126 to 150 of 180 OWASP Jobs in the UK

security expert, with a strong background in application securityExperience in security testing diverse applicationExperience with infrastructure securityBasic familiarity with security frameworks (OWASP, NIST, etc)Excellent problem-solving skills and the ability to work in a dynamic, fast-paced environmentStrong communication and collaboration skills to effectively remotely work with stakeholders across ...

attack types (e.g. SQL injection, phishing, malware) Experience with log analysis and incident investigation Familiarity with Windows and/or Linux environments Understanding of OWASP Top 10 security risks Ability to work in a fast-paced, incident-driven environment Desirable Security certifications such as CompTIA Security+, GIAC GSEC, or ISC2 ...

attack types (e.g. SQL injection, phishing, malware) Experience with log analysis and incident investigation Familiarity with Windows and/or Linux environments Understanding of OWASP Top 10 security risks Ability to work in a fast-paced, incident-driven environment Desirable Security certifications such as CompTIA Security+, GIAC GSEC, or ISC2 ...

application security reviews for high-risk products and services.Conduct and oversee SAST, DAST, API security, fuzz testing and architecture-level assessments.Assess applications against the OWASP Top 10 and other relevant security standards.Identify vulnerabilities, understand their root causes and translate findings into practical remediation plans.Provide secure design and coding guidance throughout … environments.Awareness of AI security, including model, data and prompt/model manipulation risks.Experience delivering developer-focused security training or workshops.Knowledge of frameworks such as OWASP SAMM, ASVS, NIST CSF or NIST SSDF.Relevant application security, cloud security or offensive security certifications.Experience working across multiple teams, countries or business entities.In return ...

defensive IT concepts and protocols Working knowledge of Windows, Linux and MacOS operating systems internals Extensive understanding of the MITRE ATT&CK framework, OWASP Top 10, and other security frameworks Ability to work independently and as part of a team Proficient communication skills, both written and verbal Willingness to travel ...

grounding in identity and access management: OAuth2, OIDC, SAML, SSO, JWT, MFA Desirable: AWS security services experience (IAM, Cognito, KMS, Secrets Manager) Familiarity with OWASP Top 10 and threat modelling Prior technical leadership or mentorship experience Benefits & Package £80,000-£90,000 salary Hybrid working model (Extremely flexible) Global business ...

London base. The ideal candidate will assess security across codebases and APIs using Java, TypeScript and Python, and will be well-versed in OWASP Top 10 and secure coding practices. You will triage, validate and remediate vulnerabilities with both technical and non-technical stakeholders, and embed security tooling into ...

manual testing where it delivers the greatest value Provide clear, risk-based recommendations to support release decisions Contribute to security focused testing, including OWASP principles and lightweight threat modelling Help ensure products meet accessibility standards by testing against WCAG guidelines Continuously identify opportunities to improve testing processes, tooling, and overall ...

dynamic working environment. You have an Engineering degree or equivalent experience in Computer Science, Electronics, Telecoms or a related field. Awareness of NIST, OWASP, GCF and UK TSA requirements and how they impact delivery and testing of secure networks Willing to support an on‐call rota as required. Ability ...

Experience with infrastructure and DevOps fundamentals: CI/CD, cloud platforms, CDN, monitoring/observability, and deployment strategies. Strong understanding of security best practices (OWASP, authentication/authorization patterns, secure data handling) — especially in a financial context. Experience hiring, mentoring, and growing engineers — building a high‐performing team, not just ...

understanding of secure, scalable application architecture, APIs and modern CI/CD development practices using Git and Jira. Knowledge of accessibility standards (WCAG), GDPR, OWASP security principles and age-appropriate design. Experience working collaboratively within multidisciplinary teams, with the confidence to communicate technical ideas clearly and effectively. Why join ...

Experience with infrastructure and DevOps fundamentals: CI/CD, cloud platforms, CDN, monitoring/observability, and deployment strategies. Strong understanding of security best practices (OWASP, authentication/authorization patterns, secure data handling) — especially in a financial context. Experience hiring, mentoring, and growing engineers — building a high‐performing team, not just ...

leadership.* Expertise in Java/Kotlin, Spring Boot, REST APIs, and MongoDB.* Experience with ReactJS, JavaScript, and TypeScript.* Strong understanding of secure coding (e.g., OWASP principles).* Strong experience with CI/CD, Git workflows, automated testing.* Experience leading AI feature development or integrating ML models into production systems.**Career ...

Strong stakeholder communication skills, able to advise Engineering, Product and Pre-Sales credibly. Extremely strong documentation skills. Experience with AI/LLM security testing (OWASP LLM Top 10, prompt injection, model/vendor risk assessment). Familiarity with the Microsoft 365 E5 security stack (Entra ID, Defender for Endpoint, Intune … deployment plan). AI & Emerging Risk Provide technical engineering support to the AI Security & Governance function for LLM/model security testing (OWASP LLM Top 10 etc.), including scripted test harnesses and repeatable validation tooling, where execution capacity is needed. Support technical validation of AI/cloud vendor control claims ...

with technical and non-technical stakeholders alike.Nice to have:Experience in high-growth tech environments, BioTech, ML-centric companies, or the pharmaceutical industry.Familiarity with OWASP Top 10 for LLMs, prompt injection prevention, and secure integration of internal AI assistants.Hands-on experience building or integrating AI-driven automation, agentic workflows ...

technical stakeholders alike. Nice to have: Experience in high-growth tech environments, BioTech, ML-centric companies, or the pharmaceutical industry. Familiarity with OWASP Top 10 for LLMs, prompt injection prevention, and secure integration of internal AI assistants. Hands-on experience building or integrating AI-driven automation, agentic workflows, or custom ...

resilient cloud environments. Implement automation across build, test and deployment workflows to improve consistency, quality and speed of delivery. Apply DevSecOps practices and OWASP security principles throughout the software delivery lifecycle. Deploy and manage containerised workloads using Kubernetes and AWS-native services including ECS and EKS. Monitor platform performance, availability … using GitLab or GitHub. Strong Terraform and Infrastructure-as-Code expertise. Demonstrable experience operating Kubernetes environments in production. Strong understanding of DevSecOps principles and OWASP security practices. Experience scripting and automating solutions using Python, Bash or PowerShell. Experience working within Agile delivery teams and collaborating across multidisciplinary technical environments. Excellent ...

ensure we are secure and demonstrably so to our customers. You’ll embed secure-by-design practices, monitor for irregular behaviour, align with OWASP Top 10 and AWS Well-Architected, and lead risk assessments and policy documentation under ISO 27001 ISMS. #J-18808-Ljbffr ...

manually auditing source code to find security issues or programming skills in one or more of: Java, .NET, Python or JavaScript frameworks.Strong understanding on OWASP TOP 10 vulnerabilities.Strong understanding of common API security risksStrong understanding on Cloud-Native application architecture, microservices, containerization technologies, secure deployment and implementation issues.Proven experience … relation to application securityExperience working with threat modeling methodologies such as MITRE ATT&CK, STRIDE, PASTA etc.Efficiency with web proxies such as Burp or OWASP ZAP or FiddlerUnderstanding of OAuth and JWT implementations.Ability to organize & communicate effectively, both written and verbal, with technical and non-technical people across functional teamsA ...

application architecture for Enterprise scale web applications including Microservices and Micro Frontends.Experience with cloud solutions & containerised web application designA good understanding of the OWASP top 10, and common patterns to protect against those vulnerabilitiesDeep knowledge of web infrastructure subjects i.e. CDNs, WAFs, DNSs, SSL and TLSDemonstrable hands-on experience designing ...

architecture for Enterprise scale web applications including Microservices and Micro Frontends.* Experience with cloud solutions & containerised web application design* A good understanding of the OWASP top 10, and common patterns to protect against those vulnerabilities* Deep knowledge of web infrastructure subjects i.e. CDNs, WAFs, DNSs, SSL and TLS* Demonstrable hands ...

architecture for Enterprise scale web applications including Microservices and Micro Frontends. Experience with cloud solutions & containerised web application design A good understanding of the OWASP top 10, and common patterns to protect against those vulnerabilities Deep knowledge of web infrastructure subjects i.e. CDNs, WAFs, DNSs, SSL and TLS Demonstrable hands ...

guardrails. Nice to have Working familiarity with AI security standards and references such as the NIST AI RMF, ISO 42001, MITRE ATLAS, or the OWASP LLM Top 10. Hands‐on experience with policy‐as‐code and turning standards into enforced controls. Contributions to security standards, frameworks, or industry practice. ...

guardrails. Nice to have Working familiarity with AI security standards and references such as the NIST AI RMF, ISO 42001, MITRE ATLAS, or the OWASP LLM Top 10. Hands‐on experience with policy‐as‐code and turning standards into enforced controls. Contributions to security standards, frameworks, or industry practice. ...

need for guardrails.Nice to haveWorking familiarity with AI security standards and references such as the NIST AI RMF, ISO 42001, MITRE ATLAS, or the OWASP LLM Top 10.Hands-on experience with policy-as-code and turning standards into enforced controls.Contributions to security standards, frameworks, or industry practice.Our Commitment to Diversity ...