176 to 200 of 253 OWASP Jobs in the UK

write code, configure systems, and implement fixes personally Strong understanding of application security, secure coding practices, and common vulnerabilities such as those outlined by OWASP Experience with penetration testing, vulnerability assessments, and security testing tools Strong understanding of API security, authentication, authorization, OAuth, access tokens, and credential management Experience managing ...

development principles Understanding of AI and large language model security, including prompt-injection testing, AI red teaming, data-leakage and access-control testing, and OWASP AI security guidance Scripting ability in PowerShell and/or Python; experience with Microsoft Copilot Studio or Azure AI is desirable Ability to communicate technical ...

That is how we build too. You have real depth in application and product security: secure SDLC, threat modeling, secure design and code review, OWASP and how vulnerabilities actually get authored and designed out. You need this to be able to build software that does it. Knowing it is table ...

Experience in a cyber-security role Working knowledge of technical and cyber security standards Working knowledge of industry best practices (such as NIST Framework, OWASP top ten, SANS and NCSC Guidance) Technical knowledge of information systems, infrastructure, and networks Security monitoring and testing technologies such as vulnerability scanning, penetration testing ...

skills, knowledge and experience will you need? Demonstrative experience of conducting structured penetration tests following 2 out of 3 of the following established frameworks (OWASP, NIST Cybersecurity Framework, PTES). Experience in planning, executing and documenting security assessments with minimal supervision. Understanding of NIST SP 800-115 for technical security ...

skills, knowledge and experience will you need? Demonstrative experience of conducting structured penetration tests following 2 out of 3 of the following established frameworks (OWASP, NIST Cybersecurity Framework, PTES). Experience in planning, executing and documenting security assessments with minimal supervision. Understanding of NIST SP 800-115 for technical security ...

skills, knowledge and experience will you need? Demonstrative experience of conducting structured penetration tests following 2 out of 3 of the following established frameworks (OWASP, NIST Cybersecurity Framework, PTES). Experience in planning, executing and documenting security assessments with minimal supervision. Understanding of NIST SP 800-115 for technical security ...

queries. Experience developing secure code end to end: strong understanding of common vulnerabilities such as cross-site scripting, cross-site request forgery and other OWASP risks, along with authentication, authorisation and secrets handling, and best practices for testing and mitigating them. Solid grasp of frontend-backend integration, including asynchronous request ...

frameworks for Web, Mobile, and Microservices APIs. Testing Strategy & CI/CD: Drive TDD/BDD practices, execute non-functional testing (Performance, Security/OWASP), and integrate automated suites into CI/CD pipelines. Engineering Standards: Review backlogs to build risk-based test strategies, mentor engineers, and partner with developers ...

Proficiency with Maven/Nexus and GitLab CI/CD. · Understanding of distributed systems, clustering, and failover. · Strong knowledge of web security standards and OWASP Top 10. · Optional: Exposure to front-end tech, Python scripting, or AI/ML APIs. · 8+ years of professional Java development. · Enterprise-level backend/ ...

Proficiency with Maven/Nexus and GitLab CI/CD. Understanding of distributed systems, clustering, and failover. Strong knowledge of web security standards and OWASP Top 10. Optional: Exposure to front-end tech, Python scripting, or AI/ML APIs. 8+ years of professional Java development. Enterprise-level backend/ ...

critical service, regulated, infrastructure, cloud or technology-led environment. Understanding of frameworks such as NIST CSF, ISO 27001, CIS Controls, Cyber Essentials, OWASP or the NCSC Cyber Assessment Framework. Experience using scripting, workflow automation, data analysis, or reporting tools to improve vulnerability triage, remediation tracking, or reporting. Relevant cyber security ...

cost. You build validation, schema enforcement and safe failure behaviour for outputs that may be well-formed yet wrong. Authentication, authorisation, secrets, input validation, OWASP awareness and audit trails are part of everyday engineering. The delivery and cost You deploy and operate on AWS using EKS/ECS patterns ...

chance to shape security operations within an international software environment. Accountabilities Security assessment and governance: Conduct security maturity assessments using frameworks such as OWASP SAMM, reviewing repositories, development pipelines, and cloud environments. Translate assessment findings into prioritized security roadmaps. Develop and maintain security policies and procedures covering access control, acceptable … procedures and organize tabletop exercises with the team. Secure software development: Design and implement a standardized Secure Software Development Lifecycle (Secure SDLC) based on OWASP ASVS and OWASP SAMM. Roll out secure development practices across active client projects. Configure and optimize the SecOps platform, reduce false positives, establish pipeline quality ...

solutions using Terraform to support repeatable and compliant environments Implement automation across build, test and deployment workflows to ensure consistent and reliable delivery Apply OWASP security principles and DevSecOps practices throughout the delivery lifecycle Deploy and maintain containerised workloads using Kubernetes or AWS-native services such … pipeline management Demonstrable experience with Terraform and infrastructure-as-code delivery Deep understanding of Kubernetes architecture and operations in cloud environments Working knowledge of OWASP security principles and how to apply them in CI/CD and infrastructure design Competence in scripting languages such as Python, Bash or PowerShell Experience ...

Benchmarks, FIPS 140, ISO 27001 or Cyber Essentials Plus, ideally in defense, aerospace or another regulated sector. Security Tooling: Experience with tools such as OWASP ZAP, OWASP Dependency-Check, Trivy, Semgrep, SonarQube, Nessus or OpenSCAP, and with SBOM formats (CycloneDX, SPDX). Infrastructure: Experience with Terraform or Ansible, virtualization platforms ...

delivering client‐facing engagements. Network testing: external and internal, Active Directory attack paths, privilege escalation, lateral movement, post‐exploitation. Web and API testing: the OWASP Top 10 and, more importantly, what it misses, meaning business logic flaws, authentication and session weaknesses, and multi‐step chains. Red teaming: objective‐based operations ...

Development Lifecycle practices. What you'll do In this position, you are a passionate and talented application security engineer with very deep understanding of OWASP, CWE 25, Data Protection, Access management, software vulnerabilities, best practices design and threat modelling skills, who can work in a dynamic environment. You must … Product Security Prior experience in using AI models and cyber harnesses to support security evaluation of application and software code. GitHub, Copilot, Codex, OWASP Top 10 for Agentic AI, AI skills development and security triage. Ability to code in at least one programming language e.g. Python/JavaScript/CSharp ...

Experience with vulnerability scanning, secure configuration assessments and remediation tracking. An understanding of common attack techniques, security monitoring and incident response. Knowledge of the OWASP Top 10 and recognised cyber security principles. An understanding of the NIST Cybersecurity Framework and NIS Regulations. Experience working towards Cyber Essentials. The ability ...

Experience with vulnerability scanning, secure configuration assessments and remediation tracking. An understanding of common attack techniques, security monitoring and incident response. Knowledge of the OWASP Top 10 and recognised cyber security principles. An understanding of the NIST Cybersecurity Framework and NIS Regulations. Experience working towards Cyber Essentials. The ability ...

high-risk products and services. Conduct and oversee SAST, DAST, API security, fuzz testing and architecture-level assessments . Assess applications against the OWASP Top 10 and other relevant security standards. Identify vulnerabilities, understand their root causes and translate findings into practical remediation plans. Provide secure design and coding guidance … security , including model, data and prompt/model manipulation risks. Experience delivering developer-focused security training or workshops. Knowledge of frameworks such as OWASP SAMM, ASVS, NIST CSF or NIST SSDF . Relevant application security, cloud security or offensive security certifications. Experience working across multiple teams, countries or business entities. ...

Data Protection Act ISO 27001:2022, ISO 27005 and ISO 31000 PCI DSS NIST 800-30/53 CIS Top 18 and OWASP Top 10 Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome ...

architecture expertise to assess control effectiveness across modern engineering environments. You will review security tooling, map controls to frameworks such as NIST SSDF and OWASP DSOMM, conduct control assessments and facilitate engineering #J-18808-Ljbffr ...

testing Relevant security testing certifications such as CREST (CRT, CCT), OSCP, OSCE, GPEN or GXPN Demonstrable knowledge of common security vulnerabilities, including the OWASP Top 10 Strong analytical and problem-solving skills Excellent communication skills with the ability to engage confidently with both technical and non-technical stakeholders A collaborative ...

queries; Microsoft SQL Server preferred Git version control, including branching and reviewing changes Building and consuming REST APIs Secure coding practice, such as the OWASP Top 10 Understanding of data protection (UK GDPR) when handling personal data Clear written English, able to produce accurate technical documents and user guides Able ...