14 of 14 Permanent OWASP Jobs in the North West

with Terraform and infrastructure-as-code at scale Strong understanding of Kubernetes architecture and operating containerised workloads in cloud environments Good understanding of DevSecOps, OWASP principles and security‐by‐design Experience designing and implementing monitoring, logging and observability solutions Strong scripting skills using Python, Bash, PowerShell or similar Experience making ...

with Terraform and infrastructure-as-code at scale • Strong understanding of Kubernetes architecture and operating containerised workloads in cloud environments • Good understanding of DevSecOps, OWASP principles and security-by-design • Experience designing and implementing monitoring, logging and observability solutions • Strong scripting skills using Python, Bash, PowerShell or similar • Experience making ...

such as github actions and Terraform. Hands‐on AWS security experience and Azure security experience (Entra ID, PIM, CAP, Defender, Policy) Deep knowledge of OWASP frameworks, secure SDLC, and application security assessment Experience conducting or coordinating penetration testing and threat modelling Experience with secure code and architecture review, ideally ...

modelling, security architecture reviews and control design activities. Strong knowledge of security frameworks including NIST CSF, NIST AI RMF, ISO 27001, ISO 42001 and OWASP AI security guidance. Experience working within highly regulated environments such as healthcare, financial services or government. Excellent communication skills with the ability to explain complex ...

design leadership. Deep understanding of AWS security, hybrid cloud design, and modern DevSecOps principles. Strong knowledge of frameworks such as NIST, ISO 27001, OWASP, and CIS. Experience designing and implementing secure, compliant PCI‐DSS solutions. Solid grounding in tools and technologies like SIEM, IDS/IPS, DLP, endpoint protection ...

/CD lifecycle. You will also do some pre-release manual PenTesting and threat modelling work. You’ll need strong application security experience, including OWASP Top 10, Veracode or similar scanning tools, DevSecOps/CI/CD and cloud security across Azure and/or AWS. You will also need ...

focus on secure code reviews, SAST/DAST, vulnerability assessments and embedding security throughout the CI/CD lifecycle. The role requires experience with OWASP Top 10, Veracode, DevSecOps, and cloud security across Azure/AWS, plus Kali Linux for manual testing. Hybrid work in London, Manchester or Glasgow with ...

regulated environment, such as healthcare, financial services or another complex industry. Strong knowledge of security and risk frameworks such as ISO 27001, NIST, CIS, OWASP, ITIL or COBIT. Experience working with cloud technologies, particularly Azure, Google Cloud and modern identity and access management solutions. A good understanding of cyber threats ...

cloud penetration testing, and strong understanding of network penetration testing is preferred Strong familiarity with frameworks such as MITRE ATT&CK and MITRE ATLAS, OWASP, PTES, and NIST, with relevant certifications such as GPEN, OSCP, OSCE, CISSP, or similar are highly preferred; Certifications in Azure a plus Proficiency in scripting ...

Experience in a cyber-security role Working knowledge of technical and cyber security standards Working knowledge of industry best practices (such as NIST Framework, OWASP top ten, SANS and NCSC Guidance) Technical knowledge of information systems, infrastructure, and networks Security monitoring and testing technologies such as vulnerability scanning, penetration testing ...

skills, knowledge and experience will you need? Demonstrative experience of conducting structured penetration tests following 2 out of 3 of the following established frameworks (OWASP, NIST Cybersecurity Framework, PTES). Experience in planning, executing and documenting security assessments with minimal supervision. Understanding of NIST SP 800-115 for technical security ...

testing Relevant security testing certifications such as CREST (CRT, CCT), OSCP, OSCE, GPEN or GXPN Demonstrable knowledge of common security vulnerabilities, including the OWASP Top 10 Strong analytical and problem-solving skills Excellent communication skills with the ability to engage confidently with both technical and non-technical stakeholders A collaborative ...

practical terms. Experience with AI governance, responsible AI, model risk management or AI assurance. Familiarity with frameworks and guidance such as NIST AI RMF, OWASP Top 10 for LLM Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations ...

About The Role FDM is a global business and technology consultancy seeking Cyber Security Specialists (Security Connector) to work for our client in the Banking sector. This is an assignment hybrid-based in London or ...