226 to 250 of 253 OWASP Jobs in the UK

introduced. Key Responsibilities 1. Threat Modelling & Secure Design Agentic Threat Modelling: Threat model agents, tools, MCP servers, and multi-agent workflows using the OWASP Top 10 for LLM Applications, OWASP Agentic AI threats, and MITRE ATLAS, and run a lightweight pre-launch review gate. Secure-by-Default Reviews: Review agentic ...

ThreatSpike Ltd. is seeking a Senior Penetration Tester to lead web, internal and external assessments, using OWASP and MITRE ATT&CK frameworks. The role emphasizes mentorship, client communication, and hands-on testing across platforms. Remote-first role across the United Kingdom, United States, Singapore and United Arab Emirates, with optional ...

What You’ll Work With On the mobile‐security side, you’ll work across the RASP and broader mobile threat‐and‐defence landscape, including: OWASP MASVS/MASTG, Frida, Xposed and Magisk, Emulators, iOS toolchains — Swift/Objective‐C, Android toolchains — Kotlin/Java, Symbol obfuscation and binary hardening, Secure … Docker fundamentals. RASP and MTD — hands‐on knowledge of RASP and the mobile threat‐and‐defence landscape in which it operates. Standards — familiarity with OWASP MASVS/MASTG and the mobile attacker toolkit, including Frida, Xposed, Magisk and emulators. Evaluation and pre‐sales — ability to evaluate competing security products ...

improving how our code ships Cloud infrastructure on AWS: configuration, automation, and sensible, secure operations Security across the platform: secure coding standards, the OWASP Top 10, hardening, secrets, and staying on top of vulnerabilities and updates Reliability and robustness: observability, alerting, and a steady pair of hands when an incident … security basics done well, including IAM, secrets handling and least privilege A genuine security mindset: fluent in secure coding practices and the OWASP Top 10, and able to spot and fix real risk across code and infrastructure Comfortable automating with infrastructure as code and scripting, and keeping systems robust, observable ...

mobile security standards and practices Technical Skills Mobile Development Kotlin Android Swift iOS SwiftUI UIKit Jetpack Android SDK Swift Package Manager Mobile Security OWASP Mobile Top 10 OWASP MASVS Mobile Application Security Secure Coding Threat Modelling Authentication & Authorisation EncryptionSecure Storage Certificate Pinning Biometrics Android Keystore iOS Keychain Device Integrity Controls ...

mobile security standards and practices Technical Skills Mobile Development Kotlin Android Swift iOS SwiftUI UIKit Jetpack Android SDK Swift Package Manager Mobile Security OWASP Mobile Top 10 OWASP MASVS Mobile Application Security Secure Coding Threat Modelling Authentication & Authorisation Encryption Secure Storage Certificate Pinning Biometrics Android Keystore iOS Keychain Device Integrity ...

Skills & Experience Strong background in DevSecOps, Application Security or Integration Security. Expertise in OAuth2, OIDC, JWT and API Security . Strong knowledge of OWASP Top 10 and OWASP API Security Top 10 . Experience securing AWS environments, including IAM, networking and hybrid integrations. Ability to review code across Java, Kotlin ...

risk view, the test strategy and the tooling recommendations that other teams can reuse. Map findings and controls to recognised external frameworks (for example OWASP's agent-specific risk taxonomy, NIST's AI Risk Management Framework Govern function, and MITRE ATLAS) so ClearRoute's approach is defensible and auditable, Distinguish … test non‐deterministic systems and how to detect, quantify and mitigate hallucination Working knowledge of agentic‐AI‐specific risk frameworks and taxonomies, such as OWASP's agent risk categories and MITRE ATLAS Experience with the OWASP Top 10 for LLM Applications, including prompt injection and system‐prompt‐leakage risk categories ...

DevSecOps, or a similar hands-on cyber security roleStrong experience with SAST, DAST, and SCA tools such as Checkmarx, Snyk, Semgrep, Burp Suite, or OWASP ZAPExperience integrating automated security testing and controls into CI/CD pipelinesDemonstrable ability to investigate, validate, and remediate application security vulnerabilitiesExperience with attack surface management … common application vulnerabilitiesAwareness of emerging AI security risks, including prompt injection, data poisoning, and vulnerabilities affecting large language modelsFamiliarity with security frameworks such as OWASP Top 10 and MITRE ATLAS would be advantageousExcellent communication and stakeholder management skills, with the ability to work collaboratively across technical teamsApply now to speak ...

similar hands-on cyber security role Strong experience with SAST, DAST, and SCA tools such as Checkmarx, Snyk, Semgrep, Burp Suite, or OWASP ZAP Experience integrating automated security testing and controls into CI/CD pipelines Demonstrable ability to investigate, validate, and remediate application security vulnerabilities Experience with attack surface … vulnerabilities Awareness of emerging AI security risks, including prompt injection, data poisoning, and vulnerabilities affecting large language models Familiarity with security frameworks such as OWASP Top 10 and MITRE ATLAS would be advantageous Excellent communication and stakeholder management skills, with the ability to work collaboratively across technical teams Apply ...

similar hands-on cyber security role Strong experience with SAST, DAST, and SCA tools such as Checkmarx, Snyk, Semgrep, Burp Suite, or OWASP ZAP Experience integrating automated security testing and controls into CI/CD pipelines Demonstrable ability to investigate, validate, and remediate application security vulnerabilities Experience with attack surface … vulnerabilities Awareness of emerging AI security risks, including prompt injection, data poisoning, and vulnerabilities affecting large language models Familiarity with security frameworks such as OWASP Top 10 and MITRE ATLAS would be advantageous Excellent communication and stakeholder management skills, with the ability to work collaboratively across technical teams Apply ...

authentication, authorisation, injection, business logic and misconfiguration issues. Help identify attack paths, including privilege escalation, and explain their business impact. Follow recognised methodologies, including OWASP (WSTG, API Security Top 10), PTES and CHECK/CREST standards. Help prepare for engagements by confirming scope, access and prerequisites with the engagement lead. … years' commercial penetration testing experience across web applications, APIs and infrastructure. Good working knowledge of common web and API vulnerabilities, including the OWASP Top 10 and API Security Top 10. Practical experience with industry-standard tools such as Burp Suite, Nmap and Metasploit. Ability to validate findings, rule out false ...

establish and grow a security champions programme within our engineering teams Ensure our product security practices align with relevant frameworks and standards, such as OWASP, NIST, ISO 27001, GDPR and PCI DSS, supporting compliance and audit efforts while monitoring emerging threats and finding ways to strengthen our resilience … within CI/CD pipelines, ideally across cloud-native, containerised and infrastructure as code (IaC) environments Familiarity with industry standards and frameworks such as OWASP (ideally including the Mobile Application Security Verification Standard and API Security Top 10), PCI DSS, ISO 27001 and GDPR It would also be helpful ...

agentic tools. Implement access controls, secrets scanning and detection for internal AI systems and MCP integrations, mapped to frameworks such as the OWASP Top 10 for Agentic Applications. Research AI coding risks, such as slopsquatting and hallucinated packages, and feed findings into engineering practice. ISO 27001, compliance and client assurance … hear from you. Essential Hands-on experience in a security engineering, application security or cloud security role. Strong knowledge of web application security, including OWASP principles, authentication and authorisation, and secure API design. Practical experience of vulnerability management, from triage to working with engineers on remediation. Hands-on experience securing ...

Job Title- Security Consultant Location Manchester, Leeds, Bristol, Halifax, Edinburgh, UK (Hybrid- 2 days' work from office) Employment Type Contract Inside IR35 Job Description- What you'll do: Applying Agile methodologies to support engineers and ...

Title – Security Consultant Location: Manchester, Leeds, Bristol, Halifax, Edinburgh, UK (Hybrid- 2 days' work from office), prefer Leeds, UK Type – Contract Inside IR35 Role Title – Security Consultant About this opportunity Are you someone who wants ...

systems such as Elastic APM or DataDog to track and diagnose issues in production A solid understanding of security principles and secure coding including OWASP Top 10 Strong experience in in modern C#, TypeScript, HTML and CSS Strong cloud platform experience, ideally AWS • Strong CI/CD experience Strong experience … systems such as Elastic APM or DataDog to track and diagnose issues in production A solid understanding of security principles and secure coding including OWASP Top 10 Nice to haves Experience in VOIP, (SIP and RTP advantageous) Experience of TDD/BDD/DDD Knowledge of PCI compliance and associated ...

systems such as Elastic APM or DataDog to track and diagnose issues in production A solid understanding of security principles and secure coding including OWASP Top 10 Strong experience in in modern C#, TypeScript, HTML and CSS Strong cloud platform experience, ideally AWS • Strong CI/CD experience Strong experience … systems such as Elastic APM or DataDog to track and diagnose issues in production A solid understanding of security principles and secure coding including OWASP Top 10 Nice to haves Experience in VOIP, (SIP and RTP advantageous) Experience of TDD/BDD/DDD Knowledge of PCI compliance and associated ...

About The Role FDM is a global business and technology consultancy seeking Cyber Security Specialists (Security Connector) to work for our client in the Banking sector. This is an assignment hybrid-based in London or ...

Title – Security Consultant Location: Manchester, Leeds, Bristol, Halifax, Edinburgh, UK (Hybrid- 2 days' work from office), prefer Leeds, UK Buy Rate – GBP: 400 per day (Inside IR35) Role Title – Security Consultant About this opportunity Are ...

hardening Monitor systems for irregular behaviour and proactively design detection and prevention mechanisms Ensure infrastructure and applications align with accepted industry standards (e.g. OWASP Top 10 , AWS Well-Architected Framework ) Conduct and lead risk assessments , including third-party/vendor reviews and internal evaluations Document and maintain security policies, procedures … ecosystem and can comfortably navigate enterprise security tools across vendors Have solid foundations in networking, systems, and cloud infrastructure, and can apply frameworks like OWASP and AWS Well-Architected to real-world scenarios Have experience reviewing and improving product and infrastructure security, including secure SDLC practices (e.g. threat modelling, secure ...

appropriate security posture. Design, implement, maintain and optimise WAF policies across multi-cloud environments. Lead the investigation and mitigation of web application attacks, including OWASP Top 10 threats, bot attacks, credential stuffing, scraping, Layer 7 DDoS attacks and other web-based threats. Develop, maintain and enhance custom WAF rules, managed … controls, and attack mitigation policies, rather than solely relying on out-of-the-box managed rules. Extensive knowledge of web application attack vectors, including OWASP Top 10 vulnerabilities, SQL Injection, Cross-Site Scripting (XSS), Remote Code Execution (RCE), bot attacks, credential stuffing, and API abuse. Advanced hands-on expertise ...

security risk and assurance, including LLM and agentic AI threat modelling, with knowledge of NIST AI RMF, ISO/IEC 42001 and OWASP guidance for LLM applications Experience supporting complex transformation programmes Energy and drive, with a real appetite for improving how a team works Desirable: Experience in a large … highly regulated organisation Knowledge of ISO 27001, NIST and OWASP CISSP, CISM or equivalent Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success ...

Our Purpose Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of ...

finding. What You'll Do Own inbound product direction for your area. Research emerging agentic AI capabilities, attacker techniques, and adjacent standards (MCP, A2A, OWASP agentic-security guidance, agent identity frameworks) to determine what MARS for Agents should build next across the agent registry, Claude integration, Microsoft Copilot integration … integration platform. Direct experience with MCP, LLM/agent tool-calling architectures, or building integrations with Claude or other frontier model providers. Familiarity with OWASP frameworks, including emerging OWASP guidance for agentic AI security. Experience directly supporting a technical sales motion — SE enablement, competitive battlecards, customer discovery calls. Experience ...