26 to 50 of 180 OWASP Jobs in the UK

team lead or managerial capacity.- Hands-on experience with security testing tools (e.g., Veracode, SonarQube, Burp Suite, etc.).- Familiarity with secure coding practices, OWASP Top 10, and threat modelling.- Experience working in Agile or DevOps-driven environments.- Strong verbal and written communication skills.- Relevant security or DevSecOps certifications (e.g. ...

experience with IaC tools such as Terraform, CloudFormation, or Bicep.• Is familiar with relevant software and infrastructure security compliance frameworks and guidelines, e.g. OWASP, CVE and others.What we offerWe’re passionate about providing amazing opportunities and benefits, so you can continue and progress a lifelong career with us – here ...

security and security operations. Proven leadership of security engineering or SOC teams — including distributed, multi-region teams. Expert-level knowledge of secure SDL frameworks (OWASP SAMM, NIST SSDF), threat modelling, and security architecture. Deep experience with detection engineering, SIEM/XDR platforms, incident response, and MSSP management. Strong cloud security ...

security and security operations. Proven leadership of security engineering or SOC teams — including distributed, multi-region teams. Expert-level knowledge of secure SDL frameworks (OWASP SAMM, NIST SSDF), threat modelling, and security architecture. Deep experience with detection engineering, SIEM/XDR platforms, incident response, and MSSP management. Strong cloud security ...

distributed systems, scalability, resilience and performance tuning Experience with cloud-native applications, Docker, Kubernetes and CI/CD Strong knowledge of application security, OWASP principles and secure development practices Knowledge of a modern front-end node-based framework Other Information Permanent role – 37.5 hours per week. Monday to Friday ...

Strong grasp of integration patterns with Legacy systems (mainframe, ESB, message‐based, batch) and incremental modernisation strategies Solid understanding of secure‐by‐design principles, OWASP risks, and engineering for high‐assurance environments Experience with infrastructure‐as‐code (Terraform, CloudFormation, CDK) and modern CI/CD practices Strong experience working ...

consumer-driven contract testing between services, for example using Pact. Ensure security is embedded into engineering practices, including SAST scanning, dependency updates, and OWASP-aligned API design via Azure API Management. Technical Leadership & Mentoring Lead, mentor and develop a small engineering squad through structured code reviews, pair programming, technical coaching ...

/CD pipelines (e.g., Jenkins, GitHub Actions) and utilizing containerisation and infrastructure-as-code tooling. Security & Accessibility: Comprehensive understanding of secure coding practices (e.g., OWASP), data encryption, and WCAG 2.2 accessibility compliance. Agile Mindset: A strong track record of operating effectively in blended, multi-supplier agile environments (Scrum/Kanban ...

teams. Desirable Skills Experience with the following technologies and tools would be advantageous: Testing & Automation JUnit Playwright Selenium Cucumber Performance Testing Gatling Security Testing OWASP ZAP Cloud & Containerisation Docker Kubernetes AWS Accessibility Testing WCAG Standards WAVE ...

blue or purple team activities - Experienced in software development or experience contributing to Open-Source projects - Experienced with DAST tools such as Burp Suite, OWASP Zap or similar - Experience with SAST/SCA tools such as Snyk, Veracode, Checkmarx or similar - Proficient in one or more of the following languages ...

have the following experience: Experience assessing security impacts across codebases and APIs using languages such as Java, TypeScript and Python. Strong knowledge of the OWASP Top 10, secure coding practices, and common web and API vulnerabilities. Hands-on experience triaging, validating and remediating vulnerabilities with both technical and non-technical ...

audit engagements (ISO 27001, SOC 2, Cyber Essentials, GDPR). Fluent in security frameworks and threat methodologies (MITRE ATT&CK, NIST CSF, CIS Controls, OWASP) with practical application, not just theoretical knowledge. Experience securing cloud‐native and SaaS‐heavy environments (AWS preferred). Strategic thinker who can define a roadmap ...

risks, with a focus on recommendations for enhancements or remediation, and proficiency in multiple security assessment methodologies (e.g., Open Worldwide Application Security Project (OWASP) Top Ten, National Institute of Standards and Technology (NIST) Cybersecurity Framework), offensive testing tools, or resiliency testing equivalentsExcellent communication, collaboration, and report writing skills, with ...

risks, with a focus on recommendations for enhancements or remediation, and proficiency in multiple security assessment methodologies (e.g., Open Worldwide Application Security Project (OWASP) Top Ten, National Institute of Standards and Technology (NIST) Cybersecurity Framework), offensive testing tools, or resiliency testing equivalents Excellent communication, collaboration, and report writing skills, with ...

communication skills Proven team engagement skills Proven coaching skills Quality Driven Adaptable/ability to context switch Stakeholder Management Optional Skills: Junit Playwright Gatling OWASP Zap SonarQube GitHub Co-pilot Wiremock Wave Axe Kubernetes Docker Micro-services AWS Open API WCAG Cucumber/Gherkin Selenium Agile Scrum Agile Practices ...

distributed systems, scalability, resilience and performance tuning Experience with cloud‐native applications, Docker, Kubernetes and CI/CD Strong knowledge of application security, OWASP principles and secure development practices Knowledge of a modern front‐end node‐based framework Other Information Permanent role – 37.5 hours per week. Monday to Friday ...

latest exploits, vulnerabilities (CVEs), and threatactor tactics Requirements Required Skills Strongproficiency in penetration testing tools (e.g., Kali Linux, BurpSuite, Metasploit, Nmap, Wireshark) Experiencewith OWASP Top 10 , vulnerability scanning, and exploit development Familiaritywith MITRE ATT&CK framework and red team methodology Solidknowledge of TCP/IP, firewalls, DNS, HTTP/HTTPS ...

functional, integration and non-functional testing Strong communication, stakeholder management and team collaboration skills Nice to have Cucumber/Gherkin Gatling performance testing OWASP ZAP security testing SonarQube GitHub Copilot WireMock Accessibility testing tools such as Axe or Wave Kubernetes and Docker AWS OpenAPI specifications If you're interested ...

functional, integration and non-functional testing Strong communication, stakeholder management and team collaboration skills Nice to have Cucumber/Gherkin Gatling performance testing OWASP ZAP security testing SonarQube GitHub Copilot WireMock Accessibility testing tools such as Axe or Wave Kubernetes and Docker AWS OpenAPI specifications If you're interested ...

years' hands-on experience in application security testing.Advanced knowledge of internet and network technologies.Expert understanding of web and API technologies and common vulnerabilities (OWASP Top 10, API/LLM Top 10, Mobile Top 10).Advanced mobile security testing (Android/iOS) — reverse engineering, runtime manipulation, Frida scripting, Objection.Advanced knowledge ...

leading offensive security programs (penetration testing, red teaming, bug bounty).Practical understanding of governance and assurance frameworks such as ISO 27001, SOC 2, and OWASP SAMM.Familiarity with AI/LLM tooling (e.g., Cursor, GitHub Copilot, custom LLM integrations) and the associated security and governance considerations.Experience working with AWS and securing ...

with AI and agentic security risks (prompt injection, data poisoning, model and agent governance). Have experience mapping security frameworks (NIST CSF, ISO 27001, OWASP, NIST AI RMF). Have hands‐on exposure to detection and response, red‐team, or pen‐test work. Have experience with our stack: Azure/ ...

risks, with a focus on recommendations for enhancements or remediation, and proficiency in multiple security assessment methodologies (e.g., Open Worldwide Application Security Project (OWASP) Top Ten, National Institute of Standards and Technology (NIST) Cybersecurity Framework), offensive testing tools, or resiliency testing equivalents Excellent communication, collaboration, and report writing skills, with ...

principles across all AI workloads, including prompt injection defence and data protection. Partner with AI Safety and Compliance teams to enforce standards aligned to OWASP GenAI, NIST AI RMF, and ISO/IEC 42001. Implement guardrails for model usage, data handling, and fairness/bias mitigation. Ensure full audit trails ...

OpenAPI Databases PostgreSQL MongoDB Redis Testing Jest Vitest DevOps & Cloud AWS Docker Git GitHub GitHub Actions Delivery Jira Azure DevOps Agile delivery environments Security OWASP awareness Vulnerability scanning Secure development practices Desirable GOV.UK or GDS experience Public sector experience Experience delivering services in Beta and Live Experience with GitHub Copilot ...