24 of 24 Permanent OWASP Jobs in the North of England

Boot, NodeJS, Python FastAPI, Oracle, PostgreSQL and MongoDB.Build solutions as part of a DevSecOps and Agile ecosystem supported by tooling including Atlassian, Jenkins, GitLab, OWASP and AWS componentry.Ensure your solution works in a reliable and resilient way using Site Reliability Engineering methods to increase availability while reducing costs and callouts.Help ...

Gradle, code management tools like git. Using and implementing unit test frameworks like JUnit, assertion libraries, data serialisation tools, security best practices like OWASP Top 10 and standards such as WCAG to design automated accessibility tests. Extensively using CI/CD tools for pipeline automation and a solid understanding ...

Gradle, code management tools like git. Using and implementing unit test frameworks like JUnit, assertion libraries, data serialisation tools, security best practices like OWASP Top 10 and standards such as WCAG to design automated accessibility tests. Extensively using CI/CD tools for pipeline automation and a solid understanding ...

Kubernetes, and secure software development across Azure and/or AWS Good knowledge of security frameworks and standards, including NIST CSF, MITRE ATT&CK, OWASP, and how to apply security controls in DevOps platforms and processes Experience working across enterprise and solution architecture, with strong knowledge of application security, data ...

Entra ID Practical expertise managing WAF technologies such as Cloudflare, Akamai, or equivalent enterprise platforms Strong understanding of web application security, API security, and OWASP Top 10 vulnerabilities Experience implementing identity and access management controls, including Conditional Access and identity governance Experience working within Agile, DevOps, or platform engineering environments ...

security using appropriate tools.Familiarity with Continuous Security, Continuous Integration and Continuous Delivery practices.Solid understanding of network security (OSI, TCP/IP), web application security (OWASP) and cryptographic controls (PKI, TLS).Track record in managing, mentoring and coaching team members, with a passion for people development.Excellent communication skills, able to explain ...

microservices, Kubernetes, and secure software development across Azure and/or AWSGood knowledge of security frameworks and standards, including NIST CSF, MITRE ATT&CK, OWASP, and how to apply security controls in DevOps platforms and processesExperience working across enterprise and solution architecture, with strong knowledge of application security, data security ...

cloud environments Knowledge of Windows and Linux/Unix security Understanding of IAM, encryption, PKI and TLS Knowledge of web security principles, including OWASP Top 10, WAF and API security Experience with vulnerability management, patching and security remediation Knowledge of the MITRE ATT&CK Framework and common attack techniques Experience ...

delivery.Some of the responsibilities: Define and evolve backend architecture to ensure scalability, maintainability, and performance.Set coding standards and champion secure development practices (e.g. OWASP).Influence technology choices, frameworks, and tools to support engineering excellence.Oversee improvements to CI/CD pipelines, build processes, and operational workflows.Clearly and confidently articulate technical risks ...

Some of the responsibilities: Define and evolve backend architecture to ensure scalability, maintainability, and performance. Set coding standards and champion secure development practices (e.g. OWASP).Influence technology choices, frameworks, and tools to support engineering excellence. Oversee improvements to CI/CD pipelines, build processes, and operational workflows. Clearly and confidently ...

microservices architecture.Understanding of CI/CD pipelines and deployment strategies.Familiarity with feature toggling and A/B testing.Awareness of security best practices (e.g., OWASP Top 10).Interest in mentoring junior developers or apprentices.What do you get in return? 25 days annual leave rising to 30 5% pension after probationState ...

appropriate tools. Familiarity with Continuous Security, Continuous Integration and Continuous Delivery practices. Solid understanding of network security (OSI, TCP/IP), web application security (OWASP) and cryptographic controls (PKI, TLS). Track record in managing, mentoring and coaching team members, with a passion for people development. Excellent communication skills, able ...

design leadership. Deep understanding of AWS security, hybrid cloud design, and modern DevSecOps principles. Strong knowledge of frameworks such as NIST, ISO 27001, OWASP, and CIS. Experience designing and implementing secure, compliant PCI‐DSS solutions. Solid grounding in tools and technologies like SIEM, IDS/IPS, DLP, endpoint protection ...

discipline.An equivalent combination of education and experience may be accepted as a satisfactory substitute for the specific education and experience listed above. Understanding of OWASP, CVSS, the MITRE ATT&CK framework and the software development lifecycle.Capable of scripting in Python, Bash, Perl or PowerShell.Certification/Licensure: IT security related certification ...

principles and techniques for both manual and automated application security assessments of desktop and web applications.Good knowledge of common web security vulnerabilities (e.g., OWASP Top 10), attack techniques and remediation tactics/strategies.Good understanding of common low-level vulnerabilities (e.g. use-after-free and buffer overflows)and common mitigations.Good understanding ...

principles and techniques for both manual and automated application security assessments of desktop and web applications. Good knowledge of common web security vulnerabilities (e.g., OWASP Top 10), attack techniques and remediation tactics/strategies. Good understanding of common low-level vulnerabilities (e.g. use-after-free and buffer overflows)and common ...

common attack types (e.g. SQL injection, phishing, malware)Experience with log analysis and incident investigationFamiliarity with Windows and/or Linux environmentsUnderstanding of OWASP Top 10 security risksAbility to work in a fast-paced, incident-driven environmentDesirableSecurity certifications such as CompTIA Security+, GIAC GSEC, or ISC2 certificationsExperience with cloud platforms ...

challenging projects simultaneously.Any experience of these would be really usefulAwareness of industry related security standards such as ISO 27000 series, PCI DSS, COBIT, NIST, OWASP Certifications in Security Management such as CISSP/CISM/CCSP or equivalentCertifications in technical Security domains such as CEH/OSCP or equivalentExperience ...

challenging projects simultaneously.Any experience of these would be really usefulAwareness of industry related security standards such as ISO 27000 series, PCI DSS, COBIT, NIST, OWASP Certifications in Security Management such as CISSP/CISM/CCSP or equivalentCertifications in technical Security domains such as CEH/OSCP or equivalentExperience ...

guardrails. Nice to have Working familiarity with AI security standards and references such as the NIST AI RMF, ISO 42001, MITRE ATLAS, or the OWASP LLM Top 10. Hands‐on experience with policy‐as‐code and turning standards into enforced controls. Contributions to security standards, frameworks, or industry practice. ...

management. Excellent attention to detail. Adheres to and promotes high standards. Understanding of vulnerability and threat assessment frameworks, such as: CVSS, CVE, CWE,OWASP, MITRE. Operational Technology (OT) management experience in vulnerability scanning. Competent at keeping up to date on CTI (Cyber Threat Intelligence) Desirable Experience with security or compliance ...

issues Lead the pentesting cadence around the core application set by conducting hacking exercises Provide application code reviews against known development frameworks such as OWASP ASVS Provide input into the design of functional and non-functional security controls such as customer authentication workflows Run Security Champion sessions to keep developers … Application Security Understanding of Software Development Life Cycle Desirable Security professional at heart borne froma software engineering background Experience of working with the OWASP ASVS framework Experience in Agile delivery environments Greenfield experience setting up security technologies from scratch Outgoing and able to build relationships with key stakeholders Personal Capabilities ...

technical software issuesLead the pentesting cadence around the core application set by conducting hacking exercisesProvide application code reviews against known development frameworks such as OWASP ASVSProvide input into the design of functional and non-functional security controls such as customer authentication workflowsRun Security Champion sessions to keep developers aware … drive to succeed in Application SecurityUnderstanding of Software Development Life CycleDesirableSecurity professional at heart borne from a software engineering backgroundExperience of working with the OWASP ASVS frameworkExperience in Agile delivery environmentsGreenfield experience setting up security technologies from scratchOutgoing and able to build relationships with key stakeholdersPersonal Capabilities Required, e.g. skills ...

Our PurposeMastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital ...