101 to 125 of 253 OWASP Jobs in the UK

teams Essential requirements: Significant experience in threat modelling - experience using IriusRisk or comparable threat modelling tools Experience in application security, with detailed knowledge of OWASP standards and web application security Experience of DevSecOps practices, including integrating security controls into CI/CD pipelines Knowledge of the secure SDLC within agile ...

tools. • Experience with Continuous Security, Continuous Integration and Continuous Delivery techniques. • Experience of network security (e.g. OSI, TCP/IP), web application security (e.g. OWASP) and cryptographic controls (e.g. PKI, TLS). • We are passionate about developing people – a demonstrated ability in managing, mentoring and coaching members of your team ...

Experience working with security monitoring, vulnerability management and incident response processes. Scripting or automation experience using Python, JavaScript, C# or similar . Familiarity with OWASP, ISO27001 and NCSC CAF frameworks. Exposure to Palo Alto Cortex XDR/Cloud Security would be advantageous. Experience of GCP environments is desirable. What ...

Experience working with security monitoring, vulnerability management and incident response processes. Scripting or automation experience using Python, JavaScript, C# or similar . Familiarity with OWASP, ISO27001 and NCSC CAF frameworks. Exposure to Palo Alto Cortex XDR/Cloud Security would be advantageous. Experience of GCP environments is desirable. What ...

cloud architectures. Proven experience with risk assessment methodologies and maintaining enterprise risk registers. Working knowledge of risk assessment methodologies (e.g. ISO 31000, FAIR, OWASP risk rating). Strong understanding of Gov Assure, CAF, ISO 27001, Cyber Essentials, and NIST frameworks. Experience conducting or supporting security audits and implementing remediation plans. ...

Reporting* SOC – Experienced in Security Ops, Incident Response, Threat Hunting, Malware/Forensic Analysis* WebApps – Experienced in WebApp DevSecOps best practices, WebApp scanning for OWASP top 10.* Good understanding of GRC strategies and tools, Threat Intelligence, SIEMs, XDR, ICS/OT security* Relevant industry certifications: CISSP, CEH, CCNP, Public Cloud ...

modeling and coaching others to use engineering best practices such as design patterns, customer‐centric design, test‐driven development, code refactoring, code review, and OWASP Top 10 security awareness Experience leading in Agile teams, including coaching and modeling Agile mindsets as part of sprint ceremonies, work definition and building developer ...

defining integration builds, coordinating build activity across systems, and undertaking or supporting integration testing. Information security: Understanding of common web security risks, including the OWASP Top 10, and appropriate mitigations. Development process optimisation: Ability to identify opportunities to improve development processes and contribute to implementing practical solutions. Candidates should demonstrate ...

laws (such as Hick's, Fitts's, Miller's and Jakob's) and when one outweighs another. Strong understanding of OWASP: the Top 10, the API Security Top 10 and ASVS. Strong understanding of API principles: REST, contracts and versioning, pagination, idempotency, error handling and least-privilege (OAuth, SAML ...

laws (such as Hick's, Fitts's, Miller's and Jakob's) and when one outweighs another. Strong understanding of OWASP: the Top 10, the API Security Top 10 and ASVS. Strong understanding of API principles: REST, contracts and versioning, pagination, idempotency, error handling and least-privilege (OAuth, SAML ...

code with Terraform or Bicep, and PowerShell or Python to automate controls and response. Working knowledge of AKS and container security, and of the OWASP Top 10. Clear written communication: runbooks, incident reports and remediation plans that engineers and managers can act on. Desirable: Monitoring a multi‐tenant SaaS platform ...

with the Model Context Protocol (MCP) for tool and context integration in agentic systems Familiarity with secure‐by‐design development principles (ISO 27001, NIST, OWASP) Experience in defence, national security, or similarly regulated environments Contributions to open‐source AI/ML projects An active SC or DV clearance ...

with the Model Context Protocol (MCP) for tool and context integration in agentic systems Familiarity with secure‐by‐design development principles (ISO 27001, NIST, OWASP) Experience in defence, national security, or similarly regulated environments Contributions to open‐source AI/ML projects An active SC or DV clearance ...

with the Model Context Protocol (MCP) for tool and context integration in agentic systems • Familiarity with secure-by-design development principles (ISO 27001, NIST, OWASP) • Experience in defence, national security, or similarly regulated environments • Contributions to open-source AI/ML projects An active SC or DV clearance ...

Experience working in agile, multidisciplinary teams. Performance tools such as JMeter, k6 or Gatling. Accessibility testing to WCAG 2.2. Security testing tools, such as OWASP ZAP. Experience delivering services to the GDS Service Standard. Experience mentoring other testers. Why Join Scrumconnect Ltd? At Scrumconnect, we are more than just ...

Experience working in agile, multidisciplinary teams. Performance tools such as JMeter, k6 or Gatling. Accessibility testing to WCAG 2.2. Security testing tools, such as OWASP ZAP. Experience delivering services to the GDS Service Standard. Experience mentoring other testers. Why Join Scrumconnect Ltd? At Scrumconnect, we are more than just ...

DevOps: AWS‐native architectures, CI/CD automation using GitHub Actions,infrastructureand deployment optimisation. Security Engineering: Security‐by‐design mindset with applied knowledge of OWASP Top 10, WCAG, OAuth2, MFA, and secure identity patterns. Quality & Assurance: Proficient in unit testing frameworks; governance and execution of SAST, DAST, SCA, and penetration ...

quality. Beneficial/Nice to have’s Experience with Azure DevOps, ARM/Bicep, or other infrastructure‐as‐code tools. Familiarity with OWASP Top Ten, security scanning tools, and compliance‐conscious development. Experience of Document databases. Exposure to modern data engineering practices or microservice‐based architectures. Your Career with MetaCompliance ...

Understanding of CI/CD pipelines and deployment strategies. Familiarity with feature toggling and A/B testing. Awareness of security best practices (e.g., OWASP Top 10). Interest in mentoring junior developers or apprentices. What do you get in return? 25 days annual leave rising to 30 5% pension ...

focus on secure code reviews, SAST/DAST, vulnerability assessments and embedding security throughout the CI/CD lifecycle. The role requires experience with OWASP Top 10, Veracode, DevSecOps, and cloud security across Azure/AWS, plus Kali Linux for manual testing. Hybrid work in London, Manchester or Glasgow with ...

focus on secure code reviews, SAST/DAST, vulnerability assessments and embedding security throughout the CI/CD lifecycle. The role requires experience with OWASP Top 10, Veracode, DevSecOps, and cloud security across Azure/AWS, plus Kali Linux for manual testing. Hybrid work in London, Manchester or Glasgow with ...

focus on secure code reviews, SAST/DAST, vulnerability assessments and embedding security throughout the CI/CD lifecycle. The role requires experience with OWASP Top 10, Veracode, DevSecOps, and cloud security across Azure/AWS, plus Kali Linux for manual testing. Hybrid work in London, Manchester or Glasgow with ...

Microsoft Azure Entra ID Vercel Firewall configuration and security controls SIEM technologies; Terraform or other Infrastructure-as-Code DevSecOps CI/CD security OWASP PCI DSS AWS security certifications Working Approach & Key Outcomes 3 months initially AWS Engineer, Security Engineer, AWS Security Engineer, Web, Online, Digital, E-commerce, e.commerce ...

Microsoft Azure Entra ID Vercel Firewall configuration and security controls SIEM technologies; Terraform or other Infrastructure-as-Code DevSecOps CI/CD security OWASP PCI DSS AWS security certifications Working Approach & Key Outcomes 3 months initially AWS Engineer, Security Engineer, AWS Security Engineer, Web, Online, Digital, E-commerce, e.commerce ...

across SaaS web applications and APIs., including manual exploitation beyond automated scanners Are proficient with offensive tooling and techniques such as. Burp Suite, and OWASP frameworks Can write security tests and develop exploits and proof‐of‐concepts that find real vulnerabilities in a #J-18808-Ljbffr ...