51 to 75 of 253 OWASP Jobs in the UK

your background might be better suited to. 5+ years ofrelevantexperienceinthe medical devicespace (eitherindustryor through consulting/service provider) Proficiency in security frameworks (e.g., NIST, OWASP, MITRE ATT&CK, PASTA, STRIDE) and standards such as FDA cybersecurity guidance Experience assessing security risks using industry standard methods (penetration test results, threat modeling ...

Comfortable learning new languages, tools and observability technologies as required. Nice to Have: Experience with AWS or GCP; GraphQL, gRPC or REST API design; OWASP and GDPR; or mobile and web performance optimisation. MEASURES & GOALS: (HOW WILL THE SUCCESS OF THE PERSON IN THIS POSITION BE MEASURED – WHAT ...

systems, alongside broader governance, risk and compliance work Working knowledge of NIST frameworks Practical use of AI security and control frameworks such as the OWASP Top 10 for LLMs and MITRE ATLAS A drive to deliver rigorous assurance quickly and at scale SC clearance, or eligibility to obtain it Desirable ...

Code (Terraform knowledge beneficial). CI/CD pipeline experience (GitHub Actions, SonarQube for test coverage). Performance and security testing knowledge - familiarity with OWASP and monitoring tools. ...

frameworks including Selenium, Cypress, Postman, or REST Assured. Familiarity with performance testing tools such as k6, JMeter, Gatling, or NeoLoad. Understanding of DevSecOps principles, OWASP, SAST/DAST, SonarQube, and Snyk. Active SC Clearance is essential. What's on Offer: Hybrid working from Telford. Opportunity to deliver critical government ...

MySQL Amazon RDS Amazon Aurora MariaDB CI/CD and build pipeline automation Tooling including: Helm Terragrunt Git ArgoCD Government cloud security standards: NIST OWASP CIS NCSC BASH scripting Python development RESTful microservices IT Service Management (ITSM) Leadership & Product Management Proven ability to lead teams in the design, implementation, administration ...

programmes. Experience conducting threat modelling and architecture security reviews. Deep understanding of application security principles, attack techniques, and risk management. Hands-on experience with OWASP Top 10, SAST, DAST, SCA, Container Security, Infrastructure as Code Security, CI/CD Security, and API Security. Experience securing cloud-native environments, particularly ...

programmes. Experience conducting threat modelling and architecture security reviews. Deep understanding of application security principles, attack techniques, and risk management. Hands-on experience with OWASP Top 10, SAST, DAST, SCA, Container Security, Infrastructure as Code Security, CI/CD Security, and API Security. Experience securing cloud-native environments, particularly ...

Kubernetes). Incident & Penetration Expertise: Experience leading incident response and management, with familiarity in pen testing of applications and infrastructure. Application Security: Familiarity with OWASP principles, web application security, security practices on native mobile apps (iOS and Android), and security-by-design principles. Tooling & Threat Landscape: Familiarity with project management ...

Kubernetes). Incident & Penetration Expertise: Experience leading incident response and management, with familiarity in pen testing of applications and infrastructure. Application Security: Familiarity with OWASP principles, web application security, security practices on native mobile apps (iOS and Android), and security-by-design principles. Tooling & Threat Landscape: Familiarity with project management ...

management within a software development or SaaS environment. Practical understanding of Security by Design (SbD) concepts, threat modelling principles, and application security baselines (e.g., OWASP, ISO 27001, NIST). Familiarity with modern software development lifecycles (SDLC), cloud hosting platforms (AWS, Azure, or GCP), and production service operations. Excellent stakeholder engagement ...

/Security Hub. Strong coding ability in TypeScript or Python or Go comfortable shipping production code, not just configs and scripts. Application security fluency: OWASP Top 10, threat modeling, and code‐level reviews on real systems. Experience securing a B2B SaaS multi‐tenant production environment. Comfort owning ...

achieving alignment across multiple product portfolios and stakeholder group**Desirable Skills** * Working knowledge of application and API security concepts, including common vulnerability classes (e.g., OWASP Top 10) and attack techniques (e.g., MITRE ATT&CK)* Experience implementing or integrating security mechanisms such as authentication, authorization, and identity based access controls within ...

monitoring. Experience applying AI/ML to security workflows – automated triage, behavioural analytics, or LLM‐assisted investigation. Understanding of AI security risks and frameworks: OWASP LLM Top 10, NIST AI RMF. Scripting proficiency in Python, PowerShell, or Bash for security automation. Strong grasp of PCI DSS, NIST ...

platforms Proven expertise in secure coding, endpoint protection, SIEM and IAM Familiarity with frameworks and standards such as ISO 27001, NIST and OWASP, alongside an understanding of responsible AI, security guardrails and human-in-the-loop controls Proficiency in Python, Bash, PowerShell or Go for security automation and tool development ...

engagement, and plan testing that meets their assurance needs. Apply manual and tool-assisted testing techniques aligned with recognised methodologies and frameworks, including the OWASP Web Security Testing Guide, PTES, and MITRE ATT&CK. Deliver Cyber Essentials Plus assessments, including scoping, conducting the required technical tests, verifying remediation and supporting ...

JavaScript and/or Groovy); ability to build custom components and integrations. Experience with web/application security fundamentals: TLS/certificates, cookies, sessions, OWASP basics, and secure coding practices. Working knowledge of Linux, networking basics (DNS, Firewall rules, reverse proxies/load balancers), and troubleshooting in distributed environments. Experience ...

/CD, automated testing, code quality controls, observability, incident diagnosis, reliability engineering and DevSecOps practices. Knowledge of application security, identity and access management, OWASP guidance, threat modelling, privacy by design and relevant compliance requirements. Experience producing high‐quality architecture artefacts, including context and container views, integration diagrams, data‐flow diagrams ...

vulnerability management, network security, business continuity and monitoring. Experience assessing and evidencing controls against recognised frameworks such as NIST CSF, CIS Controls, ISO 27001, OWASP SAMM, NIST AI RMF and related standards. Ability to prioritise findings based on business impact, exploitability, remediation effort and financial exposure. Expertise ...

application security field Bachelors or Master Degree in related field of expertise Knowledge of secure coding best practices and industry standards (such as OWASP) and the ability to apply them to different programming languages Familiarity with SDLC and DevSecOps concepts and hands-on experience in implementing them Knowledge and/ ...

5+ years of relevant experience in the medical devicespace (either industry or through consulting/service provider). Proficiency in security frameworks (e.g., NIST, OWASP, MITRE ATT&CK, PASTA, STRIDE) and standards such as FDA cybersecurity guidance. Experience assessing security risks using industry standard methods (penetration test results, threat modelling ...

improving the security of production software or cloud infrastructure Application and API security depth. Strong command of common web and API vulnerabilities including the OWASP Top 10, and practical knowledge of authentication, authorisation, sessions, secrets and encryption Cloud security. Hands-on experience securing AWS or another major cloud platform, including ...

Security information and event management IAM – Identity and access management VA – Vulnerability Analysis and mitigation Application Security experience (highly desirable) Cloud Security (Highly desirable) OWASP (Highly desirable) #J-18808-Ljbffr ...

including containment, investigation, communication and the follow-up, and you stay clear-headed under pressure. You take application and AI security seriously. You understand OWASP-class vulnerabilities, and you're interested in the new risks that come with LLM agents, such as prompt injection and over-broad tool access. ...

such as IAM, cloud security, endpoint protection, SIEM, application security and vulnerability management, alongside working knowledge of frameworks such as NIST, ISO 27001 and OWASP Experience coordinating delivery across cloud, on-premise or hybrid technology environments and working effectively with security architects, engineers and business stakeholders Strong communication, organisation ...