6 of 6 Remote Contract OWASP Jobs

cloud-native environments (e.g., AWS or Azure) including IAM, network policies, and container security. Proven track record of using tools such as Snyk, Trivy, Checkov, OPA/Gatekeeper/OWASP ZAP, or similar to enforce pipeline and platform security. Familiarity with compliance requirements (e.g., NIST, ISO 27001, CIS Benchmarks) and their implementation via code. Ability to lead and mentor teams More ❯

audit and privacy policies and regulations General knowledge of security technology Nice to have: Experience with PowerBI Programming skills and experience (python, java, SQL) Technical network skills Knowledge of OWASP, SANS, NIST, ISO 27001, ISF or other security-related practices Previous Banking/Financial Industry experience CISSP, CISA, CRISC, CSSLP, SABSA certifications Skills & Competencies: Vulnerability management Risk reporting Programming Data More ❯

Risk acceptance etc) You must have experience of software architecture/network architecture/Security application controls/Ability to read HLD' of security applications to understand security risks. OWASP TOP 10, CCS, background in encryption. Key Responsibilities Conduct Application Risk Assessments (ISARA) in line with global security standards and frameworks Serve as the liaison between IS, IT, and business … level security risk assessments Strong understanding of: Secure software and network architecture Risk management frameworks (eg ISO 3100X, NIST 800-30/37/39, ENISA, EBIOS, OCTAVE, FAIR) OWASP Top 10, encryption, data classification, and secure data flows Ability to read and interpret HLDs/LLDs to identify risk controls and gaps Expertise with Microsoft Office suite (Excel, Word More ❯

knowledge of network and cloud infrastructure security. Up-to-date on the latest cybersecurity threats and technologies. Strong knowledge in pen testing tools ( Metasploit, Nmap, Wireshark, Burp Suite, Nessus, OWASP ZAP, Eyewitness, Nessus, sqlmap, kali linux, etc) Ideally certified – eg OSCP, CRTP, CPPT, CEH, CISSP, OSWP, eJPT, eWPT Good reporting and security debriefing skills A passion for cybersecurity and a More ❯

knowledge of network and cloud infrastructure security. Up-to-date on the latest cybersecurity threats and technologies. Strong knowledge in pen testing tools ( Metasploit, Nmap, Wireshark, Burp Suite, Nessus, OWASP ZAP, Eyewitness, Nessus, sqlmap, kali linux, etc) Ideally certified eg OSCP, CRTP, CPPT, CEH, CISSP, OSWP, eJPT, eWPT Good reporting and security debriefing skills A passion for cybersecurity and a More ❯

Contract Opportunity: Security Architect (Outside IR35, 6 Months) Bristol (Hybrid) Are you passionate about designing secure systems and embedding security at every stage of product development? We're seeking a Security Architect to join a forward-thinking organisation working on More ❯