126 to 150 of 253 OWASP Jobs in the UK

tools. • Experience with Continuous Security, Continuous Integration and Continuous Delivery techniques. • Experience of network security (e.g. OSI, TCP/IP), web application security (e.g. OWASP) and cryptographic controls (e.g. PKI, TLS). • We are passionate about developing people – a demonstrated ability in managing, mentoring and coaching members of your team ...

through model outputs, training data poisoning, and preventing unauthorised data egress in regulated environments. Threat Landscape Awareness: Familiarity with AI-specific risk frameworks (e.g., OWASP Top 10 for LLMs, NIST AI Risk Management Framework) and emerging threat vectors such as prompt injection, model inversion, and inference attacks. Regulated Environment Navigation ...

mitigate security risks.Understanding of the security risks of AI itself, including prompt injection, data leakage and model misuse, and of frameworks such as the OWASP Top 10 for LLM Applications and ISO/IEC 42001.What's in it for you: Hybrid working and flexible start times24 days holiday (+ ...

disaster recovery and availability strategy Security & governance Own the platform security posture Maintain ISO27001 and Cyber Essentials technical controls Implement secure development best practice (OWASP, IAM, encryption, secrets management) Support vulnerability management, patching and audits Engineering excellence Introduce and enforce coding standards and best practices Lead code reviews and architectural ...

disaster recovery and availability strategy Security & governance Own the platform security posture Maintain ISO27001 and Cyber Essentials technical controls Implement secure development best practice (OWASP, IAM, encryption, secrets management) Support vulnerability management, patching and audits Engineering excellence Introduce and enforce coding standards and best practices Lead code reviews and architectural ...

disaster recovery and availability strategy Security & governance Own the platform security posture Maintain ISO27001 and Cyber Essentials technical controls Implement secure development best practice (OWASP, IAM, encryption, secrets management) Support vulnerability management, patching and audits Engineering excellence Introduce and enforce coding standards and best practices Lead code reviews and architectural ...

Preferred Qualifications (Beneficial but not strictly required): Preferred Qualifications: Vulnerability Awareness: A basic technical awareness and understanding of common vulnerabilities and attack vectors (e.g., OWASP Top 10, CWEs) to facilitate informed conversations with both hackers and developers. Familiarity with Agile/DevOps: Understanding of modern software development lifecycles (SDLC ...

Framework), NIST AI RMF (National Institute of Standards and Technology Artificial Intelligence Risk Management Framework), ISO/IEC 42001 (Artificial Intelligence Management Systems Standard), OWASP LLM (Open Worldwide Application Security Project) guidance, MITRE ATLAS (Adversarial Threat Landscape for Artificial Intelligence Systems) and CSA (Cloud Security Alliance) frameworks Experience assessing security ...

query optimisation. Experience developing and integrating APIs, particularlyRESTful services. Experience with Git, code reviews and software testing. Understanding of secure software development practices,including OWASP principles. Experience with Docker and cloud-hosted applications. Familiarity with AI-assisted development tools, or awillingness to adopt them as part of your development workflow. ...

quality and reliability of delivered solutions. Desirable Skills Microsoft Azure and Azure SQL. CI/CD pipelines, TeamCity, GitHub and Azure DevOps. Windows Services. OWASP Top 10 and application security best practices. Experience using AI tools for architectural design, technical documentation, threat modelling or design reviews. Understanding of emerging ...

architectural decisions and ensure the quality and reliability of delivered solutions. Desirable Skills CI/CD pipelines, TeamCity, GitHub and Azure DevOps. Windows Services. OWASP Top 10 and application security best practices. Experience using AI tools for architectural design, technical documentation, threat modelling or design reviews. Understanding of emerging ...

Governance: Proactively identify systemic delivery and technical risks—including model drift, IP leakage, licensing issues in generated code, data privacy breaches, and security vulnerabilities (OWASP Top 10 for LLMs). Regulatory & Safety Compliance: Ensure all delivery frameworks adhere strictly to evolving AI governance standards, copyright guidelines, data privacy regulations (GDPR ...

regulated environment, such as healthcare, financial services or another complex industry. Strong knowledge of security and risk frameworks such as ISO 27001, NIST, CIS, OWASP, ITIL or COBIT. Experience working with cloud technologies, particularly Azure, Google Cloud and modern identity and access management solutions. A good understanding of cyber threats ...

regulated environment, such as healthcare, financial services or another complex industry.Strong knowledge of security and risk frameworks such as ISO 27001, NIST, CIS, OWASP, ITIL or COBIT.Experience working with cloud technologies, particularly Azure, Google Cloud and modern identity and access management solutions.A good understanding of cyber threats, security operations ...

implementing parsing pipelines for tasks such as document processing/ingestion, including handling unstructured data. Demonstrable knowledge of AI security risks (familiarity with OWASP LLM Top 10), and how these can be mitigated. Experience working within enterprise governance frameworks. Proficiency in one or more languages (such as Python), and familiarity ...

senior leadership, governance forums, and risk committees Ensure alignment with recognised frameworks and standards including NIST AI RMF, MITRE ATT&CK, MITRE ATLAS, OWASP LLM Top 10, ISO 27001, the EU AI Act, and evolving UK regulatory requirements What it takes Significant experience within Cyber Security, Threat Intelligence, Incident Response ...

regulated environment, such as healthcare, financial services or another complex industry. Strong knowledge of security and risk frameworks such as ISO 27001, NIST, CIS, OWASP, ITIL or COBIT. Experience working with cloud technologies, particularly Azure, Google Cloud and modern identity and access management solutions. A good understanding of cyber threats ...

working knowledge of DevOps and SRE (CI/CD, logging, monitoring, alerting), plus AWS or Azure Good working knowledge of relevant security concerns (e.g. OWASP Top 10) Strong coaching, communication, and stakeholder management skills Ability to work autonomously, manage your time well, and switch context frequently in a remote setting ...

working knowledge of DevOps and SRE (CI/CD, logging, monitoring, alerting), plus AWS or Azure Good working knowledge of relevant security concerns (e.g. OWASP Top 10) Strong coaching, communication, and stakeholder management skills Ability to work autonomously, manage your time well, and switch context frequently in a remote setting ...

engineering with software development. You will collaborate with a Tier 1 bank to implement secure coding practices across the SDLC. The role requires deep OWASP knowledge, threat modelling, cloud security in Azure/AWS, and hands-on coding in Python/JavaScript/C#/PowerShell with strong collaboration across ...

embedding security into the engineering workflow as the job, not a side effect of it.-Have deep fluency in application security fundamentals: OWASP Top 10, AuthN/AuthZ, secure SDLC, secrets management, secure integration patterns, and cryptography basics.-Understand the security surface of agentic AI across the product layer ...

application security activities within a modern software development environment Strong knowledge of application security principles, secure coding practices, and common vulnerability classes including the OWASP Top 10 Hands‐on experience with application security tooling including SAST, DAST, SCA, secrets management, and vulnerability assessment tools Experience integrating security controls into ...

frontend frameworks and libraries, in particular React.js. Server side web development experience, in particular in c# or PHP. Knowledge and experience working to OWASP ASVS or equivalent application security standards. Knowledge and experience working with accessibility standards such as Web Accessibility Content Experience in developing containerising applications with Docker ...

staff. Familiar with SaaS application concepts: secure configuration, API’s, logging, access control, permissions, troubleshooting. Familiar with Docker and containerization is desirable Familiar with OWASP top 10 and MITRE ATT&CK Framework. Knowledge of various operating systems, ChromeOS, Linux, Mac, Windows. Able to navigate the linux command line. Excellent time ...

application concepts: secure configuration, API’s, logging, access control, permissions, troubleshooting.Familiar with Docker and containerization is desirable.Familiar with implementing secure IT SaaS applications.Familiar with OWASP top 10 and MITRE ATT CK Framework.Knowledge of various operating systems, ChromeOS, Linux, Mac, Windows.Able to navigate the linux command line.Strong verbal and written communication.Excellent ...