26 to 50 of 253 OWASP Jobs in the UK

high-risk products and services. Conduct and oversee SAST, DAST, API security, fuzz testing and architecture-level assessments . Assess applications against the OWASP Top 10 and other relevant security standards. Identify vulnerabilities, understand their root causes and translate findings into practical remediation plans. Provide secure design and coding guidance ...

security. Key Responsibilities SSDLC & Secure Coding Assist in integrating security controls into the SSDLC. Support the creation and maintenance of secure coding guidelines (e.g., OWASP Top 10, CERT Secure Coding Standards). Application Security Testing Run a Static Application Security Testing (SAST) and Software Composition Analysis (SCA) scans. Conduct ...

Azure, or GCP). Proficient in programming languages like C/C++, Java, JS, Python, Go, or Rust. Deep understanding of common vulnerability frameworks (OWASP Top 10, SANS CWE Top 25). Solid grasp of enterprise software development, Agile, CI/CD pipelines, and security tooling (SAST, DAST, OSA, Vulnerability ...

controls for SaaS applications and backend services across API gateways, identity and access management, data protection, and SIEM-based security monitoring.Security Standards: Familiarity with OWASP Top 10 and CWE Top 25 vulnerabilities.Cloud Security: Direct experience with, or a strong understanding of, SaaS, PaaS and IaaS services and their security considerations.Development ...

SaaS applications and backend services across API gateways, identity and access management, data protection, and SIEM-based security monitoring. \n Security Standards: Familiarity with OWASP Top 10 and CWE Top 25 vulnerabilities. \n Cloud Security: Direct experience with, or a strong understanding of, SaaS, PaaS and IaaS services and their ...

Azure, or GCP), including identity, network security, and platform controls. Active SC Clearance. Experience with security frameworks and standards (eg NIST, ISO 27001, CIS, OWASP). Hands‐on understanding of modern application architectures (microservices, APIs, event‐driven systems). Experience working within Agile/Scrum delivery environments. Strong stakeholder engagement ...

collaborate with specialists and explain technical trade-offs to clients. Strong understanding of security standards and best practices, including ISO 27001, NIST and OWASP, with the ability to translate security requirements into practical engineering controls and solutions. Bonus Points For Experience in financial services, energy or other regulated sectors; relevant ...

collaborate with specialists and explain technical trade-offs to clients. Strong understanding of security standards and best practices, including ISO 27001, NIST and OWASP, with the ability to translate security requirements into practical engineering controls and solutions. Bonus Points For Experience in financial services, energy or other regulated sectors; relevant ...

conducting threat modelling (e.g. STRIDE, attack trees) and risk analysis Strong understanding of security frameworks and best practice such as ISO 27001, NIST, CIS, OWASP, NCSC guidance Experience working in the UK Public Sector and associated security standards and guidance including GovAssure/NCSC CAF, HMG Security Policy Framework. Knowledge ...

following... Cloud and infrastructure security : Experience or interest in Azure, Linux, networking, firewalls or identity and access management Application security : Secure coding, the OWASP Top 10, code or dependency scanning Security operations : Log analysis, SIEM tools, threat intelligence or incident response Governance and risk : Interest in security frameworks and standards ...

practices including CI/CD, source control, automated testing, and Agile delivery methodologies Desirable Skills Working knowledge of industry security frameworks and standards including OWASP Top 10, MITRE ATT&CK, NIST Cybersecurity Framework, OAuth 2.0, OpenID Connect, and SAML Experience supporting Security Operations, Incident Response, SOC, or breach modeling activities ...

Black Duck; policy as code; or threat modelling. Familiarity with relevant security standards and frameworks, such as NCSC Secure by Design, ISO 27001, OWASP or SLSA. Site reliability engineering practices, disaster recovery testing or supplier‐to‐operations handover. Candidates are not expected to have used every technology listed. Strong core ...

Black Duck; policy as code; or threat modelling. Familiarity with relevant security standards and frameworks, such as NCSC Secure by Design, ISO 27001, OWASP or SLSA. Site reliability engineering practices, disaster recovery testing or supplier‐to‐operations handover. Candidates are not expected to have used every technology listed. Strong core ...

Black Duck; policy as code; or threat modelling. Familiarity with relevant security standards and frameworks, such as NCSC Secure by Design, ISO 27001, OWASP or SLSA. Site reliability engineering practices, disaster recovery testing or supplier‐to‐operations handover. Candidates are not expected to have used every technology listed. Strong core ...

Black Duck; policy as code; or threat modelling. Familiarity with relevant security standards and frameworks, such as NCSC Secure by Design, ISO 27001, OWASP or SLSA. Site reliability engineering practices, disaster recovery testing or supplier‐to‐operations handover. Candidates are not expected to have used every technology listed. Strong core ...

Black Duck; policy as code; or threat modelling. Familiarity with relevant security standards and frameworks, such as NCSC Secure by Design, ISO 27001, OWASP or SLSA. Site reliability engineering practices, disaster recovery testing or supplier‐to‐operations handover. Candidates are not expected to have used every technology listed. Strong core ...

practices including CI/CD, source control, automated testing, and Agile delivery methodologies. Desirable Skills: Working knowledge of industry security frameworks and standards including OWASP Top 10, MITRE ATT&CK, NIST Cybersecurity Framework, OAuth 2.0, OpenID Connect, and SAML. Experience supporting Security Operations, Incident Response, SOC, or breach modeling activities. ...

Desirable Technical Skills Experience with any of the following would be advantageous: Test Automation: Playwright, Selenium, JUnit, Cucumber/Gherkin Performance & Security Testing: Gatling, OWASP ZAP, SonarQube Accessibility Testing: Axe, WAVE, WCAG Development & Testing Tools: WireMock, GitHub Copilot, OpenAPI Cloud & Infrastructure: AWS, Docker, Kubernetes, Microservices Contract Details Rate ...

your background might be better suited to. 5+ years ofrelevantexperienceinthe medical devicespace (eitherindustryor through consulting/service provider) Proficiency in security frameworks (e.g., NIST, OWASP, MITRE ATT&CK, PASTA, STRIDE) and standards such as FDA cybersecurity guidance Experience assessing security risks using industry standard methods (penetration test results, threat modeling ...

security vulnerabilities.Experience performing threat modeling and application security reviews.Strong understanding of authentication, authorization, session management, web security, API security and mobile security.Strong knowledge of OWASP Top 10s and their practical remediation.Hands-on experience with application security technologies such as SAST, SCA, DAST, API Security, WAF.Experience with microservices, APIs, containers, Kubernetes ...

. Proficient in programming languages like C/C++, Java, JS, Python, Go, or Rust. Possess a deep understanding of common vulnerability frameworks (OWASP Top 10, SANS CWE Top 25). Solid grasp of enterprise software development, Agile, CI/CD pipelines, and security tooling (SAST, DAST, OSA, Vulnerability Management ...

PowerShell or Python. Experience gained within a legal, financial services or similarly regulated organisation. Awareness of security frameworks and best practice including NCSC guidance, OWASP, NIST CSF, CIS Controls, ISO 27001, ISMS principles and GDPR. Experience with automation, security testing, forensic investigation activities, DLP monitoring, privileged access, key management ...

Code experience using Terraform and/or Bicep. Automation experience using PowerShell and/or Python. Knowledge of Kubernetes, AKS, container security and OWASP principles. Ability to communicate effectively with both technical and business stakeholders. Desirable Experience Multi-tenant SaaS platform environments. Microsoft Defender XDR suite. Building or transforming ...

modelling, security architecture reviews and control design activities. Strong knowledge of security frameworks including NIST CSF, NIST AI RMF, ISO 27001, ISO 42001 and OWASP AI security guidance. Experience working within highly regulated environments such as healthcare, financial services or government. Excellent communication skills with the ability to explain complex ...

with AI and agentic security risks (prompt injection, data poisoning, model and agent governance). Have experience mapping security frameworks (NIST CSF, ISO 27001, OWASP, NIST AI RMF). Have hands‐on exposure to detection and response, red‐team, or pen‐test work. Have experience with our stack: Azure/ ...