOps, Application Security or Integration Security. Expertise in OAuth2, OIDC, JWT and API Security . Strong knowledge of OWASP Top 10 and OWASP API Security Top 10 . Experience securing AWS environments, including IAM, networking and hybrid integrations. Ability to review code across Java, Kotlin ...

similar hands-on cyber security role Strong experience with SAST, DAST, and SCA tools such as Checkmarx, Snyk, Semgrep, Burp Suite, or OWASP ZAP Experience integrating automated security testing and controls into CI/CD pipelines Demonstrable ability to investigate, validate, and remediate application security vulnerabilities Experience with attack surface … vulnerabilities Awareness of emerging AI security risks, including prompt injection, data poisoning, and vulnerabilities affecting large language models Familiarity with security frameworks such as OWASP Top 10 and MITRE ATLAS would be advantageous Excellent communication and stakeholder management skills, with the ability to work collaboratively across technical teams Apply ...

Job Title- Security Consultant Location Manchester, Leeds, Bristol, Halifax, Edinburgh, UK (Hybrid- 2 days' work from office) Employment Type Contract Inside IR35 Job Description- What you'll do: Applying Agile methodologies to support engineers and ...

Title – Security Consultant Location: Manchester, Leeds, Bristol, Halifax, Edinburgh, UK (Hybrid- 2 days' work from office), prefer Leeds, UK Type – Contract Inside IR35 Role Title – Security Consultant About this opportunity Are you someone who wants ...