11 of 11 Contract OWASP Jobs in the South East

Experience delivering large-scale digital transformation programmes. Kubernetes. Terraform. Infrastructure as Code. CI/CD automation and deployment pipelines. Application security best practices, including OWASP Top 10 awareness and secure-by-design principles. Experience within regulated or public-sector environments. Reasonable Adjustments: Respect and equality are core values to us. ...

Code of Practice and NCSC cloud security principles. Understanding of ITIL 4, SIAM principles, ISO/IEC 27001, ISO/IEC 20000-1 and OWASP practices. Strong stakeholder management and communication skills, with the ability to explain complex technical matters clearly to technical and non-technical audiences. Ability to provide ...

tools. • Experience with Continuous Security, Continuous Integration and Continuous Delivery techniques. • Experience of network security (e.g. OSI, TCP/IP), web application security (e.g. OWASP) and cryptographic controls (e.g. PKI, TLS). • We are passionate about developing people – a demonstrated ability in managing, mentoring and coaching members of your team ...

automated testing, test driven development (TDD), continuous integration, pair programming, code review and version control Understanding of common web security risks such as OWASP Top 10, and the corresponding mitigations Enjoy researching and learning new programming tools and techniques and sharing their skills with others Have experience working ...

performance Familiarity with agent-to-agent orchestration protocols or the Model Context Protocol (MCP) Awareness of secure-by-design frameworks (ISO 27001, NIST, OWASP) Open-source AI/ML contributions Why Apply Real technical ownership: shape the architecture, not just work through a backlog Work at the leading edge ...

performance Familiarity with agent-to-agent orchestration protocols or the Model Context Protocol (MCP) Awareness of secure-by-design frameworks (ISO 27001, NIST, OWASP) Open-source AI/ML contributions Why Apply Real technical ownership: shape the architecture, not just work through a backlog Work at the leading edge ...

frameworks for Web, Mobile, and Microservices APIs. Testing Strategy & CI/CD: Drive TDD/BDD practices, execute non-functional testing (Performance, Security/OWASP), and integrate automated suites into CI/CD pipelines. Engineering Standards: Review backlogs to build risk-based test strategies, mentor engineers, and partner with developers ...

engagement, and plan testing that meets their assurance needs. * Apply manual and tool-assisted testing techniques aligned with recognised methodologies and frameworks, including the OWASP Web Security Testing Guide, PTES, and MITRE ATT&CK. * Deliver Cyber Essentials Plus assessments, including scoping, conducting the required technical tests, verifying remediation and supporting ...

Skills & Experience Strong background in DevSecOps, Application Security or Integration Security. Expertise in OAuth2, OIDC, JWT and API Security . Strong knowledge of OWASP Top 10 and OWASP API Security Top 10 . Experience securing AWS environments, including IAM, networking and hybrid integrations. Ability to review code across Java, Kotlin ...

similar hands-on cyber security role Strong experience with SAST, DAST, and SCA tools such as Checkmarx, Snyk, Semgrep, Burp Suite, or OWASP ZAP Experience integrating automated security testing and controls into CI/CD pipelines Demonstrable ability to investigate, validate, and remediate application security vulnerabilities Experience with attack surface … vulnerabilities Awareness of emerging AI security risks, including prompt injection, data poisoning, and vulnerabilities affecting large language models Familiarity with security frameworks such as OWASP Top 10 and MITRE ATLAS would be advantageous Excellent communication and stakeholder management skills, with the ability to work collaboratively across technical teams Apply ...

security risk and assurance, including LLM and agentic AI threat modelling, with knowledge of NIST AI RMF, ISO/IEC 42001 and OWASP guidance for LLM applications Experience supporting complex transformation programmes Energy and drive, with a real appetite for improving how a team works Desirable: Experience in a large … highly regulated organisation Knowledge of ISO 27001, NIST and OWASP CISSP, CISM or equivalent Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success ...