23 of 23 Permanent OWASP Jobs in the North of England

with Terraform and infrastructure-as-code at scale Strong understanding of Kubernetes architecture and operating containerised workloads in cloud environments Good understanding of DevSecOps, OWASP principles and security‐by‐design Experience designing and implementing monitoring, logging and observability solutions Strong scripting skills using Python, Bash, PowerShell or similar Experience making ...

multidisciplinary teams. Strong communication skills. Desirable: Performance tools such as JMeter, k6 or Gatling. Accessibility testing to WCAG 2.2. Security testing tools, such as OWASP ZAP. Experience delivering services to the GDS Service Standard. AWS or Azure experience. Experience mentoring other testers. Why Join Scrumconnect Ltd? At Scrumconnect ...

modelling, security architecture reviews and control design activities. Strong knowledge of security frameworks including NIST CSF, NIST AI RMF, ISO 27001, ISO 42001 and OWASP AI security guidance. Experience working within highly regulated environments such as healthcare, financial services or government. Excellent communication skills with the ability to explain complex ...

Professional Scrum Master (PSM I) or Certified ScrumMaster (CSM) Security awareness or secure development training, such as ISO 27001 Foundation, CompTIA Security+ or OWASP secure coding Professional membership of BCS, The Chartered Institute for IT, or working towards Chartered IT Professional (CITP) Healthcare-specific training, such as NHS Data Security ...

Disciplines: Microsoft Azure, Programming Proficiency (JavaScript, Python, MS SQL, C#), Vulnerability Scanning, Penetration Testing, Continuous Integration and Continuous Deployment Pipelines (Azure DevOps or GitHub), OWASP Top 10, Static and Dynamic Application Security Testing, SQL Injection. Personality metrics: A very strong communicator and proactive team player (friendly, credible, articulate, and proactive ...

Disciplines: Microsoft Azure, Programming Proficiency (JavaScript, Python, MS SQL, C#), Vulnerability Scanning, Penetration Testing, Continuous Integration and Continuous Deployment Pipelines (Azure DevOps or GitHub), OWASP Top 10, Static and Dynamic Application Security Testing, SQL Injection. Personality A very strong communicator and proactive team player (friendly, credible, articulate, and proactive) that ...

Kubernetes, and secure software development across Azure and/or AWS Good knowledge of security frameworks and standards, including NIST CSF, MITRE ATT&CK, OWASP, and how to apply security controls in DevOps platforms and processes Experience working across enterprise and solution architecture, with strong knowledge of application security, data ...

comfortable translating technical complexity into clear decisions, and confident working with stakeholders at all levels. You understand frameworks like NIST, ISO 27001, CIS, OWASP etc., and ideally have experience designing or supporting PCI compliant environments. You’re hands‐on with tools such as SIEM, IDS/ ...

design leadership. Deep understanding of AWS security, hybrid cloud design, and modern DevSecOps principles. Strong knowledge of frameworks such as NIST, ISO 27001, OWASP, and CIS. Experience designing and implementing secure, compliant PCI‐DSS solutions. Solid grounding in tools and technologies like SIEM, IDS/IPS, DLP, endpoint protection ...

/CD lifecycle. You will also do some pre-release manual PenTesting and threat modelling work. You’ll need strong application security experience, including OWASP Top 10, Veracode or similar scanning tools, DevSecOps/CI/CD and cloud security across Azure and/or AWS. You will also need ...

cloud environments Knowledge of Windows and Linux/Unix security Understanding of IAM, encryption, PKI and TLS Knowledge of web security principles, including OWASP Top 10, WAF and API security Experience with vulnerability management, patching and security remediation Knowledge of the MITRE ATT&CK Framework and common attack techniques Experience ...

Experience working in agile, multidisciplinary teams. Performance tools such as JMeter, k6 or Gatling. Accessibility testing to WCAG 2.2. Security testing tools, such as OWASP ZAP. Experience delivering services to the GDS Service Standard. Experience mentoring other testers. Why Join Scrumconnect Ltd? At Scrumconnect, we are more than just ...

focus on secure code reviews, SAST/DAST, vulnerability assessments and embedding security throughout the CI/CD lifecycle. The role requires experience with OWASP Top 10, Veracode, DevSecOps, and cloud security across Azure/AWS, plus Kali Linux for manual testing. Hybrid work in London, Manchester or Glasgow with ...

deliver real-time management updates. Securing AI & Governance: Manage the unique risks associated with internal AI adoption, ensuring adherence to frameworks such as the OWASP Top 10 for LLMs and ISO/IEC 42001 . Stakeholder Engagement: Act as a subject matter expert across cross-functional teams, simplifying complex technical ...

GitOps and infrastructure as code experience at scale CI/CD pipeline automation experience Extensive experience with declarative orchestration and configuration management Knowledge of OWASP Top 10 CI/CD Security Risks and embedding security controls into delivery pipelines Experience mentoring engineers, leading technical initiatives or acting as a technical ...

security. Strong CI/CD pipeline experience (GitHub Actions, GitLab CI, Jenkins). Experience with SAST, DAST, and secrets scanning tooling. Application security knowledge: OWASP Top 10, secure coding practices. Scripting: Python, Bash, or similar. Desirable Skills/Experience Familiarity with AI code generation tools and their security implications. Experience ...

generative AI, LLMs and AI-enabled solutions in a change environment. Knowledge of emerging AI security frameworks and standards, including NIST AI RMF, the OWASP Top 10 for LLM Applications, MITRE ATLAS and ISO 42001. The judgement to balance innovation with security, regulatory compliance and operational resilience. Clear communication skills ...

Experience in a cyber-security role Working knowledge of technical and cyber security standards Working knowledge of industry best practices (such as NIST Framework, OWASP top ten, SANS and NCSC Guidance) Technical knowledge of information systems, infrastructure, and networks Security monitoring and testing technologies such as vulnerability scanning, penetration testing ...

experience Infrastructure penetration testing experience CTM status Strong Windows and Linux security knowledge Strong Active Directory knowledge Knowledge of wireless security technologies Understanding of OWASP and PTES penetration testing methodologies Web application security knowledge Network and operating system security knowledge Vulnerability assessment experience Scripting or programming experience Strong technical report ...

practical terms. Experience with AI governance, responsible AI, model risk management or AI assurance. Familiarity with frameworks and guidance such as NIST AI RMF, OWASP Top 10 for LLM Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations ...

guardrails. Nice to have Working familiarity with AI security standards and references such as the NIST AI RMF, ISO 42001, MITRE ATLAS, or the OWASP LLM Top 10. Hands‐on experience with policy‐as‐code and turning standards into enforced controls. Contributions to security standards, frameworks, or industry practice. ...

security testing tools such as Nessus, Nmap, Burp Suite, Metasploit, and similar platforms. In-depth knowledge of IT security standards and frameworks such as OWASP, NIST, and SANS Top 25. Familiarity with the OSI model, TCP/IP model, and core networking concepts. Hands-on experience in manual penetration testing … experience with commercial and open-source tools/frameworks including Burp Suite, Metasploit, Core Impact, Scapy, AppScan, WebInspect, Qualys, Nessus, Nmap, SQLmap, and OWASP ZAP. Travel Travel may be required across the country for project execution, monitoring, assessments, testing activities, and coordination with geographically distributed teams, as and when required. ...

Our Purpose Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of ...