25 of 25 Contract OWASP Jobs in the UK excluding London

similar security testing tools. Knowledge of SAST, DAST, SCA and vulnerability management. Understanding of cloud-hosted applications, containers and modern architectures. Familiarity with OWASP, ISO27001 and NCSC CAF frameworks. Strong stakeholder engagement and communication skills. Awareness of software supply chain threats, cloud security and emerging AI-related risks. Exposure ...

segmentation, and host security. Hands on experience with the following security products Trellix, Ivanti, ClearSwift, Yubikey Understanding of secure coding practices and common vulnerabilities (OWASP Top 10, SANS Top 25). Expertise in identity and access management (IAM), including RBAC, ABAC, JWT and Cookie based authentication. Incident detection and response ...

Experience delivering large-scale digital transformation programmes. Kubernetes. Terraform. Infrastructure as Code. CI/CD automation and deployment pipelines. Application security best practices, including OWASP Top 10 awareness and secure-by-design principles. Experience within regulated or public-sector environments. Reasonable Adjustments: Respect and equality are core values to us. ...

Desirable Technical Skills Experience with any of the following would be advantageous: Test Automation: Playwright, Selenium, JUnit, Cucumber/Gherkin Performance & Security Testing: Gatling, OWASP ZAP, SonarQube Accessibility Testing: Axe, WAVE, WCAG Development & Testing Tools: WireMock, GitHub Copilot, OpenAPI Cloud & Infrastructure: AWS, Docker, Kubernetes, Microservices Contract Details Rate ...

Code (Terraform knowledge beneficial). CI/CD pipeline experience (GitHub Actions, SonarQube for test coverage). Performance and security testing knowledge - familiarity with OWASP and monitoring tools. ...

frameworks including Selenium, Cypress, Postman, or REST Assured. Familiarity with performance testing tools such as k6, JMeter, Gatling, or NeoLoad. Understanding of DevSecOps principles, OWASP, SAST/DAST, SonarQube, and Snyk. Active SC Clearance is essential. What's on Offer: Hybrid working from Telford. Opportunity to deliver critical government ...

NoSQL databases and ORM's. Good development experience with any contemporary web application framework. Strong experience delivering solutions within an Agile environment. Knowledge of OWASP and web security best practices. Solid experience with source code management, e.g., git. Using unit test frameworks (e.g., moq) and knowledge of TDD. Experience with ...

Stakeholder management A quality-focused, shift-left mindset Desirable Skills Experience with any of the following would be beneficial: Playwright Gatling for performance testing OWASP ZAP for security testing Docker Kubernetes AWS Accessibility testing, including WCAG, WAVE ...

Experience working with security monitoring, vulnerability management and incident response processes. Scripting or automation experience using Python, JavaScript, C# or similar . Familiarity with OWASP, ISO27001 and NCSC CAF frameworks. Exposure to Palo Alto Cortex XDR/Cloud Security would be advantageous. Experience of GCP environments is desirable. What ...

Microsoft Azure Entra ID Vercel Firewall configuration and security controls SIEM technologies; Terraform or other Infrastructure-as-Code DevSecOps CI/CD security OWASP PCI DSS AWS security certifications Working Approach & Key Outcomes 3 months initially AWS Engineer, Security Engineer, AWS Security Engineer, Web, Online, Digital, E-commerce, e.commerce ...

tools. • Experience with Continuous Security, Continuous Integration and Continuous Delivery techniques. • Experience of network security (e.g. OSI, TCP/IP), web application security (e.g. OWASP) and cryptographic controls (e.g. PKI, TLS). • We are passionate about developing people – a demonstrated ability in managing, mentoring and coaching members of your team ...

automated testing, test driven development (TDD), continuous integration, pair programming, code review and version control Understanding of common web security risks such as OWASP Top 10, and the corresponding mitigations Enjoy researching and learning new programming tools and techniques and sharing their skills with others Have experience working ...

performance Familiarity with agent-to-agent orchestration protocols or the Model Context Protocol (MCP) Awareness of secure-by-design frameworks (ISO 27001, NIST, OWASP) Open-source AI/ML contributions Why Apply Real technical ownership: shape the architecture, not just work through a backlog Work at the leading edge ...

performance Familiarity with agent-to-agent orchestration protocols or the Model Context Protocol (MCP) Awareness of secure-by-design frameworks (ISO 27001, NIST, OWASP) Open-source AI/ML contributions Why Apply Real technical ownership: shape the architecture, not just work through a backlog Work at the leading edge ...

with the ability to work across multidisciplinary teams. Desirable Experience Experience with tools and technologies such as JUnit, Playwright, Selenium, Cucumber, Gatling, WireMock, SonarQube, OWASP ZAP, Docker, Kubernetes, AWS or Java would be advantageous. If you're a Quality Engineer with strong automation and data migration testing experience, looking ...

skills, knowledge and experience will you need? Demonstrative experience of conducting structured penetration tests following 2 out of 3 of the following established frameworks (OWASP, NIST Cybersecurity Framework, PTES). Experience in planning, executing and documenting security assessments with minimal supervision. Understanding of NIST SP 800-115 for technical security ...

skills, knowledge and experience will you need? Demonstrative experience of conducting structured penetration tests following 2 out of 3 of the following established frameworks (OWASP, NIST Cybersecurity Framework, PTES). Experience in planning, executing and documenting security assessments with minimal supervision. Understanding of NIST SP 800-115 for technical security ...

skills, knowledge and experience will you need? Demonstrative experience of conducting structured penetration tests following 2 out of 3 of the following established frameworks (OWASP, NIST Cybersecurity Framework, PTES). Experience in planning, executing and documenting security assessments with minimal supervision. Understanding of NIST SP 800-115 for technical security ...

frameworks for Web, Mobile, and Microservices APIs. Testing Strategy & CI/CD: Drive TDD/BDD practices, execute non-functional testing (Performance, Security/OWASP), and integrate automated suites into CI/CD pipelines. Engineering Standards: Review backlogs to build risk-based test strategies, mentor engineers, and partner with developers ...

Experience with vulnerability scanning, secure configuration assessments and remediation tracking. An understanding of common attack techniques, security monitoring and incident response. Knowledge of the OWASP Top 10 and recognised cyber security principles. An understanding of the NIST Cybersecurity Framework and NIS Regulations. Experience working towards Cyber Essentials. The ability ...

engagement, and plan testing that meets their assurance needs. * Apply manual and tool-assisted testing techniques aligned with recognised methodologies and frameworks, including the OWASP Web Security Testing Guide, PTES, and MITRE ATT&CK. * Deliver Cyber Essentials Plus assessments, including scoping, conducting the required technical tests, verifying remediation and supporting ...

mobile security standards and practices Technical Skills Mobile Development Kotlin Android Swift iOS SwiftUI UIKit Jetpack Android SDK Swift Package Manager Mobile Security OWASP Mobile Top 10 OWASP MASVS Mobile Application Security Secure Coding Threat Modelling Authentication & Authorisation Encryption Secure Storage Certificate Pinning Biometrics Android Keystore iOS Keychain Device Integrity ...

Skills & Experience Strong background in DevSecOps, Application Security or Integration Security. Expertise in OAuth2, OIDC, JWT and API Security . Strong knowledge of OWASP Top 10 and OWASP API Security Top 10 . Experience securing AWS environments, including IAM, networking and hybrid integrations. Ability to review code across Java, Kotlin ...

similar hands-on cyber security role Strong experience with SAST, DAST, and SCA tools such as Checkmarx, Snyk, Semgrep, Burp Suite, or OWASP ZAP Experience integrating automated security testing and controls into CI/CD pipelines Demonstrable ability to investigate, validate, and remediate application security vulnerabilities Experience with attack surface … vulnerabilities Awareness of emerging AI security risks, including prompt injection, data poisoning, and vulnerabilities affecting large language models Familiarity with security frameworks such as OWASP Top 10 and MITRE ATLAS would be advantageous Excellent communication and stakeholder management skills, with the ability to work collaboratively across technical teams Apply ...

security risk and assurance, including LLM and agentic AI threat modelling, with knowledge of NIST AI RMF, ISO/IEC 42001 and OWASP guidance for LLM applications Experience supporting complex transformation programmes Energy and drive, with a real appetite for improving how a team works Desirable: Experience in a large … highly regulated organisation Knowledge of ISO 27001, NIST and OWASP CISSP, CISM or equivalent Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success ...