1 to 25 of 50 Permanent OWASP Jobs in England

Docker and/or Kubernetes Development Practices - Mandatory RESTful API design, development, and life cycle management Secure development - SAST/DAST tooling, code review, OWASP awareness Technical documentation to a high standard On-site in Taunton, Somerset - 2 days per week minimum Desirable Skills & Experience Legacy Windows technologies - Win32 ...

/CD pipelines, version control (Git), and modern deployment practices. Familiarity with security best practices relevant to web and mobile applications (e.g. OWASP Top 10). Excellent communication skills, able to articulate technical decisions clearly to both technical and non-technical stakeholders. Experience working within Agile or cross-functional delivery ...

Experience conducting threat modeling, secure design reviews, and engineering‐focused risk assessments Familiarity with industry standards and frameworks such as ISO 27001, SOC 2, OWASP, and NIST CSF Experience supporting digital product teams or client‐facing technology delivery units; knowledge of privacy and data protection regulations (e.g., GDPR, CCPA ...

with internal and third‐party systems using APIs and event‐driven patterns where appropriate. Drive performance, resilience, accessibility, and security improvements; ensure compliance with OWASP and secure SDLC practices. Collaborate with stakeholders to translate business needs into pragmatic technical solutions and delivery plans. Oversee CI/CD, environment management ...

conducting threat modelling (e.g. STRIDE, attack trees) and risk analysis Strong understanding of security frameworks and best practice such as ISO 27001, NIST, CIS, OWASP, NCSC guidance Experience working in the UK Public Sector and associated security standards and guidance including GovAssure/NCSC CAF, HMG Security Policy Framework. Knowledge ...

wireless, and mobile security testing. Experience leading security teams and managing the delivery of offensive security engagements. Deep understanding of penetration testing methodologies including OWASP Testing Guide, PTES, and OSSTMM. Experience working within Red Team, Blue Team, and Purple Team environments. Strong knowledge of common attack techniques, threat emulation, vulnerability ...

distributed systems, scalability, resilience and performance tuning Experience with cloud-native applications, Docker, Kubernetes and CI/CD Strong knowledge of application security, OWASP principles and secure development practices Knowledge of a modern front-end node-based framework Other Information Permanent role – 37.5 hours per week. Monday to Friday ...

Excellent communication and coaching skills Stakeholder engagement and collaboration Experience with some of the following is highly desirable: JUnit, Playwright, Selenium, Cucumber Postman, Gatling, OWASP ZAP Docker/Kubernetes Azure and/or AWS Accessibility standards and tooling (WCAG, Wave, Axe) About you Passionate about quality and engineering excellence Comfortable ...

risks, with a focus on recommendations for enhancements or remediation, and proficiency in multiple security assessment methodologies (e.g., Open Worldwide Application Security Project (OWASP) Top Ten, National Institute of Standards and Technology (NIST) Cybersecurity Framework), offensive testing tools, or resiliency testing equivalents Excellent communication, collaboration, and report writing skills, with ...

automated testing using tools such as NUnit, Jasmine and Selenium Good knowledge of SOLID principles Desirable Skills: Containers (docker, K8s) Security best practice (OWASP top ten) OpenIDConnect/Identity server MS SQL Server Azure DevOps, TeamCity Infrastructure as Code (Bicep, ARM templates, Terraform) Please apply now or contact (url removed ...

with AI and agentic security risks (prompt injection, data poisoning, model and agent governance). Have experience mapping security frameworks (NIST CSF, ISO 27001, OWASP, NIST AI RMF). Have hands‐on exposure to detection and response, red‐team, or pen‐test work. Have experience with our stack: Azure/ ...

evolving internal processes and methodologies What They Are Looking For: Essential: 3-5 years of hands-on penetration testing experience Strong understanding of OWASP and vulnerability testing standards Proficiency with tools such as Kali, Burp Suite, Nmap, Nessus, Metasploit Knowledge of cloud platform testing (AWS, Azure, GCP) Strong reporting ...

security incidents Good understanding of network security technologies including Firewalls, IDS/IPS, WAF and VPNs Knowledge of secure software development, application security and OWASP principles Experience working with Identity & Access Management (IAM) Knowledge of security frameworks such as ISO27001, NIST or NIS2 Experience within regulated environments would be advantageous ...

business terms to exec and board audiences, and technical terms to engineers, without losing precision in either direction. Technical foundation Strong AppSec expertise (OWASP, API security, SAST/DAST, SDLC) with practical threat modelling experience – enough to challenge and coach our most senior application security engineers. Hands‐on understanding ...

Microsoft Purview • Background in eComm, marketplace, or retail technology • Scripting (Python, PowerShell), Terraform, or detection-as-code experience • Familiarity with NIST CSF, ISO 27001, OWASP LLM Top 10, or similar frameworks What's on Offer for the Security Engineer • Real ownership — a genuine mandate to drive change, with the tooling ...

practices Collaborate with engineering teams to deliver resilient and scalable solutions Security & Platform Focus Areas Implement perimeter security using Azure Front Door WAF, including OWASP Top 10 protection and bot mitigation Analyse WAF rules, manage false positives, and work with stakeholders to refine policies Define and enforce Azure Policies ...

government standards Writing clean, maintainable, and reusable code/configuration Supporting issue investigation, resolution, and continuous improvement Applying secure development practices, including awareness of OWASP principles Collaborating with stakeholders and clearly communicating technical concepts Tech and environment: Microsoft Power Platform (Power Apps, Power Automate, Dataverse) Integration with wider enterprise systems ...

contact for projects and stakeholders Support audits and regulatory reviews Domains of Expertise Identity & Access Management (IAM, IGA, PAM, federation) Application Security (Secure SDLC, OWASP) Infrastructure & Platform Security (Cloud, Networks) PKI & Cryptography Profile Qualifications 5-10+ years cyber security experience Strong risk assessment and secure‐by‐design background Experience ...

ViTest) Contributing to CI/CD pipeline improvements and secure deployment practices Participating in architecture and technical design reviews Ensuring all development aligns with OWASP security best practices Tech Stack & Environment Core technologies: .NET 10/ASP.NET Core Angular 21 (mandatory) DevExpress DevExtreme v25 (mandatory) Entity Framework Core TypeScript/ ...

influencing technical direction. Experience using AI to accelerate software delivery. Bonus Points For Cyber security or regulated industry experience. Kubernetes and cloud-native technologies. OWASP, ISO 27001 or IEC 62443. Open-source contributions. ...

influencing technical direction. Experience using AI to accelerate software delivery. Bonus Points For Cyber security or regulated industry experience. Kubernetes and cloud-native technologies. OWASP, ISO 27001 or IEC 62443. Open-source contributions. ...

Promote DevSecOps and secure development best practice. Main Skills Needed Experience securing digital applications and online platforms. Strong understanding of application security principles and OWASP Top 10. Knowledge of APIs, microservices and modern authentication technologies. Experience with Agile, DevSecOps and CI/CD pipelines. Threat modelling and security risk assessment ...

operationalised risk and control frameworks for the secure, responsible adoption of AI. Deep knowledge of security frameworks and security best practice (ISO 27001, NIST, OWASP, CIS). Strong command of security risk management, governance, and incident response. Cloud security expertise (Azure preferred), network security, and identity and access management ...

Skills Cloud security architecture and operations with hands-on depth in AWS (IAM, VPC, KMS, CloudTrail, GuardDuty, Security Hub). Web application security fundamentals: OWASP Top 10, secure SDLC, API security, and encryption standards (TLS, AES-256, key management). Knowledge of SaaS security models, multi-tenant architectures, and shared ...

Kubernetes Experience with SQL databases such as PostgreSQL Experience of machine learning applications Knowledge of application security best practices and secure coding principles (e.g., OWASP Top 10) Note: We want Arondite to bring together individuals from diverse backgrounds and perspectives. We don't expect everyone to have experience across each ...