51 to 66 of 66 OWASP Jobs in the UK

across infrastructure and web application testing Strong written communication skills Proficiency with standard tooling: Nmap, Burp Suite, Metasploit, Nessus, and similar Good understanding of OWASP Top 10, CVE exploitation, and common network attack paths Interested? Apply now for more information ...

ASP.NET/ASP.NET Core, MVC JavaScript, HTML, CSS, JSON, Bootstrap Experience with debugging, testing, and deploying web applications Understanding of web security principles (e.g., OWASP) About you: Ideally, 3+ years’ experience in web development Strong problem-solving and analytical skills Able to work independently and as part of a team ...

prompt injection, goal hijacking, memory poisoning, non-human identity abuse, and multi-agent attack surfaces. Understanding of EU AI Act, NCSC AI security guidelines, OWASP GenAI Security Project, and MITRE ATLAS. Ideally involved in academic and/or industry research on AI Security Leadership behaviours: Strategic thinking: able to translate ...

C#, MVC, ASP.NET Core, JavaScript, HTML & CSS Experience debugging, profiling and deploying web applications Solid understanding of MVC patterns, ASP.NET controllers & web security (OWASP) Comfortable working with IIS Exposure to frameworks like React, Vue, Angular or Knockout is a plus Degree in Computer Science or related field preferred ...

delivery teams in Agile and DevOps environments to embed security by design. Support compliance with security and regulatory frameworks including ISO 27001, PCI DSS, OWASP and internal standards. Review security posture of vendors and outsourced services, providing due diligence and third-party risk assurance. Present security findings, risk opinions … security, secure application delivery, third-party risk management and access management practices. Experience applying recognised frameworks and standards such as ISO 27001, PCI DSS, OWASP, NIST and enterprise security control frameworks. Ability to translate complex technical risks into business language and provide clear, evidence-based recommendations. Exposure to contemporary architectures. ...

experience in software and/or firmware testing Engineering degree in Software, Computer Science, Cybersecurity or demonstrated knowledge. Proficiency with tools: Burp Suite, OWASP ZAP, Nessus, Nmap Fortify, Checkmarx, Metasploit, Wireshark. Knowledge of scripting languages such as Python, JavaScript, Bash, or PowerShell. Understanding of encryption algorithms, key management, & secure protocols … Strong understanding of common vulnerabilities (e.g., OWASP Top 10, CWE/SANS Top 25) Familiarity with Linux, Windows, and network protocols (TCP/IP, DNS, HTTP/S) Understanding of industrial protocols (e.g., Serial, Modbus, HART) Knowledge of industry standards: IEC 62443, ISO 27001, NIST, OWASP Nice-to-have: Experience ...

delivery teams in Agile and DevOps environments to embed security by design. Support compliance with security and regulatory frameworks including ISO 27001, PCI DSS, OWASP and internal standards. Review security posture of vendors and outsourced services, providing due diligence and third-party risk assurance. Present security findings, risk opinions … security, secure application delivery, third-party risk management and access management practices. Experience applying recognised frameworks and standards such as ISO 27001, PCI DSS, OWASP, NIST and enterprise security control frameworks. Ability to translate complex technical risks into business language and provide clear, evidence-based recommendations. Exposure to contemporary architectures. ...

years of experience in software and/or firmware testingEngineering degree in Software, Computer Science, Cybersecurity or demonstrated knowledge.Proficiency with tools: Burp Suite, OWASP ZAP, Nessus, Nmap Fortify, Checkmarx, Metasploit, Wireshark.Knowledge of scripting languages such as Python, JavaScript, Bash, or PowerShell.Understanding of encryption algorithms, key management, & secure protocols … Strong understanding of common vulnerabilities (e.g., OWASP Top 10, CWE/SANS Top 25)Familiarity with Linux, Windows, and network protocols (TCP/IP, DNS, of industrial protocols (e.g., Serial, Modbus, HART)Knowledge of industry standards: IEC 62443, ISO 27001, NIST, OWASPNice-to-have:Experience implementing DevSecOps best practices; Azure ...

delivery teams in Agile and DevOps environments to embed security by design. Support compliance with security and regulatory frameworks including ISO 27001, PCI DSS, OWASP and internal standards. Review security posture of vendors and outsourced services, providing due diligence and third-party risk assurance. Present security findings, risk opinions … security, secure application delivery, third-party risk management and access management practices. Experience applying recognised frameworks and standards such as ISO 27001, PCI DSS, OWASP, NIST and enterprise security control frameworks. Ability to translate complex technical risks into business language and provide clear, evidence-based recommendations. Exposure to contemporary architectures. ...

delivery teams in Agile and DevOps environments to embed security by design. Support compliance with security and regulatory frameworks including ISO 27001, PCI DSS, OWASP and internal standards. Review security posture of vendors and outsourced services, providing due diligence and third-party risk assurance. Present security findings, risk opinions … security, secure application delivery, third-party risk management and access management practices. Experience applying recognised frameworks and standards such as ISO 27001, PCI DSS, OWASP, NIST and enterprise security control frameworks. Ability to translate complex technical risks into business language and provide clear, evidence-based recommendations. Exposure to contemporary architectures. ...

delivery teams in Agile and DevOps environments to embed security by design. Support compliance with security and regulatory frameworks including ISO 27001, PCI DSS, OWASP and internal standards. Review security posture of vendors and outsourced services, providing due diligence and third-party risk assurance. Present security findings, risk opinions … security, secure application delivery, third-party risk management and access management practices. Experience applying recognised frameworks and standards such as ISO 27001, PCI DSS, OWASP, NIST and enterprise security control frameworks. Ability to translate complex technical risks into business language and provide clear, evidence-based recommendations. Exposure to contemporary architectures. ...

reporting. Coordinate remediation follow-up and retesting activities. Maintain accurate documentation, testing records, and asset inventories. Follow recognised security frameworks and testing methodologies, including OWASP and CREST-aligned practices. What They Are Looking For: Essential: Approximately 1-2 years of Cyber Security experience. Exposure to Vulnerability Assessment, Security Testing, Vulnerability … such as Nmap, Burp Suite, Kali Linux, Metasploit, Nikto, or Gobuster. Understanding of CVEs, CVSS scoring, vulnerability prioritisation, and remediation processes. Awareness of the OWASP Top 10 and common web application vulnerabilities. Strong written communication and report-writing skills. Desirable: CREST CPSA, CompTIA Security+, CompTIA PenTest+, eJPT, PNPT, or similar ...

governance, assurance, and risk evaluation Design cloud-based solutions using Azure and/or AWS Produce architectural documentation, models, and prototypes Ensure compliance with OWASP, NCSC, and GDPR standards Contribute to architecture governance, standards, and best practices Support stakeholder engagement, bids, and technical assurance activities Mentor junior engineers and architects … Defence, Government, or secure environments Active SC Clearance (essential) Strong experience delivering complex, enterprise-scale systems Knowledge of secure development lifecycles (SSDLC) Experience with OWASP, NCSC Cloud Principles, GDPR Strong cloud experience (Azure and/or AWS) Background in microservices, APIs, and integration patterns Experience with DevOps and CI/ ...

BrowserStack (cross-device/browser testing) Ruby Cucumber/Gherkin (BDD) Selenium API testing (REST, Postman/Newman) Accessibility testing (WAVE, Pa11y) Security testing (OWASP ZAP, Dependency Check) Confident using browser developer tools and debugging techniques Strong understanding of version control using Git Comfortable working in Agile delivery environments Desirable … maintaining automated browser tests using Selenium and Ruby. Performing accessibility testing using tools such as WAVE and Pa11y and conducting security testing using OWASP ZAP and Dependency Check. Validating RESTful APIs using Postman or Newman, along with using browser developer tools (Lighthouse, JavaScript debug console, etc.) to support functional ...

clients, and formal reports Assist senior penetration testers with research, evidence collection, and report writing Adhere to internal methodologies and industry frameworks, including NIST, OWASP, and CREST best practices What They're Looking For: 1-2 years' experience in vulnerability assessment, security testing, or junior penetration testing Good understanding … Familiarity with penetration testing tools including Kali Linux, Nmap, Burp Suite, Metasploit, Nikto, and Gobuster Understanding of CVEs, CVSS scoring, vulnerability prioritisation, and the OWASP Top 10 Ability to perform reconnaissance, enumeration, service analysis, and controlled validation of findings Strong written communication skills with the ability to produce clear technical ...

experience as a Pen Tester delivering assessments across web applications, APIs, infrastructure, and cloud environments. Strong understanding of common vulnerability classes, including the OWASP Top 10, authentication and authorisation flaws, input validation issues, and business logic vulnerabilities. Knowledge of penetration testing methodologies such as OWASP, PTES, and NIST, with practical ...