201 to 225 of 253 OWASP Jobs in the UK

Selenium - Cypress - Performance Testing - JMeter DevOps Continuous Integration/Continuous Deployment (a.k.a., CICD) - Jenkins, GoCD, CircleCI, TeamCity - Security - For example: WhiteSource, Snyk, SonarQube, OAuth, OWASP Responsibilities Senior Contract Angular Developer, Leeds or UK Remote (occasional office time required), Angular Front End Developer to join a hugely impressive not for profit ...

particularly PostgreSQL, covering schema evolution, optimisation, and transaction management. Proficient in caching mechanisms using technologies like Redis. Understanding secure coding standards, with insights into OWASP principles. Experienced in containerization tools (Docker) throughout the development lifecycle. Advocate for test automation practices, emphasising reliability and rapid deployment. Capable of translating business requirements ...

particularly PostgreSQL, covering schema evolution, optimisation, and transaction management. Proficient in caching mechanisms using technologies like Redis. Understanding secure coding standards, with insights into OWASP principles. Experienced in containerization tools (Docker) throughout the development lifecycle. Advocate for test automation practices, emphasising reliability and rapid deployment. Capable of translating business requirements ...

practical terms. Experience with AI governance, responsible AI, model risk management or AI assurance. Familiarity with frameworks and guidance such as NIST AI RMF, OWASP Top 10 for LLM Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations ...

practical terms. Experience with AI governance, responsible AI, model risk management or AI assurance. Familiarity with frameworks and guidance such as NIST AI RMF, OWASP Top 10 for LLM Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations ...

deliver the following: Web application testing API testing External & Internal Infrastructure testing (including build reviews) Mobile application testing (including knowledge of standards such as OWASP MASVS) Experience testing in any of the following areas is also desirable: Compiled application testing Cloud security reviews (including AWS & Azure) Development and upskilling opportunities ...

design, query optimization, and migrations Familiarity with containerization (Docker) and modern deployment workflows Strong understanding of web security fundamentals — authentication, authorization, input validation, and OWASP best practices Experience with version control (Git), code review practices, and collaborative development workflows A product-minded approach to engineering — you care about what ...

engagement, and plan testing that meets their assurance needs. Apply manual and tool-assisted testing techniques aligned with recognised methodologies and frameworks, including the OWASP Web Security Testing Guide, PTES, and MITRE ATT&CK. Deliver Cyber Essentials Plus assessments, including scoping, conducting the required technical tests, verifying remediation and supporting ...

engagement, and plan testing that meets their assurance needs. * Apply manual and tool-assisted testing techniques aligned with recognised methodologies and frameworks, including the OWASP Web Security Testing Guide, PTES, and MITRE ATT&CK. * Deliver Cyber Essentials Plus assessments, including scoping, conducting the required technical tests, verifying remediation and supporting ...

AWS. You think in quality and resilience: You understand performance, reliability, scalability and secure design, and you work with established frameworks and OWASP practices. You get leverage from tools: You know how to use AI coding agents effectively without outsourcing your judgement. You keep things simple: You weigh existing tools ...

AWS.You think in quality and resilience: You understand performance, reliability, scalability and secure design, and you work with established frameworks and OWASP practices.You get leverage from tools: You know how to use AI coding agents effectively without outsourcing your judgement.You keep things simple: You weigh existing tools, libraries and patterns ...

code generation, component refactoring, test generation, and architectural brainstorming. Enforce a strict zero-trust verification loop over all AI outputs to guarantee type safety, OWASP vulnerability defense, and performance standards. Enterprise Security & Audit Pipeline: Enforce rigorous authentication and authorization postures (JWT tokens, ApiKey schemes, single sign-on) and block malicious ...

dynamic working environment. You have an Engineering degree or equivalent experience in Computer Science, Electronics, Telecoms or a related field. Awareness of NIST, OWASP and UK TSR requirements and how they impact delivery and testing of secure networks Willing to support an on-call rota as required. Abilty to work ...

ramp on a new AI tool or technique in days, not months. You will have an advantage if you also have: Security best practice (OWASP top ten) Windows services Experience using AI tooling specifically in the architect role - for design review, ADR drafting, threat modelling, contract design, or similar. Familiarity ...

including SAST, SCA, DAST, secrets scanning, IaC scanning, API security, threat modelling and CI/CD security. Map controls against frameworks including NIST SSDF, OWASP SAMM and OWASP DSOMM. Review security tooling and integrations across GitHub, GitLab, CI/CD and cloud environments. Conduct control-effectiveness assessments, evidence reviews ...

converting SAST, SCA, secrets or ASPM findings into prioritised, remediated work rather than raw reporting Strong understanding of common vulnerability classes and the OWASP Top 10, with practical knowledge of how to remediate them The ability to read and review code in at least one of our core languages: Java … policy-as-code tooling Experience establishing a security champions programme Experience securing large language model (LLM) or agentic AI capabilities, such as applying the OWASP Top 10 for LLM Applications Familiarity with financial services regulations and standards, such as the Digital Operational Resilience Act (DORA ...

ensure we are secure and demonstrably so to our customers. You’ll embed secure-by-design practices, monitor for irregular behaviour, align with OWASP Top 10 and AWS Well-Architected, and lead risk assessments and policy documentation under ISO 27001 ISMS. #J-18808-Ljbffr ...

write deliverables to a high standard Experience with Attack & Threat Modelling Red Team testing and social engineering attack methodologies Extensive knowledge of the OWASP Testing Methodology Knowledge of networking protocols and the OSI Model Working knowledge of CobaltStrike Preferred Education, Training & Experience: 5 years testing Experience ...

agentic AI. You will work hands-on at first and grow into wider governance and mentorship across teams. You will map findings to OWASP, MITRE ATLAS and NIST AI RMF, define controls for internal vs client-facing views, and help roll out tooling and incident response processes across accounts. #J ...

advanced Security Operations, or high-level Technical Support/Incident Response for enterprise infrastructure Proven capability to handle both Application Security (including knowledge of OWASP Top 10 vulnerabilities, L7 WAF, HTTP/S anomalies, Bot mitigation) and Network Security (L3/L4 volumetric DDoS, protocol abuse) Working knowledge of threat ...

with a solid understanding of HTTP methods, status codes, headers, and payloads. Security & Reliability Awareness: Familiarity with foundational web security principles (such as the OWASP Top 10) and a proactive approach to non-functional testing. Shift-Left Quality Practice: Experience actively participating in refinement sessions alongside Product Managers and Engineers ...

Team engagements. In this role, your primary duties will involve executing web application, internal, and external assessments following established industry frameworks like OWASP and MITRE ATT&CK. You may also provide mentorship by pairing with junior or mid-level penetration testers to guide them through their assessments. Based on your ...

The Apex Group was established in Bermuda in 2003 and is now one of the world’s largest fund administration and middle office solutions providers. Our business is unique in its ability to reach globally ...

regulated environment. Essential skills: 5+ years of full stack development with C#/.NET and TypeScript/JavaScript Hands-on remediation of OWASP Top 10 issues, CVEs and dependency vulnerabilities Scanning tools such as SonarQube, Snyk, Veracode or Checkmarx Building and securing REST API integrations Regulated environment experience, ideally financial ...

/CD security Hands‐on experience with AWS and Cloudflare (or equivalents) and Terraform or similar IaC A strong grasp of the OWASP Top 10 and the ability to assess exploitability and impact Solid coding skills (e.g. Python, Go, Scala) and experience building security tooling or automation Practical understanding … risks in AI‐assisted and agentic development and LLM applications (e.g. OWASP Top 10 for LLMs) Experience with security risk analysis and risk management methods The ability to explain trade‐offs clearly to engineers and senior stakeholders, and to win people over Nice to have Experience building guardrails, sandboxes ...