10 of 10 Permanent OWASP Jobs in Scotland

such as github actions and Terraform. Hands‐on AWS security experience and Azure security experience (Entra ID, PIM, CAP, Defender, Policy) Deep knowledge of OWASP frameworks, secure SDLC, and application security assessment Experience conducting or coordinating penetration testing and threat modelling Experience with secure code and architecture review, ideally ...

Black Duck; policy as code; or threat modelling. Familiarity with relevant security standards and frameworks, such as NCSC Secure by Design, ISO 27001, OWASP or SLSA. Site reliability engineering practices, disaster recovery testing or supplier‐to‐operations handover. Candidates are not expected to have used every technology listed. Strong core ...

MySQL Amazon RDS Amazon Aurora MariaDB CI/CD and build pipeline automation Tooling including: Helm Terragrunt Git ArgoCD Government cloud security standards: NIST OWASP CIS NCSC BASH scripting Python development RESTful microservices IT Service Management (ITSM) Leadership & Product Management Proven ability to lead teams in the design, implementation, administration ...

Must have the ability to take ownership for high complexity Security Assessments. Ability to operate Spacelabs Medical Devices and Solutions. Secure Coding and Development (OWASP SAMM), MITRE/SANS Top 25) Secure Software Development Life Cycle Security Frameworks (ISO 2700x, NIST Special Publications) Static Code Analysis Cloud Development and Cloud ...

MySQL compatible DBs: MySQL, RDS, Aurora, MariaDB Build Pipeline automation, CI/CD Build Tooling: Helm, Terragrunt, Git, ArgoCD Government Cloud Security standards (NIST, OWASP, CIS, NCSC etc...) BASH, Python RESTful microservices IT Service Management #J-18808-Ljbffr ...

/CD lifecycle. You will also do some pre-release manual PenTesting and threat modelling work. You’ll need strong application security experience, including OWASP Top 10, Veracode or similar scanning tools, DevSecOps/CI/CD and cloud security across Azure and/or AWS. You will also need ...

focus on secure code reviews, SAST/DAST, vulnerability assessments and embedding security throughout the CI/CD lifecycle. The role requires experience with OWASP Top 10, Veracode, DevSecOps, and cloud security across Azure/AWS, plus Kali Linux for manual testing. Hybrid work in London, Manchester or Glasgow with ...

Governance: Proactively identify systemic delivery and technical risks—including model drift, IP leakage, licensing issues in generated code, data privacy breaches, and security vulnerabilities (OWASP Top 10 for LLMs). Regulatory & Safety Compliance: Ensure all delivery frameworks adhere strictly to evolving AI governance standards, copyright guidelines, data privacy regulations (GDPR ...

well architected, maintainable and uses appropriate design patterns and SOLID principles.* Accountable to ensure team code quality, security and testability is high e.g. SonarQube, OWASP* Working with product management to provide technical solutions to meet product requirements and delight our customers.* Managing, leading and developing a team of engineers ...

delivering client‐facing engagements. Network testing: external and internal, Active Directory attack paths, privilege escalation, lateral movement, post‐exploitation. Web and API testing: the OWASP Top 10 and, more importantly, what it misses, meaning business logic flaws, authentication and session weaknesses, and multi‐step chains. Red teaming: objective‐based operations ...