1 to 25 of 103 Permanent OWASP Jobs in London

utilise them In-depth knowledge of security principles, technologies, best practices, and threat detection and mitigation strategies Knowledge of common attack vectors and methodologies (OWASP Top 10, MITRE ATT&CK Framework and social engineering tactics) The ability to identify potential threats, attack vectors and vulnerabilities in systems and applications ...

Controls - SABSA - TOGAF Understanding of security operations concepts, incident response, and detection capabilities. Knowledge of application security principles, including secure coding practices and OWASP guidance. Experience with DevSecOps practices and security automation. Familiarity with container and Kubernetes security. Understanding of encryption, key management, and data protection principles. Strong documentation, communication ...

CloudWatch. Identity-first security principles. Least Privilege Access Controls. Threat Modelling. Prompt Injection Protection. Data Leakage Prevention. Secure Secrets Management. Operational Readiness Reviews. OWASP Security Standards. Container, Dependency and Vulnerability Scanning. Application Monitoring and Observability. Highly Desirable Public Sector experience. Central Government programme experience. Active SC Clearance. Agentic ...

with Terraform and infrastructure‐as‐code at scale Strong understanding of Kubernetes architecture and operating containerised workloads in cloud environments Good understanding of DevSecOps, OWASP principles and security‐by‐design Experience designing and implementing monitoring, logging and observability solutions Strong scripting skills using Python, Bash, PowerShell or similar Experience making ...

with Terraform and infrastructure-as-code at scale • Strong understanding of Kubernetes architecture and operating containerised workloads in cloud environments • Good understanding of DevSecOps, OWASP principles and security-by-design • Experience designing and implementing monitoring, logging and observability solutions • Strong scripting skills using Python, Bash, PowerShell or similar • Experience making ...

Familiarity with CFTC system safeguards expectations, including 17 C.F.R. § 38.1051 and § 39.18 or similar regulatory requirements. AppSec Foundations: Strong grasp of application security principles (OWASP Top 10, NIST) and secure SDLC practices. CI/CD & Tooling: Proficiency with CI/CD tooling (GitHub Actions, GitLab CI, Jenkins, Azure DevOps, CircleCI ...

protocols, and operating systems. Experience with cloud platforms (AWS, Azure, GCP) and containerized environments (Docker, Kubernetes). Solid understanding of common vulnerabilities and exposures (OWASP Top 10, SANS Top 25) and secure coding practices in at least on major language stack (e.g. Java/Springboot, .NET, JavaScript/Node, Python ...

information security, with a strong focus on application security and DevSecOps Strong understanding of secure software development practices and common application security risks (e.g. OWASP Top 10) Hands-on experience working with or integrating DevSecOps tooling within CI/CD environments (e.g. GitLab pipelines) Experience with application security testing tools ...

product aligned security roles, with a track record of owning and driving security initiatives Familiarity with common web, mobile, and API vulnerabilities (e.g., OWASP Top 10) and practical experience preventing and remediate them at scale Experience securing applications and services in at least one major cloud provider (AWS preferred), including ...

Experience We Value Experience securing large language model applications, retrieval‐augmented generation pipelines, or agentic AI systems. Familiarity with AI security frameworks such as OWASP Top 10 for LLM Applications and MITRE ATLAS. Experience using AI security testing tools such as Garak, PyRIT, or equivalent solutions. Experience supporting enterprise client ...

experience.Additional Experience We ValueExperience securing large language model applications, retrieval-augmented generation pipelines, or agentic AI systems.Familiarity with AI security frameworks such as OWASP Top 10 for LLM Applications and MITRE ATLAS.Experience using AI security testing tools such as Garak, PyRIT, or equivalent solutions.Experience supporting enterprise client security reviews ...

such as github actions and Terraform. Hands‐on AWS security experience and Azure security experience (Entra ID, PIM, CAP, Defender, Policy) Deep knowledge of OWASP frameworks, secure SDLC, and application security assessment Experience conducting or coordinating penetration testing and threat modelling Experience with secure code and architecture review, ideally ...

Design & Regulated Environments: Proven experience delivering solutions within highly regulated, security-sensitive or compliance-driven environments. Strong understanding of secure-by-design principles, OWASP, threat modelling, identity and access management, least-privilege principles and non-functional requirements.Software Engineering Authority: Extensive software engineering background with mastery of modern development practices, code ...

Jenkins, AWS CodePipeline, GitLab CI, or GitHub Actions Solid understanding of relational and NoSQL databases (e.g., PostgreSQL, MongoDB) Knowledge of security best practices (e.g. OWASP) and performance optimization Excellent leadership, communication, time management and mentoring skills, with the ability to influence technical direction Desirable Qualifications Experience in fintech, payments ...

high-risk products and services. Conduct and oversee SAST, DAST, API security, fuzz testing and architecture-level assessments . Assess applications against the OWASP Top 10 and other relevant security standards. Identify vulnerabilities, understand their root causes and translate findings into practical remediation plans. Provide secure design and coding guidance ...

security. Key Responsibilities SSDLC & Secure Coding Assist in integrating security controls into the SSDLC. Support the creation and maintenance of secure coding guidelines (e.g., OWASP Top 10, CERT Secure Coding Standards). Application Security Testing Run a Static Application Security Testing (SAST) and Software Composition Analysis (SCA) scans. Conduct ...

Azure, or GCP). Proficient in programming languages like C/C++, Java, JS, Python, Go, or Rust. Deep understanding of common vulnerability frameworks (OWASP Top 10, SANS CWE Top 25). Solid grasp of enterprise software development, Agile, CI/CD pipelines, and security tooling (SAST, DAST, OSA, Vulnerability ...

controls for SaaS applications and backend services across API gateways, identity and access management, data protection, and SIEM-based security monitoring.Security Standards: Familiarity with OWASP Top 10 and CWE Top 25 vulnerabilities.Cloud Security: Direct experience with, or a strong understanding of, SaaS, PaaS and IaaS services and their security considerations.Development ...

SaaS applications and backend services across API gateways, identity and access management, data protection, and SIEM-based security monitoring. \n Security Standards: Familiarity with OWASP Top 10 and CWE Top 25 vulnerabilities. \n Cloud Security: Direct experience with, or a strong understanding of, SaaS, PaaS and IaaS services and their ...

your background might be better suited to. 5+ years ofrelevantexperienceinthe medical devicespace (eitherindustryor through consulting/service provider) Proficiency in security frameworks (e.g., NIST, OWASP, MITRE ATT&CK, PASTA, STRIDE) and standards such as FDA cybersecurity guidance Experience assessing security risks using industry standard methods (penetration test results, threat modeling ...

security vulnerabilities.Experience performing threat modeling and application security reviews.Strong understanding of authentication, authorization, session management, web security, API security and mobile security.Strong knowledge of OWASP Top 10s and their practical remediation.Hands-on experience with application security technologies such as SAST, SCA, DAST, API Security, WAF.Experience with microservices, APIs, containers, Kubernetes ...

. Proficient in programming languages like C/C++, Java, JS, Python, Go, or Rust. Possess a deep understanding of common vulnerability frameworks (OWASP Top 10, SANS CWE Top 25). Solid grasp of enterprise software development, Agile, CI/CD pipelines, and security tooling (SAST, DAST, OSA, Vulnerability Management ...

PowerShell or Python. Experience gained within a legal, financial services or similarly regulated organisation. Awareness of security frameworks and best practice including NCSC guidance, OWASP, NIST CSF, CIS Controls, ISO 27001, ISMS principles and GDPR. Experience with automation, security testing, forensic investigation activities, DLP monitoring, privileged access, key management ...

with AI and agentic security risks (prompt injection, data poisoning, model and agent governance). Have experience mapping security frameworks (NIST CSF, ISO 27001, OWASP, NIST AI RMF). Have hands‐on exposure to detection and response, red‐team, or pen‐test work. Have experience with our stack: Azure/ ...

your background might be better suited to. 5+ years ofrelevantexperienceinthe medical devicespace (eitherindustryor through consulting/service provider) Proficiency in security frameworks (e.g., NIST, OWASP, MITRE ATT&CK, PASTA, STRIDE) and standards such as FDA cybersecurity guidance Experience assessing security risks using industry standard methods (penetration test results, threat modeling ...