15 of 15 Permanent OWASP Jobs in the Midlands

technical people. Desirable: An industry recognised qualification in Cyber Security. AWS or Azure mid-level certifications. Participation in the cyber security community (e.g. OWASP, HackTheBox, CTFs etc.). Experience working with agile software development methodologies (e.g. Scrum or Kanban). Embracing our differences At Kainos, we believe in the power ...

technical and non-technical people.Desirable:An industry recognised qualification in Cyber Security.AWS or Azure mid-level certifications.Participation in the cyber security community (e.g. OWASP, HackTheBox, CTFs etc.).Experience working with agile software development methodologies (e.g. Scrum or Kanban).Embracing our differences At Kainos, we believe in the power of diversity ...

teams. Desirable Skills Experience with the following technologies and tools would be advantageous: Testing & Automation JUnit Playwright Selenium Cucumber Performance Testing Gatling Security Testing OWASP ZAP Cloud & Containerisation Docker Kubernetes AWS Accessibility Testing WCAG Standards WAVE ...

Kubernetes etc. Fundamental knowledge of logging, monitoring, load balancing/proxies and API gateways Fundamental knowledge of GitHub, Jenkins & Jira Basic knowledge of the OWASP Top 10, Mitre ATT&CK, NIST frameworks, PCI-DSS and Cyber Kill Chain Fundamental understanding of PAM, EDR, AV, IPS, SIEM, WAF and DLP technologies ...

tools.• Experience with Continuous Security, Continuous Integration and Continuous Delivery techniques.• Experience of network security (e.g. OSI, TCP/IP), web application security (e.g. OWASP) and cryptographic controls (e.g. PKI, TLS).• We are passionate about developing people – a demonstrated ability in managing, mentoring and coaching members of your team ...

tools.• Experience with Continuous Security, Continuous Integration and Continuous Delivery techniques• Experience of network security (e.g. OSI, TCP/IP), web application security (e.g. OWASP) and cryptographic controls (e.g. PKI, TLS).• We are passionate about developing people – a demonstrated ability in managing, mentoring and coaching members of your team ...

dedicated focus and to grow with the role as we build our product security capability. Familiarity with recognised standards, frameworks or certifications such as OWASP, CSSLP, ISO 27001 or similar would be helpful. Experience in a product, platform or SaaS business. Experience in high-trust, regulated or mission-critical environments ...

strong attention to detail A solid understanding of how web applications work including security, session management, and best development practices Full understanding of the OWASP framework. Enforcement of the framework throughout all coding Create, maintain and coordinate backup mechanisms for the purposes of business continuity while maintaining a high level ...

risks are appropriately recorded and accepted. Ensure penetration testing and remediation activities align with relevant security standards, regulatory requirements and industry best practice, including OWASP, NIST, ISO 27001, PCI-DSS, GDPR and CAF. Ensure appropriate governance, documentation and evidence is maintained throughout the testing lifecycle. Provide assurance over the quality ...

discipline.An equivalent combination of education and experience may be accepted as a satisfactory substitute for the specific education and experience listed above. Understanding of OWASP, CVSS, the MITRE ATT&CK framework and the software development lifecycle.Capable of scripting in Python, Bash, Perl or PowerShell.Certification/Licensure: IT security related certification ...

manual testing where it delivers the greatest value Provide clear, risk-based recommendations to support release decisions Contribute to security focused testing, including OWASP principles and lightweight threat modelling Help ensure products meet accessibility standards by testing against WCAG guidelines Continuously identify opportunities to improve testing processes, tooling, and overall ...

with coordination of testing engagements, third-party providers and remediation work. You will manage scoping, execution, reporting and remediation, align activities with security standards (OWASP, NIST, ISO 27001, PCI-DSS, GDPR), and communicate #J-18808-Ljbffr ...

Expertise in Continuous Security, Continuous Integration and Continuous Delivery techniques - Knowledge of international security standards and regulations such as NCSC, NIST, CIS, PCI, GDPR, OWASP ASVS, HIPPA, SOC2 etc. - Knowledge of typical cyber security attack vectors (e.g. OWASP Top 10, SQL, XSS, XXE, MITM etc.) and can articulate threats … equivalent) - Experience of working with the external penetration test companies to translate report findings into actionable tasks. - Experience with security tools (e.g. Burp Suite, OWASP-ZAP, NMAP, Nessus, Kali, Metasploit etc.) - Knowledge about main cyber security areas (e.g. OSINT, network scanning, enumeration, sniffing, session hijacking, social engineering, firewalls, honeypots ...

engage credibly on cyber and cloud security topics, such as securing web applications and cloud platforms (e.g. AWS or Azure), typical attack vectors (e.g. OWASP Top 10) and common security standards (e.g. NCSC, NIST, CIS, PCI, GDPR, OWASP ASVS, SOC2). You do not need to be the deepest technical ...

engage credibly on cyber and cloud security topics, such as securing web applications and cloud platforms (e.g. AWS or Azure), typical attack vectors (e.g. OWASP Top 10) and common security standards (e.g. NCSC, NIST, CIS, PCI, GDPR, OWASP ASVS, SOC2). You do not need to be the deepest technical ...