1 to 25 of 89 Permanent OWASP Jobs in London

utilise them In-depth knowledge of security principles, technologies, best practices, and threat detection and mitigation strategies Knowledge of common attack vectors and methodologies (OWASP Top 10, MITRE ATT&CK Framework and social engineering tactics) The ability to identify potential threats, attack vectors and vulnerabilities in systems and applications ...

utilise them In-depth knowledge of security principles, technologies, best practices, and threat detection and mitigation strategies Knowledge of common attack vectors and methodologies (OWASP Top 10, MITRE ATT&CK Framework and social engineering tactics) The ability to identify potential threats, attack vectors and vulnerabilities in systems and applications ...

Controls - SABSA - TOGAF Understanding of security operations concepts, incident response, and detection capabilities. Knowledge of application security principles, including secure coding practices and OWASP guidance. Experience with DevSecOps practices and security automation. Familiarity with container and Kubernetes security. Understanding of encryption, key management, and data protection principles. Strong documentation, communication ...

Controls - SABSA - TOGAF Understanding of security operations concepts, incident response, and detection capabilities. Knowledge of application security principles, including secure coding practices and OWASP guidance. Experience with DevSecOps practices and security automation. Familiarity with container and Kubernetes security. Understanding of encryption, key management, and data protection principles. Strong documentation, communication ...

with Terraform and infrastructure-as-code at scale Strong understanding of Kubernetes architecture and operating containerised workloads in cloud environments Good understanding of DevSecOps, OWASP principles and security-by-design Experience designing and implementing monitoring, logging and observability solutions Strong scripting skills using Python, Bash, PowerShell or similar Experience making ...

with Terraform and infrastructure‐as‐code at scale Strong understanding of Kubernetes architecture and operating containerised workloads in cloud environments Good understanding of DevSecOps, OWASP principles and security‐by‐design Experience designing and implementing monitoring, logging and observability solutions Strong scripting skills using Python, Bash, PowerShell or similar Experience making ...

Familiarity with CFTC system safeguards expectations, including 17 C.F.R. § 38.1051 and § 39.18 or similar regulatory requirements. AppSec Foundations: Strong grasp of application security principles (OWASP Top 10, NIST) and secure SDLC practices. CI/CD & Tooling: Proficiency with CI/CD tooling (GitHub Actions, GitLab CI, Jenkins, Azure DevOps, CircleCI ...

/SSL, certificates, and access control Experience with observability, monitoring, and alerting tools Security & Compliance Practical experience implementing ISO27001 and SOC2 controls Knowledge of OWASP methodologies and secure development lifecycle practices Experience with vulnerability management, PAM, secrets management, and secure access Platform & Operations Excellence Experience running and scaling highly available ...

Jenkins, AWS CodePipeline, GitLab CI, or GitHub Actions* Solid understanding of relational and NoSQL databases (e.g., PostgreSQL, MongoDB)* Knowledge of security best practices (e.g. OWASP) and performance optimization* Excellent leadership, communication, time management and mentoring skills, with the ability to influence technical direction **Desirable Qualifications*** Experience in fintech, payments ...

Jenkins, AWS CodePipeline, GitLab CI, or GitHub Actions Solid understanding of relational and NoSQL databases (e.g., PostgreSQL, MongoDB) Knowledge of security best practices (e.g. OWASP) and performance optimization Excellent leadership, communication, time management and mentoring skills, with the ability to influence technical direction Desirable Qualifications Experience in fintech, payments ...

high-risk products and services. Conduct and oversee SAST, DAST, API security, fuzz testing and architecture-level assessments . Assess applications against the OWASP Top 10 and other relevant security standards. Identify vulnerabilities, understand their root causes and translate findings into practical remediation plans. Provide secure design and coding guidance ...

continuous deployment (CI/CD) Experience with security testing tools, such as static Code analysis and dynamic Application security testing (DAST) Strong understanding of OWASP Top 10, application security vulnerabilities and web security testing methodologies Understanding of secure coding practices for compliance requirements within SOC2, ISO, HIPAA, HITRUST, etc. Able ...

/Security Hub. Strong coding ability in TypeScript or Python or Go comfortable shipping production code, not just configs and scripts. Application security fluency: OWASP Top 10, threat modeling, and code‐level reviews on real systems. Experience securing a B2B SaaS multi‐tenant production environment. Comfort owning ...

information security, with a strong focus on application security and DevSecOps Strong understanding of secure software development practices and common application security risks (e.g. OWASP Top 10) Hands-on experience working with or integrating DevSecOps tooling within CI/CD environments (e.g. GitLab pipelines) Experience with application security testing tools ...

HITRUST, GDPR) Familiarity with data protection regulations and AI Security frameworks (e.g., GDPR, NIST AI RMF, ISO/IEC 27001, ISO/IEC 42001, OWASP Top 10 for LLMs, MITRE ATLAS) is a plus. Excellent communication and stakeholder management skills, capable of influencing at all levels and gaining a ‘Trusted ...

your background might be better suited to. 5+ years ofrelevantexperienceinthe medical devicespace (eitherindustryor through consulting/service provider) Proficiency in security frameworks (e.g., NIST, OWASP, MITRE ATT&CK, PASTA, STRIDE) and standards such as FDA cybersecurity guidance Experience assessing security risks using industry standard methods (penetration test results, threat modeling ...

products and architectures, conducting threat modeling exercises, and translating findings into actionable security controls. Practical understanding of web application security concepts (such as OWASP Top-10 and similar). Hands-on experience with IaC and related tools (Terraform, CloudFormation, Helm, Pulumi). Experience with automation and tooling development ...

hold a security position under delivery pressure. Nice to have skills Familiarity with AI security and governance frameworks including NIST AI RMF, the OWASP Top 10 for LLM applications, MITRE ATLAS, ISO/IEC 42001, and the security provisions of the EU AI Act. AI red teaming, adversarial testing, adversarial ...

customer, contractual, or compliance obligations. Familiarity with AI security frameworks and guidance such as the NIST AI Risk Management Framework, NIST Generative AI Profile, OWASP Top 10 for LLM Applications, or Cloud Security Alliance AI security guidance. Experience with RAG architecture, AI agents, vector databases, AI APIs, prompt engineering ...

blue or purple team activities - Experienced in software development or experience contributing to Open-Source projects - Experienced with DAST tools such as Burp Suite, OWASP Zap or similar - Experience with SAST/SCA tools such as Snyk, Veracode, Checkmarx or similar - Proficient in one or more of the following languages ...

engagement, and plan testing that meets their assurance needs. Apply manual and tool‐assisted testing techniques aligned with recognised methodologies and frameworks, including the OWASP Web Security Testing Guide, PTES, and MITRE ATT&CK. Deliver Cyber Essentials Plus assessments, including scoping, conducting the required technical tests, verifying remediation and supporting ...

.* Proficient in programming languages like C/C++, Java, JS, Python, Go, or Rust* Possess a deep understanding of common vulnerability frameworks (OWASP Top 10, SANS CWE Top 25).* Solid grasp of enterprise software development, Agile, CI/CD pipelines, and security tooling (SAST, DAST, OSA, Vulnerability Management ...

with AI and agentic security risks (prompt injection, data poisoning, model and agent governance). Have experience mapping security frameworks (NIST CSF, ISO 27001, OWASP, NIST AI RMF). Have hands‐on exposure to detection and response, red‐team, or pen‐test work. Have experience with our stack: Azure/ ...

Dynatrace, Catchpoint or similar. Experience managing incidents, problem management, root cause analysis and live production environments. Understanding of application and cloud security, including OWASP principles, WAF, bot management and security scanning. Experience with CDN technologies and security controls, such as Akamai, Cloudflare or equivalent. TPBN1_UKTJ ...

DAST tools. Scripting with Python, Bash, or PowerShell for automation. Git and branching strategies with a security‐focused approach. Knowledge of WAF, API security, OWASP Top 10, and common cloud‐security frameworks. WAF rules management, including creation, tuning, and monitoring. SSL/TLS configuration best practices, certificate lifecycle management. Experience ...