151 to 175 of 180 OWASP Jobs in the UK

management. Excellent attention to detail. Adheres to and promotes high standards. Understanding of vulnerability and threat assessment frameworks, such as: CVSS, CVE, CWE,OWASP, MITRE. Operational Technology (OT) management experience in vulnerability scanning. Competent at keeping up to date on CTI (Cyber Threat Intelligence) Desirable Experience with security or compliance ...

knowledge of RAG patterns and vector store integration (e.g., Qdrant, pgvector, Pinecone). Awareness of AI‐specific risk areas relevant to a regulated environment (OWASP LLM Top 10, hallucination/determinism concerns, and auditability of agent decisions). EEO Statement We are proud to be an equal opportunity workplace ...

developer tooling used inside our own delivery pipelines. Threat modelling and risk Lead threat modelling for applications, APIs and AI features using STRIDE and OWASP methods, supported by appropriate HL TM tooling, driving the resulting mitigations to closure. Assess the security implications of new products, technologies and third-party integrations … sector; mobile application security; software supply chain and secure SDLC; hands-on experience with Amazon Bedrock or comparable managed model platforms; familiarity with the OWASP Top 10 for LLM and Agentic Applications; working knowledge of OWASP ASVS, Top 10 and API Security Top 10. Azure exposure is useful, although ...

manually confirming exploitability beyond what scanners or AI analysis reports. Use Interactive Application Security Testing (IAST) tools for runtime analysis, such as Burp Suite, OWASP ZAP, Frida, applying hands‐on technique to validate and extend automated results. Conduct Static Application Security Testing (SAST) and Software Composition Analysis (SCA) on source … secure coding training and promote a positive security posture. Requirements Have hands‐on experience with DAST, IAST and penetration testing tools (e.g., Burp Suite, OWASP ZAP, Frida), and can manually identify and exploit vulnerabilities beyond what these tools surface automatically. Can demonstrate independent, hands‐on technical ability, for example through ...

technical point of contact. Communicate complex technical concepts clearly to both non-technical and actuarial audiences. Quality, governance & continuity Uphold secure coding standards (e.g. OWASP), code quality, and engineering governance. Ensure solutions are reliable, maintainable, and appropriately documented. Provide hands-on support and continuity to the Senior Manager … Server, PostgreSQL, DBML, NoSQL databases Cloud & DevOps: Azure, AWS, Docker, Azure DevOps, GitHub, CI/CD, PowerShell, YAML Ways of working: Agile/Scrum, OWASP-aligned secure development Qualifications Degree in Computer Science, Software Engineering, or a related discipline, or equivalent practical experience. Cloud architecture certification desirable (e.g. Azure Solutions ...

practical terms. Experience with AI governance, responsible AI, model risk management or AI assurance. Familiarity with frameworks and guidance such as NIST AI RMF, OWASP Top 10 for LLM Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations ...

simple, practical terms.Desirable SkillsExperience with AI governance, responsible AI, model risk management or AI assurance.Familiarity with frameworks and guidance such as NIST AI RMF, OWASP Top 10 for LLM Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks.Experience with SOC operations, SIEM ...

should have practical security testing experience on web apps, APIs, or mobile apps, and familiarity with Burp Suite, nuclei, and Nmap. Knowledge of OWASP Top 10 and ability to report risk clearly is essential. #J-18808-Ljbffr ...

C#, MVC, ASP.NET Core, JavaScript, HTML & CSS Experience debugging, profiling and deploying web applications Solid understanding of MVC patterns, ASP.NET controllers & web security (OWASP) Comfortable working with IIS Exposure to frameworks like React, Vue, Angular or Knockout is a plus Degree in Computer Science or related field preferred ...

development experience- Experience with SQL Server or similar relational databases- Experience building web applications using Angular, React, Blazor or similar frameworks- An understanding of OWASP security best practices and secure by design principles- The ability to communicate effectively with technical and non-technical stakeholders- The ability to estimate, prioritise ...

Expertise in Continuous Security, Continuous Integration and Continuous Delivery techniques• Knowledge of international security standards and regulations such as NCSC, NIST, CIS, PCI, GDPR, OWASP ASVS, HIPPA, SOC2 etc.• Knowledge of typical cyber security attack vectors (e.g. OWASP Top 10, SQL, XSS, XXE, MITM etc.) and can articulate threats … equivalent)• Experience of working with the external penetration test companies to translate report findings into actionable tasks.• Experience with security tools (e.g. Burp Suite, OWASP-ZAP, NMAP, Nessus, Kali, Metasploit etc.)• Knowledge about main cyber security areas (e.g. OSINT, network scanning, enumeration, sniffing, session hijacking, social engineering, firewalls, honeypots ...

Application, AI, and Infrastructure security: AI & Application Security: Lead the defense against LLM-specific vulnerabilities (Prompt Injection, Insecure Output Handling) and standard web threats (OWASP Top 10). Implement "Guardrails" that sanitize agent inputs/outputs and conduct continuous red-teaming of our agent behaviors. Secure SDLC & DevSecOps: Embed security … code in Python or Go and spot logic flaws that scanners miss. AI Security Curiosity: Understand the unique risks of LLMs. Familiar with the OWASP Top 10 for LLMs and have explored defenses against prompt injection and data exfiltration in agentic systems. Cloud Native Security: Hands-on experience securing ...

over 8 years of experience and a strong focus on security feature design, authentication workflows, and extensive knowledge of secure coding practices, including OWASP Top 10. Additional perks include equity options, private medical insurance, and a hybrid working model. #J-18808-Ljbffr ...

security reviews, threat modeling applications and identifying areas of risk Experience implementing strategies to support secure and compliant architectures Deep understanding of the OWASP Top 10 application security risks and how to address them Expert knowledge of Amazon AWS, Microsoft Azure or other cloud computing platform offerings and security related … experience Nice to Have Experience with assessing and providing recommendations for securing generative AI solutions Working knowledge of the Microsoft Security Development Lifecycle (SDL), OWASP Software Assurance Maturity Model (SAMM), or Building Security in Maturity Model (BSIMM). Familiar with compliance regulations like; ISO, GDPR, SOC2, SOX MS in Cyber ...

reference implementations, mentor engineers, and uplift AppSec skills.QualificationsWhat you need:Several years in Web applications and APIs, including focused on Application security.Deep knowledge of:OWASP Top 10, OWASP API Security Top 10, secure coding patterns, input validation, schema enforcement.APIs (e.g., GraphQL/REST, XML/SOAP API Gateways like Apigee ...

engage credibly on cyber and cloud security topics, such as securing web applications and cloud platforms (e.g. AWS or Azure), typical attack vectors (e.g. OWASP Top 10) and common security standards (e.g. NCSC, NIST, CIS, PCI, GDPR, OWASP ASVS, SOC2). You do not need to be the deepest technical ...

engage credibly on cyber and cloud security topics, such as securing web applications and cloud platforms (e.g. AWS or Azure), typical attack vectors (e.g. OWASP Top 10) and common security standards (e.g. NCSC, NIST, CIS, PCI, GDPR, OWASP ASVS, SOC2). You do not need to be the deepest technical ...

majority remote role with a London focus. The candidate will evaluate security impacts across Java, TypeScript and Python codebases and APIs, with strong OWASP Top 10 knowledge and secure coding practices. You will triage, validate and remediate vulnerabilities, coordinating with both technical and non-technical stakeholders and embedding security tooling ...

issues Lead the pentesting cadence around the core application set by conducting hacking exercises Provide application code reviews against known development frameworks such as OWASP ASVS Provide input into the design of functional and non-functional security controls such as customer authentication workflows Run Security Champion sessions to keep developers … Application Security Understanding of Software Development Life Cycle Desirable Security professional at heart borne froma software engineering background Experience of working with the OWASP ASVS framework Experience in Agile delivery environments Greenfield experience setting up security technologies from scratch Outgoing and able to build relationships with key stakeholders Personal Capabilities ...

technical software issuesLead the pentesting cadence around the core application set by conducting hacking exercisesProvide application code reviews against known development frameworks such as OWASP ASVSProvide input into the design of functional and non-functional security controls such as customer authentication workflowsRun Security Champion sessions to keep developers aware … drive to succeed in Application SecurityUnderstanding of Software Development Life CycleDesirableSecurity professional at heart borne from a software engineering backgroundExperience of working with the OWASP ASVS frameworkExperience in Agile delivery environmentsGreenfield experience setting up security technologies from scratchOutgoing and able to build relationships with key stakeholdersPersonal Capabilities Required, e.g. skills ...

Akamai, tuning rules and responding to emerging threats. Review and improve web ingress controls including DDoS mitigation, rate limiting, and certificate management. Apply OWASP principles across the organisation's web applications, working with development teams to identify and remediate vulnerabilities. Lead API security design and governance, ensuring consistent security controls … platforms. Deep hands‐on experience with Microsoft Defender for Cloud, Entra ID, Conditional Access policies, and Azure app registrations. Practical knowledge of API security, OWASP Top 10 remediation, and secure web application design. Experience working embedded in engineering or platform teams within an Agile/DevOps environment. Familiarity with ...

hardening Monitor systems for irregular behaviour and proactively design detection and prevention mechanisms Ensure infrastructure and applications align with accepted industry standards (e.g. OWASP Top 10 , AWS Well-Architected Framework ) Conduct and lead risk assessments , including third-party/vendor reviews and internal evaluations Document and maintain security policies, procedures … ecosystem and can comfortably navigate enterprise security tools across vendors Have solid foundations in networking, systems, and cloud infrastructure, and can apply frameworks like OWASP and AWS Well-Architected to real-world scenarios Have experience reviewing and improving product and infrastructure security, including secure SDLC practices (e.g. threat modelling, secure ...

Our PurposeMastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital ...

Team experience running adversary simulations as an operator* Familiarity with common security testing tools: Burp Suite, nuclei, nmap, or similar* Working knowledge of OWASP Top 10 and at least some exposure to OWASP LLM Top 10 or MITRE ATLAS* Ability to triage findings and communicate risk clearly to technical ...

security engineering experience. Proven experience administering Akamai WAAP. Strong knowledge of WAF policy tuning, API security controls and application onboarding. Good understanding of OWASP Top 10 and OWASP API Security Top 10. Knowledge of HTTP/S, REST APIs and application layer attack mitigation. Experience with vulnerability management, Qualys ...