11 of 11 Permanent OWASP Jobs in the North of England

/CD pipelines, version control (Git), and modern deployment practices. Familiarity with security best practices relevant to web and mobile applications (e.g. OWASP Top 10). Excellent communication skills, able to articulate technical decisions clearly to both technical and non-technical stakeholders. Experience working within Agile or cross-functional delivery ...

ViTest) Contributing to CI/CD pipeline improvements and secure deployment practices Participating in architecture and technical design reviews Ensuring all development aligns with OWASP security best practices Tech Stack & Environment Core technologies: .NET 10/ASP.NET Core Angular 21 (mandatory) DevExpress DevExtreme v25 (mandatory) Entity Framework Core TypeScript/ ...

Promote DevSecOps and secure development best practice. Main Skills Needed Experience securing digital applications and online platforms. Strong understanding of application security principles and OWASP Top 10. Knowledge of APIs, microservices and modern authentication technologies. Experience with Agile, DevSecOps and CI/CD pipelines. Threat modelling and security risk assessment ...

attack types (e.g. SQL injection, phishing, malware) Experience with log analysis and incident investigation Familiarity with Windows and/or Linux environments Understanding of OWASP Top 10 security risks Ability to work in a fast-paced, incident-driven environment Desirable Security certifications such as CompTIA Security+, GIAC GSEC, or ISC2 ...

attack types (e.g. SQL injection, phishing, malware) Experience with log analysis and incident investigation Familiarity with Windows and/or Linux environments Understanding of OWASP Top 10 security risks Ability to work in a fast-paced, incident-driven environment Desirable Security certifications such as CompTIA Security+, GIAC GSEC, or ISC2 ...

guardrails: input and output controls, tool and authorisation boundaries, and abuse and prompt‐injection defences, informed by references such as MITRE ATLAS and the OWASP LLM Top 10. Lead threat modelling on the riskiest systems: and turn the findings into concrete design changes. Drive secure‐by‐design into the supply ...

guardrails. Nice to have Working familiarity with AI security standards and references such as the NIST AI RMF, ISO 42001, MITRE ATLAS, or the OWASP LLM Top 10. Hands‐on experience with policy‐as‐code and turning standards into enforced controls. Contributions to security standards, frameworks, or industry practice. ...

delivery teams in Agile and DevOps environments to embed security by design. Support compliance with security and regulatory frameworks including ISO 27001, PCI DSS, OWASP and internal standards. Review security posture of vendors and outsourced services, providing due diligence and third-party risk assurance. Present security findings, risk opinions … security, secure application delivery, third-party risk management and access management practices. Experience applying recognised frameworks and standards such as ISO 27001, PCI DSS, OWASP, NIST and enterprise security control frameworks. Ability to translate complex technical risks into business language and provide clear, evidence-based recommendations. Exposure to contemporary architectures. ...

Akamai, tuning rules and responding to emerging threats. Review and improve web ingress controls including DDoS mitigation, rate limiting, and certificate management. Apply OWASP principles across the organisation's web applications, working with development teams to identify and remediate vulnerabilities. Lead API security design and governance, ensuring consistent security controls … platforms. Deep hands‐on experience with Microsoft Defender for Cloud, Entra ID, Conditional Access policies, and Azure app registrations. Practical knowledge of API security, OWASP Top 10 remediation, and secure web application design. Experience working embedded in engineering or platform teams within an Agile/DevOps environment. Familiarity with ...

Akamai, tuning rules and responding to emerging threats. Review and improve web ingress controls including DDoS mitigation, rate limiting, and certificate management. Apply OWASP principles across the organisation's web applications, working with development teams to identify and remediate vulnerabilities. Lead API security design and governance, ensuring consistent security controls … platforms. Deep hands-on experience with Microsoft Defender for Cloud, Entra ID, Conditional Access policies, and Azure app registrations. Practical knowledge of API security, OWASP Top 10 remediation, and secure web application design. Experience working embedded in engineering or platform teams within an Agile/DevOps environment. Familiarity with ...

We are a $13+ billion global technology company, home to more than 224,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud, and AI, powered by a broad portfolio of ...