7 of 7 Permanent OWASP Jobs in the West Midlands

technical and non-technical people.Desirable:An industry recognised qualification in Cyber Security.AWS or Azure mid-level certifications.Participation in the cyber security community (e.g. OWASP, HackTheBox, CTFs etc.).Experience working with agile software development methodologies (e.g. Scrum or Kanban).Embracing our differences At Kainos, we believe in the power of diversity ...

tools.• Experience with Continuous Security, Continuous Integration and Continuous Delivery techniques.• Experience of network security (e.g. OSI, TCP/IP), web application security (e.g. OWASP) and cryptographic controls (e.g. PKI, TLS).• We are passionate about developing people – a demonstrated ability in managing, mentoring and coaching members of your team ...

approaches, including unit/integration testing and support for system/UAT. Ability to apply secure development practices, including awareness of common vulnerabilities (e.g. OWASP Top 10) and safe handling of sensitive data. Working knowledge of information handling controls relevant to NHS environments, including safe haven practices where applicable ...

tools.• Experience with Continuous Security, Continuous Integration and Continuous Delivery techniques• Experience of network security (e.g. OSI, TCP/IP), web application security (e.g. OWASP) and cryptographic controls (e.g. PKI, TLS).• We are passionate about developing people – a demonstrated ability in managing, mentoring and coaching members of your team ...

manual testing where it delivers the greatest value Provide clear, risk-based recommendations to support release decisions Contribute to security focused testing, including OWASP principles and lightweight threat modelling Help ensure products meet accessibility standards by testing against WCAG guidelines Continuously identify opportunities to improve testing processes, tooling, and overall ...

Expertise in Continuous Security, Continuous Integration and Continuous Delivery techniques• Knowledge of international security standards and regulations such as NCSC, NIST, CIS, PCI, GDPR, OWASP ASVS, HIPPA, SOC2 etc.• Knowledge of typical cyber security attack vectors (e.g. OWASP Top 10, SQL, XSS, XXE, MITM etc.) and can articulate threats … equivalent)• Experience of working with the external penetration test companies to translate report findings into actionable tasks.• Experience with security tools (e.g. Burp Suite, OWASP-ZAP, NMAP, Nessus, Kali, Metasploit etc.)• Knowledge about main cyber security areas (e.g. OSINT, network scanning, enumeration, sniffing, session hijacking, social engineering, firewalls, honeypots ...

engage credibly on cyber and cloud security topics, such as securing web applications and cloud platforms (e.g. AWS or Azure), typical attack vectors (e.g. OWASP Top 10) and common security standards (e.g. NCSC, NIST, CIS, PCI, GDPR, OWASP ASVS, SOC2). You do not need to be the deepest technical ...