76 to 100 of 253 OWASP Jobs in the UK

such as IAM, cloud security, endpoint protection, SIEM, application security and vulnerability management, alongside working knowledge of frameworks such as NIST, ISO 27001 and OWASP Experience coordinating delivery across cloud, on-premise or hybrid technology environments and working effectively with security architects, engineers and business stakeholders Strong communication, organisation ...

infrastructure-as-code (e.g., terraform) Experience managing web application firewalls (e.g., Cloudflare) Awareness of common software security flaws and web application security best practices (OWASP top 10, CWE/SANS Top 25) Knowledge of CI/CD and DevOps principles and security considerations Experience of applying AI to your ...

related technical field. Deep understanding of networking (TCP/IP), operating systems (Linux/Windows/macOS), and web application security (OWASP Top 10). Practical experience securing resources in at least one major cloud provider (AWS, Azure, or GCP). Proficiency in Python, Bash, or similar languages for automation ...

achieving alignment across multiple product portfolios and stakeholder group. Desirable Skills Working knowledge of application and API security concepts, including common vulnerability classes (e.g., OWASP Top 10) and attack techniques (e.g., MITRE ATT&CK). Experience implementing or integrating security mechanisms such as authentication, authorization, and identity based access controls ...

threat landscape They need a working knowledge of AI-specific attack techniques and should be fluent in the reference frameworks, mainly the OWASP Top 10 for LLM Applications and MITRE ATLAS. Key threats include: Direct and indirect prompt injection Data and model poisoning Sensitive data leakage through prompts and outputs ...

threat landscape They need a working knowledge of AI-specific attack techniques and should be fluent in the reference frameworks, mainly the OWASP Top 10 for LLM Applications and MITRE ATLAS. Key threats include: Direct and indirect prompt injection Data and model poisoning Sensitive data leakage through prompts and outputs ...

design leadership. Deep understanding of AWS security, hybrid cloud design, and modern DevSecOps principles. Strong knowledge of frameworks such as NIST, ISO 27001, OWASP, and CIS. Experience designing and implementing secure, compliant PCI‐DSS solutions. Solid grounding in tools and technologies like SIEM, IDS/IPS, DLP, endpoint protection ...

Must have the ability to take ownership for high complexity Security Assessments. Ability to operate Spacelabs Medical Devices and Solutions. Secure Coding and Development (OWASP SAMM), MITRE/SANS Top 25) Secure Software Development Life Cycle Security Frameworks (ISO 2700x, NIST Special Publications) Static Code Analysis Cloud Development and Cloud ...

Framework), NIST AI RMF (National Institute of Standards and Technology Artificial Intelligence Risk Management Framework), ISO/IEC 42001 (Artificial Intelligence Management Systems Standard), OWASP LLM (Open Worldwide Application Security Project) guidance, MITRE ATLAS (Adversarial Threat Landscape for Artificial Intelligence Systems) and CSA (Cloud Security Alliance) frameworksExperience assessing security posture ...

oContinuous Integration (CI/CD)oPair programmingoCode reviewsoVersion control systems such as Git Knowledge of application security principles and common vulnerabilities, including the OWASP Top 10. Experience working within agile, multidisciplinary teams. A proactive approach to learning new technologies and sharing knowledge with colleagues. If you are an experienced Ruby ...

/CD)oPair programmingoCode reviewsoVersion control systems such as Git \n \n \n Knowledge of application security principles and common vulnerabilities, including the OWASP Top 10. \n \n \n Experience working within agile, multidisciplinary teams. \n \n \n A proactive approach to learning new technologies and sharing knowledge with colleagues. ...

/CD)oPair programmingoCode reviewsoVersion control systems such as Git \n \n \n Knowledge of application security principles and common vulnerabilities, including the OWASP Top 10. \n \n \n Experience working within agile, multidisciplinary teams. \n \n \n A proactive approach to learning new technologies and sharing knowledge with colleagues. ...

tracking engineering milestones, and delivering complex client reports on time. Direct experience building or securing AI/ML pipelines, utilizing AI security frameworks (e.g., OWASP Top 10 for LLMs, NIST AI RMF), or configuring secure cloud AI environments. Strong experience securing multi-cloud environments and reviewing Infrastructure as Code ...

NoSQL databases and ORM's. Good development experience with any contemporary web application framework. Strong experience delivering solutions within an Agile environment. Knowledge of OWASP and web security best practices. Solid experience with source code management, e.g., git. Using unit test frameworks (e.g., moq) and knowledge of TDD. Experience with ...

GitHub Actions Experience using AI coding tools such as Claude Code Systems design and integration experience Good knowledge of web security risks, including the OWASP Top 10 Experience diagnosing and fixing service faults Clear communication with non-technical colleagues Desirable: Experience building or running data services Experience in a multidisciplinary ...

Google Cloud. Familiarity with automation and orchestration tools such as Jenkins or Rundeck. Knowledge of web application security principles and practices, including OWASP guidance. Experience working in Agile teams and contributing to iterative service improvement. We value engineers who take ownership, communicate openly, support their colleagues and are enthusiastic about ...

practices, Agile, DevOps, SRE, DevSecOps, CI/CD, infrastructure as code and automated testing. Experience implementing secure engineering controls, including SAST, SCA, SBOM and OWASP principles, alongside observability and DORA metrics. Excellent technical leadership, communication and stakeholder management skills, with the confidence to influence across multiple teams without direct line ...

latest exploits, vulnerabilities (CVEs), and threatactor tactics Requirements Required Skills Strongproficiency in penetration testing tools (e.g., Kali Linux, BurpSuite, Metasploit, Nmap, Wireshark) Experiencewith OWASP Top 10 , vulnerability scanning, and exploit development Familiaritywith MITRE ATT&CK framework and red team methodology Solidknowledge of TCP/IP, firewalls, DNS, HTTP/HTTPS ...

Stakeholder management A quality-focused, shift-left mindset Desirable Skills Experience with any of the following would be beneficial: Playwright Gatling for performance testing OWASP ZAP for security testing Docker Kubernetes AWS Accessibility testing, including WCAG, WAVE ...

MySQL compatible DBs: MySQL, RDS, Aurora, MariaDB Build Pipeline automation, CI/CD Build Tooling: Helm, Terragrunt, Git, ArgoCD Government Cloud Security standards (NIST, OWASP, CIS, NCSC etc...) BASH, Python RESTful microservices IT Service Management #J-18808-Ljbffr ...

integration and vulnerability management. Knowledge of SAST, DAST, SCA and automated security testing. Understanding of cloud security, containers and modern application architectures. Familiarity with OWASP, ISO27001 and NCSC CAF. Awareness of emerging threats, AI security risks and software supply chain vulnerabilities. Location: Hybrid working, with travel to Warwickshire required ...

/CD lifecycle. You will also do some pre-release manual PenTesting and threat modelling work. You’ll need strong application security experience, including OWASP Top 10, Veracode or similar scanning tools, DevSecOps/CI/CD and cloud security across Azure and/or AWS. You will also need ...

/CD lifecycle. You will also do some pre-release manual PenTesting and threat modelling work. You’ll need strong application security experience, including OWASP Top 10, Veracode or similar scanning tools, DevSecOps/CI/CD and cloud security across Azure and/or AWS. You will also need ...

/CD lifecycle. You will also do some pre-release manual PenTesting and threat modelling work. You’ll need strong application security experience, including OWASP Top 10, Veracode or similar scanning tools, DevSecOps/CI/CD and cloud security across Azure and/or AWS. You will also need ...

review code and communicate security issues clearly to developers, primarily within a C# ecosystem, with exposure to Java or Python Strong knowledge of the OWASP Top 10 and practical mitigation patterns Experience implementing or improving SAST/DAST processes: tool tuning, triage workflows, and reducing signal to noise Working understanding ...