1 to 25 of 153 Permanent OWASP Jobs in England

utilise them In-depth knowledge of security principles, technologies, best practices, and threat detection and mitigation strategies Knowledge of common attack vectors and methodologies (OWASP Top 10, MITRE ATT&CK Framework and social engineering tactics) The ability to identify potential threats, attack vectors and vulnerabilities in systems and applications ...

utilise them In-depth knowledge of security principles, technologies, best practices, and threat detection and mitigation strategies Knowledge of common attack vectors and methodologies (OWASP Top 10, MITRE ATT&CK Framework and social engineering tactics) The ability to identify potential threats, attack vectors and vulnerabilities in systems and applications ...

programming and FastAPI, plus unit testing with Pytest. Experience applying security standards and SDLC controls to software platforms. Experience identifying vulnerabilities using CWE or OWASP, hardening operating systems, and designing or reviewing technical architectures. Working knowledge of agile/DevOps delivery, Jira, CDK/GitOps, penetration testing and technologies such ...

threat modeling methodologies and techniques, including STRIDE, PASTA, attack trees, threat modeling tools, and MITRE ATT&CK. Experience identifying vulnerabilities using CWE and OWASP guidance. Practical experience in a cyber-security role. Strong understanding of authentication, authorization, logging and monitoring, encryption, infrastructure security, and network segmentation. Experience with scripting languages ...

LLMOps experience (SageMaker, Kubeflow, ZenML). Prometheus or other observability tooling. AWS Karpenter and Compute Optimizer experience. Knowledge of ISO 27001, NIST or OWASP frameworks. Experience working within Defence or other secure environments. If you're an SC-cleared DevOps Engineer looking to take ownership of cloud platforms and work ...

Familiarity with CFTC system safeguards expectations, including 17 C.F.R. § 38.1051 and § 39.18 or similar regulatory requirements. AppSec Foundations: Strong grasp of application security principles (OWASP Top 10, NIST) and secure SDLC practices. CI/CD & Tooling: Proficiency with CI/CD tooling (GitHub Actions, GitLab CI, Jenkins, Azure DevOps, CircleCI ...

with Terraform and infrastructure-as-code at scale Strong understanding of Kubernetes architecture and operating containerised workloads in cloud environments Good understanding of DevSecOps, OWASP principles and security‐by‐design Experience designing and implementing monitoring, logging and observability solutions Strong scripting skills using Python, Bash, PowerShell or similar Experience making ...

with Terraform and infrastructure-as-code at scale Strong understanding of Kubernetes architecture and operating containerised workloads in cloud environments Good understanding of DevSecOps, OWASP principles and security-by-design Experience designing and implementing monitoring, logging and observability solutions Strong scripting skills using Python, Bash, PowerShell or similar Experience making ...

distributed security culture across engineering. What you would bring - Strong hands-on experience in application security, with a solid understanding of secure software development, OWASP Top 10, common application vulnerabilities and secure SDLC practices. Proficiency in one or more programming languages, such as Python or JavaScript, with experience using code ...

segmentation, and host security. Hands on experience with the following security products Trellix, Ivanti, ClearSwift, Yubikey Understanding of secure coding practices and common vulnerabilities (OWASP Top 10, SANS Top 25). Expertise in identity and access management (IAM), including RBAC, ABAC, JWT and Cookie based authentication. Incident detection and response ...

information security, with a strong focus on application security and DevSecOps Strong understanding of secure software development practices and common application security risks (e.g. OWASP Top 10) Hands-on experience working with or integrating DevSecOps tooling within CI/CD environments (e.g. GitLab pipelines) Experience with application security testing tools ...

protocols, and operating systems. Experience with cloud platforms (AWS, Azure, GCP) and containerized environments (Docker, Kubernetes). Solid understanding of common vulnerabilities and exposures (OWASP Top 10, SANS Top 25) and secure coding practices in at least on major language stack (e.g. Java/Springboot, .NET, JavaScript/Node, Python ...

your background might be better suited to. 5+ years ofrelevantexperienceinthe medical devicespace (eitherindustryor through consulting/service provider) Proficiency in security frameworks (e.g., NIST, OWASP, MITRE ATT&CK, PASTA, STRIDE) and standards such as FDA cybersecurity guidance Experience assessing security risks using industry standard methods (penetration test results, threat modeling ...

continuous deployment (CI/CD) Experience with security testing tools, such as static Code analysis and dynamic Application security testing (DAST) Strong understanding of OWASP Top 10, application security vulnerabilities and web security testing methodologies Understanding of secure coding practices for compliance requirements within SOC2, ISO, HIPAA, HITRUST, etc. Able ...

/Security Hub. Strong coding ability in TypeScript or Python or Go comfortable shipping production code, not just configs and scripts. Application security fluency: OWASP Top 10, threat modeling, and code‐level reviews on real systems. Experience securing a B2B SaaS multi‐tenant production environment. Comfort owning ...

conducting threat modelling (e.g. STRIDE, attack trees) and risk analysis Strong understanding of security frameworks and best practice such as ISO 27001, NIST, CIS, OWASP, NCSC guidance Experience working in the UK Public Sector and associated security standards and guidance including GovAssure/NCSC CAF, HMG Security Policy Framework. Knowledge ...

communication skills Proven team engagement skills Proven coaching skills Quality Driven Adaptable/ability to context switch Stakeholder Management Optional Skills: Junit Playwright Gatling OWASP Zap SonarQube GitHub Copilot Wiremock Wave Axe Kubernetes Docker Micro-services AWS Open API WCAG Cucumber/Gherkin Selenium Agile Scrum Agile Practices #J ...

multidisciplinary teams. Strong communication skills. Desirable: Performance tools such as JMeter, k6 or Gatling. Accessibility testing to WCAG 2.2. Security testing tools, such as OWASP ZAP. Experience delivering services to the GDS Service Standard. AWS or Azure experience. Experience mentoring other testers. Why Join Scrumconnect Ltd? At Scrumconnect ...

preferred; AWS or Google Cloud also valuable), including deployment, monitoring, and scaling of microservices and web applications. Deep understanding of secure coding practices (e.g. OWASP), privacy, auditability, and regulatory expectations in financial services or similarly regulated environments. Strong experience with observability, SLOs, incident management, and operational excellence (logging, tracing, metrics ...

Jenkins, AWS CodePipeline, GitLab CI, or GitHub Actions* Solid understanding of relational and NoSQL databases (e.g., PostgreSQL, MongoDB)* Knowledge of security best practices (e.g. OWASP) and performance optimization* Excellent leadership, communication, time management and mentoring skills, with the ability to influence technical direction **Desirable Qualifications*** Experience in fintech, payments ...

Jenkins, AWS CodePipeline, GitLab CI, or GitHub Actions Solid understanding of relational and NoSQL databases (e.g., PostgreSQL, MongoDB) Knowledge of security best practices (e.g. OWASP) and performance optimization Excellent leadership, communication, time management and mentoring skills, with the ability to influence technical direction Desirable Qualifications Experience in fintech, payments ...

product and adapt to changing priorities. Desirable Technologies Experience with any of the following would be advantageous: JUnit | Playwright | Selenium | Cucumber/Gherkin | Gatling | OWASP ZAP | SonarQube | WireMock | Axe | WCAG | Kubernetes | Docker | Microservices | AWS | OpenAPI | GitHub Copilot The Opportunity This is an excellent opportunity for a Quality Engineer with strong ...

.* Proficient in programming languages like C/C++, Java, JS, Python, Go, or Rust* Possess a deep understanding of common vulnerability frameworks (OWASP Top 10, SANS CWE Top 25).* Solid grasp of enterprise software development, Agile, CI/CD pipelines, and security tooling (SAST, DAST, OSA, Vulnerability Management ...

specific threats and controls, such as prompt injection, data leakage through AI tooling, model and supply chain risk, and frameworks such as the OWASP Top 10 for LLM Applications and MITRE ATLAS.Familiarity with regulatory frameworks and industry standards (e.g., NIST, CIS, etc.).Strong analytical and problem-solving skills.Excellent communication ...

specific threats and controls, such as prompt injection, data leakage through AI tooling, model and supply chain risk, and frameworks such as the OWASP Top 10 for LLM Applications and MITRE ATLAS. Familiarity with regulatory frameworks and industry standards (e.g., NIST, CIS, etc.). Strong analytical and problem-solving skills. ...