1 to 25 of 95 Permanent OWASP Jobs in the UK excluding London

with Terraform and infrastructure-as-code at scale Strong understanding of Kubernetes architecture and operating containerised workloads in cloud environments Good understanding of DevSecOps, OWASP principles and security‐by‐design Experience designing and implementing monitoring, logging and observability solutions Strong scripting skills using Python, Bash, PowerShell or similar Experience making ...

with Terraform and infrastructure-as-code at scale • Strong understanding of Kubernetes architecture and operating containerised workloads in cloud environments • Good understanding of DevSecOps, OWASP principles and security-by-design • Experience designing and implementing monitoring, logging and observability solutions • Strong scripting skills using Python, Bash, PowerShell or similar • Experience making ...

similar security testing tools. Knowledge of SAST, DAST, SCA and vulnerability management. Understanding of cloud-hosted applications, containers and modern architectures. Familiarity with OWASP, ISO27001 and NCSC CAF frameworks. Strong stakeholder engagement and communication skills. Awareness of software supply chain threats, cloud security and emerging AI-related risks. Exposure ...

similar security testing tools. Knowledge of SAST, DAST, SCA and vulnerability management. Understanding of cloud-hosted applications, containers and modern architectures. Familiarity with OWASP, ISO27001 and NCSC CAF frameworks. Strong stakeholder engagement and communication skills. Awareness of software supply chain threats, cloud security and emerging AI-related risks. Exposure ...

segmentation, and host security. Hands on experience with the following security products Trellix, Ivanti, ClearSwift, Yubikey Understanding of secure coding practices and common vulnerabilities (OWASP Top 10, SANS Top 25). Expertise in identity and access management (IAM), including RBAC, ABAC, JWT and Cookie based authentication. Incident detection and response ...

application servers, databases, etc.) and how to leverage them in an assessment Good understanding of web technologies and how they are commonly subverted (e.g. OWASP Top 10) At least a basic understanding of development frameworks (.NET, Java,...) Good understanding of AI-assisted penetration testing capabilities: what level of human ...

such as github actions and Terraform. Hands‐on AWS security experience and Azure security experience (Entra ID, PIM, CAP, Defender, Policy) Deep knowledge of OWASP frameworks, secure SDLC, and application security assessment Experience conducting or coordinating penetration testing and threat modelling Experience with secure code and architecture review, ideally ...

such as github actions and Terraform. Hands‐on AWS security experience and Azure security experience (Entra ID, PIM, CAP, Defender, Policy) Deep knowledge of OWASP frameworks, secure SDLC, and application security assessment Experience conducting or coordinating penetration testing and threat modelling Experience with secure code and architecture review, ideally ...

such as github actions and Terraform. Hands‐on AWS security experience and Azure security experience (Entra ID, PIM, CAP, Defender, Policy) Deep knowledge of OWASP frameworks, secure SDLC, and application security assessment Experience conducting or coordinating penetration testing and threat modelling Experience with secure code and architecture review, ideally ...

SaaS applications and backend services across API gateways, identity and access management, data protection, and SIEM-based security monitoring. \n Security Standards: Familiarity with OWASP Top 10 and CWE Top 25 vulnerabilities. \n Cloud Security: Direct experience with, or a strong understanding of, SaaS, PaaS and IaaS services and their ...

conducting threat modelling (e.g. STRIDE, attack trees) and risk analysis Strong understanding of security frameworks and best practice such as ISO 27001, NIST, CIS, OWASP, NCSC guidance Experience working in the UK Public Sector and associated security standards and guidance including GovAssure/NCSC CAF, HMG Security Policy Framework. Knowledge ...

following... Cloud and infrastructure security : Experience or interest in Azure, Linux, networking, firewalls or identity and access management Application security : Secure coding, the OWASP Top 10, code or dependency scanning Security operations : Log analysis, SIEM tools, threat intelligence or incident response Governance and risk : Interest in security frameworks and standards ...

practices including CI/CD, source control, automated testing, and Agile delivery methodologies Desirable Skills Working knowledge of industry security frameworks and standards including OWASP Top 10, MITRE ATT&CK, NIST Cybersecurity Framework, OAuth 2.0, OpenID Connect, and SAML Experience supporting Security Operations, Incident Response, SOC, or breach modeling activities ...

Black Duck; policy as code; or threat modelling. Familiarity with relevant security standards and frameworks, such as NCSC Secure by Design, ISO 27001, OWASP or SLSA. Site reliability engineering practices, disaster recovery testing or supplier‐to‐operations handover. Candidates are not expected to have used every technology listed. Strong core ...

Black Duck; policy as code; or threat modelling. Familiarity with relevant security standards and frameworks, such as NCSC Secure by Design, ISO 27001, OWASP or SLSA. Site reliability engineering practices, disaster recovery testing or supplier‐to‐operations handover. Candidates are not expected to have used every technology listed. Strong core ...

Black Duck; policy as code; or threat modelling. Familiarity with relevant security standards and frameworks, such as NCSC Secure by Design, ISO 27001, OWASP or SLSA. Site reliability engineering practices, disaster recovery testing or supplier‐to‐operations handover. Candidates are not expected to have used every technology listed. Strong core ...

practices including CI/CD, source control, automated testing, and Agile delivery methodologies. Desirable Skills: Working knowledge of industry security frameworks and standards including OWASP Top 10, MITRE ATT&CK, NIST Cybersecurity Framework, OAuth 2.0, OpenID Connect, and SAML. Experience supporting Security Operations, Incident Response, SOC, or breach modeling activities. ...

Code experience using Terraform and/or Bicep. Automation experience using PowerShell and/or Python. Knowledge of Kubernetes, AKS, container security and OWASP principles. Ability to communicate effectively with both technical and business stakeholders. Desirable Experience Multi-tenant SaaS platform environments. Microsoft Defender XDR suite. Building or transforming ...

modelling, security architecture reviews and control design activities. Strong knowledge of security frameworks including NIST CSF, NIST AI RMF, ISO 27001, ISO 42001 and OWASP AI security guidance. Experience working within highly regulated environments such as healthcare, financial services or government. Excellent communication skills with the ability to explain complex ...

Comfortable learning new languages, tools and observability technologies as required. Nice to Have: Experience with AWS or GCP; GraphQL, gRPC or REST API design; OWASP and GDPR; or mobile and web performance optimisation. MEASURES & GOALS: (HOW WILL THE SUCCESS OF THE PERSON IN THIS POSITION BE MEASURED – WHAT ...

systems, alongside broader governance, risk and compliance work Working knowledge of NIST frameworks Practical use of AI security and control frameworks such as the OWASP Top 10 for LLMs and MITRE ATLAS A drive to deliver rigorous assurance quickly and at scale SC clearance, or eligibility to obtain it Desirable ...

MySQL Amazon RDS Amazon Aurora MariaDB CI/CD and build pipeline automation Tooling including: Helm Terragrunt Git ArgoCD Government cloud security standards: NIST OWASP CIS NCSC BASH scripting Python development RESTful microservices IT Service Management (ITSM) Leadership & Product Management Proven ability to lead teams in the design, implementation, administration ...

management within a software development or SaaS environment. Practical understanding of Security by Design (SbD) concepts, threat modelling principles, and application security baselines (e.g., OWASP, ISO 27001, NIST). Familiarity with modern software development lifecycles (SDLC), cloud hosting platforms (AWS, Azure, or GCP), and production service operations. Excellent stakeholder engagement ...

achieving alignment across multiple product portfolios and stakeholder group**Desirable Skills** * Working knowledge of application and API security concepts, including common vulnerability classes (e.g., OWASP Top 10) and attack techniques (e.g., MITRE ATT&CK)* Experience implementing or integrating security mechanisms such as authentication, authorization, and identity based access controls within ...

/CD, automated testing, code quality controls, observability, incident diagnosis, reliability engineering and DevSecOps practices. Knowledge of application security, identity and access management, OWASP guidance, threat modelling, privacy by design and relevant compliance requirements. Experience producing high‐quality architecture artefacts, including context and container views, integration diagrams, data‐flow diagrams ...