26 to 50 of 66 OWASP Jobs in the UK

Awareness of AI/ML in security operations and AI-specific threats (e.g. prompt injection, sensitive-data exposure via GenAI), with awareness of the OWASP LLM Top 10 and MITRE ATLAS. Exposure to cloud detection across Azure, AWS, and/or GCP and to cloud and identity log sources (e.g. ...

management and application monitoring. Knowledge of advanced agent orchestration protocols (eg, A2A communication) and Model Context Protocols (MCPs). Familiarity with secure development frameworks (OWASP, NIST, ISO 27001). Background working in Defence, GovTech, aerospace, or similarly regulated sectors. ...

management and application monitoring. Knowledge of advanced agent orchestration protocols (e.g., A2A communication) and Model Context Protocols (MCPs). Familiarity with secure development frameworks (OWASP, NIST, ISO 27001). Background working in Defence, GovTech, aerospace, or similarly regulated sectors. ...

application monitoring. Knowledge of advanced agent orchestration protocols (e.g., A2A communication) and Model Context Protocols (MCPs). xkybehq Familiarity with secure development frameworks (OWASP, NIST, ISO 27001). Background working in Defence, GovTech, aerospace, or similarly regulated sectors. ...

proficiency Strong communication and coaching abilities Quality-focused mindset Stakeholder management Preferred Skills Testing tools (JUnit, Playwright, Selenium, Cucumber), performance tools (Gatling), security tools (OWASP Zap), containerization (Docker, Kubernetes), cloud (AWS), and accessibility testing (WCAG, Wave, Axe). ...

proficiency Strong communication and coaching abilities Quality-focused mindset Stakeholder management Preferred Skills Testing tools (JUnit, Playwright, Selenium, Cucumber), performance tools (Gatling), security tools (OWASP Zap), containerization (Docker, Kubernetes), cloud (AWS), and accessibility testing (WCAG, Wave, Axe). ...

deadlines Desirable Attributes Certifications such as CISSP, CISA, CRISC, or equivalent. Familiarity with additional frameworks (e.g., ISO 22301, ISO 31000, ISO 28000, ITIL, PASTA, OWASP Top 10, PCI-DSS, GDPR, DEFCON 660/659 etc..). We are a Disability Confident Employer Capgemini is proud to be a Disability Confident ...

InsightVM/InsightIDR, SentinelOne, Cloudflare, OneTrust, Microsoft Purview, or KnowBe4 Background in e‐commerce, marketplace, or retail technology Familiarity with NIST CSF, ISO 27001, OWASP LLM Top 10, or similar frameworks What We Offer Remote/hybrid working, UK‐based, with flexible London office presence A clear mandate to drive ...

architecture principles Leading Infrastructure as Code implementation using Bicep Driving CI/CD maturity (Bitbucket preferred) with strict SDK and dependency version control Ensuring OWASP-aligned secure coding practices and GDPR compliance Collaborating with QA to support automated and manual test strategies Documenting architectural decisions (ADRs) and maintaining clear technical ...

within cybersecurity services, technical assurance, or adjacent complex B2B professional services Strong commercial understanding of cybersecurity regulatory frameworks and standards (including ISO 27001, NIST, OWASP, NCSC, Radio Equipment Directive, Cyber Resilience Act), and the ability to translate regulatory drivers into revenue opportunities Proven success closing strategically significant, multi‐year contracts ...

DAST, and SCA tooling - Snyk, Checkmarx, Semgrep, Burp Suite, or similar Threat modelling - comfortable running sessions with engineering and product teams Solid understanding of OWASP Top 10 and how to actually remediate real-world vulnerabilities API security - REST, GraphQL, and the common attack vectors around them Knowledge of secure SDLC ...

with SAST, DAST, and SCA tooling - Snyk, Checkmarx, Semgrep, Burp Suite, or similarThreat modelling - comfortable running sessions with engineering and product teamsSolid understanding of OWASP Top 10 and how to actually remediate real-world vulnerabilitiesAPI security - REST, GraphQL, and the common attack vectors around themKnowledge of secure SDLC ...

attack types (e.g. SQL injection, phishing, malware) Experience with log analysis and incident investigation Familiarity with Windows and/or Linux environments Understanding of OWASP Top 10 security risks Ability to work in a fast-paced, incident-driven environment Desirable Security certifications such as CompTIA Security+, GIAC GSEC, or ISC2 ...

attack types (e.g. SQL injection, phishing, malware) Experience with log analysis and incident investigation Familiarity with Windows and/or Linux environments Understanding of OWASP Top 10 security risks Ability to work in a fast-paced, incident-driven environment Desirable Security certifications such as CompTIA Security+, GIAC GSEC, or ISC2 ...

looking for someone with experience in software development and application security, strong coding skills in C/C++, C# or Python, knowledge of OWASP Top 10 risks, Git-based development workflows, and Linux/Windows environments. Experience working with embedded or performance-sensitive systems is a plus. Please apply ...

protection posture Familiarity with cloud networking constructs (VNets/VPCs, routing, load balancers, private endpoints, segmentation) Knowledge of common web application attack techniques (e.g. OWASP Top 10: injection, XSS, API abuse) and mitigation approaches Experience working with infrastructure-as-code and automation tools (Terraform, ARM, CloudFormation) for WAF deployment ...

areas such as: Cyber security audits/assessments Vulnerability management Product or application security Security testing strategy Secure SDLC Risk, controls and remediation planning OWASP principles Reviewing security tooling and processes Translating technical findings into clear business language You don’t need to be a pure pen tester for this ...

direction, embedding automation, and confidently challenging stakeholders and delivery teams. Tech: AWS (Kubernetes), Java/Spring Boot, React, GitLab CI/CD, Playwright, OWASP, Gatling Role: Lead QA strategy and delivery across multiple teams Drive automation and modern QA practices Embed repeatable frameworks and standards Own test planning, risk ...

achieved remarkable success with over 1.2 million downloads, providing essential web application security features to developers across the .NET ecosystem. The library implements OWASP Secure Headers Project recommendations, enabling developers to enhance their application security with minimal effort whilst maintaining clean, maintainable code. Beyond digital community engagement, Jamie demonstrates ...

upheld, delivering best-in-class solutions. Ensure governance and decision-making processes are effective. Have extensive experience in standards such as PCI-DSS, OWASP, ISO 27001, ISO 9001, and others, championing adherence and implementation. People Help teams adopt good practices and techniques to deliver quality software at pace. Advocate ...

Experience with infrastructure and DevOps fundamentals: CI/CD, cloud platforms, CDN, monitoring/observability, and deployment strategies. Strong understanding of security best practices (OWASP, authentication/authorization patterns, secure data handling) — especially in a financial context. Experience hiring, mentoring, and growing engineers — building a high‐performing team, not just ...

Experience with infrastructure and DevOps fundamentals: CI/CD, cloud platforms, CDN, monitoring/observability, and deployment strategies. Strong understanding of security best practices (OWASP, authentication/authorization patterns, secure data handling) — especially in a financial context. Experience hiring, mentoring, and growing engineers — building a high‐performing team, not just ...

Information Security, Vulnerability Management or Security Operations Strong understanding of vulnerability assessment, patch management and remediation processes Knowledge of secure web application principles (OWASP Top 10, SANS 25) Experience with application and infrastructure security, including: Firewalls, Web & Email Security, AD/Group Policy, MFA, DMARC, DKIM, SPF Good understanding ...

enable consistent and compliant environm entsImplement automation across build, test, and deployment processes to ensure reliable and repeatable deli veryApply security best practices, including OWASP principles, throughout the development and deployment lifec ycleDeploy and manage containerised applications using Kubernetes or AWS-native services such as ECS or EKSMonitor system performance … using Terraform for infrastructure-as-code del iverySolid understanding of Kubernetes architecture and cloud-based container orchestr ationWorking knowledge of secure development practices, including OWASP principles within CI/CD and infrastructure d esignExperience with scripting languages such as Python, Bash, or Power ShellFamiliarity with Agile delivery environments and collaboration ...

responsibility include: Design, deployment, and management of a security information and event management (SIEM) system Web application, server & infrastructure penetration testing & issue resolution (OWASP) Data aggregation & correlation of network, security, server, database & application logs Design, deploy and maintain a monitoring dashboard & automated alerting system Compliance, breach and forensic analysis monitoring ...