25 of 25 Permanent OWASP Jobs in Yorkshire

Experience with cloud technologies such as Microsoft Azure or AWS. Hands-on experience with browser automation tools and writing Cucumber/Gherkin. Familiarity with OWASP Testing Tools and CI/CD pipelines. Knowledge of ISTQB/ISEB qualifications, JIRA, and Microsoft Azure DevOps. Experience in performance testing (K6 experience is More ❯

Experience with cloud technologies such as Microsoft Azure or AWS. Hands-on experience with browser automation tools and writing Cucumber/Gherkin. Familiarity with OWASP Testing Tools and CI/CD pipelines. Knowledge of ISTQB/ISEB qualifications, JIRA, and Microsoft Azure DevOps. Experience in performance testing (K6 experience is More ❯

Experience with cloud technologies such as Microsoft Azure or AWS. Hands-on experience with browser automation tools and writing Cucumber/Gherkin. Familiarity with OWASP Testing Tools and CI/CD pipelines. Knowledge of ISTQB/ISEB qualifications, JIRA, and Microsoft Azure DevOps. Experience in performance testing (K6 experience is More ❯

with REST APIs and Microservices. - Confident using CI/CD tools (Git, GitLab CI, Jenkins, SonarQube, etc.). - Solid understanding of secure coding and OWASP tools (e.g. ZAP). - Proven experience in full software development lifecycle. JBRP1_UKTJ More ❯

experience in the design, development, and support of software products. Knowledge of best practices for coding defensively against possible attack vectors, and testing with OWASP tooling (e.g. ZAP). Desirable skills/knowledge/experience: Test experience: unit, integration, performance, security § Java (1.8) (including Spring Boot, Drop Wizard, Jersey, CXF More ❯

experience in the design, development, and support of software products. Knowledge of best practices for coding defensively against possible attack vectors, and testing with OWASP tooling (e.g. ZAP). Desirable skills/knowledge/experience: Test experience: unit, integration, performance, security § Java (1.8) (including Spring Boot, Drop Wizard, Jersey, CXF More ❯

Any experience with security products such as Trellix, Ivanti, ClearSwift and Yubikey will be a bonus Experience working with secure coding practices and vulnerabilities (OWASP Top 10, SANS Top 25) Security compliance and regulatory frameworks (e.g., NIST, CIS Benchmarks) Experience working with DevOps tools (e.g. Kubernetes, CI/CD pipelines More ❯

Any experience with security products such as Trellix, Ivanti, ClearSwift and Yubikey will be a bonus Experience working with secure coding practices and vulnerabilities (OWASP Top 10, SANS Top 25) Security compliance and regulatory frameworks (e.g., NIST, CIS Benchmarks) Experience working with DevOps tools (e.g. Kubernetes, CI/CD pipelines More ❯

Any experience with security products such as Trellix, Ivanti, ClearSwift and Yubikey will be a bonus Experience working with secure coding practices and vulnerabilities (OWASP Top 10, SANS Top 25) Security compliance and regulatory frameworks (e.g., NIST, CIS Benchmarks) Experience working with DevOps tools (e.g. Kubernetes, CI/CD pipelines More ❯

Any experience with security products such as Trellix, Ivanti, ClearSwift and Yubikey will be a bonus Experience working with secure coding practices and vulnerabilities (OWASP Top 10, SANS Top 25) Security compliance and regulatory frameworks (e.g., NIST, CIS Benchmarks) Experience working with DevOps tools (e.g. Kubernetes, CI/CD pipelines More ❯

Any experience with security products such as Trellix, Ivanti, ClearSwift and Yubikey will be a bonus Experience working with secure coding practices and vulnerabilities (OWASP Top 10, SANS Top 25) Security compliance and regulatory frameworks (e.g., NIST, CIS Benchmarks) Experience working with DevOps tools (e.g. Kubernetes, CI/CD pipelines More ❯

Any experience with security products such as Trellix, Ivanti, ClearSwift and Yubikey will be a bonus Experience working with secure coding practices and vulnerabilities (OWASP Top 10, SANS Top 25) Security compliance and regulatory frameworks (e.g., NIST, CIS Benchmarks) Experience working with DevOps tools (e.g. Kubernetes, CI/CD pipelines More ❯

Any experience with security products such as Trellix, Ivanti, ClearSwift and Yubikey will be a bonus Experience working with secure coding practices and vulnerabilities (OWASP Top 10, SANS Top 25) Security compliance and regulatory frameworks (e.g., NIST, CIS Benchmarks) Experience working with DevOps tools (e.g. Kubernetes, CI/CD pipelines More ❯

training, and guidance on security practices and their relevance. Partner with product and engineering teams, embedding secure software development practices (DevSecOps, secure coding standards, OWASP top 10) into everyday processes. Oversee the security posture of cloud environments, ensuring secure configurations, proactive threat monitoring, and resilience planning. Establish and maintain a More ❯

and Frameworks Payment Card Industry Data Security Standard (PCI-DSS) General Data Protection Regulation (GDPR) and Privacy Practices ISO 27001/2 Knowledge of OWASP 10 NIST Cybersecurity Framework (CSF) CIS and Benchmarking By joining Morrisons, you not only become an essential asset to our success but also open doors More ❯

and Frameworks Payment Card Industry Data Security Standard (PCI-DSS) General Data Protection Regulation (GDPR) and Privacy Practices ISO 27001/2 Knowledge of OWASP 10 NIST Cybersecurity Framework (CSF) CIS and Benchmarking By joining Morrisons, you not only become an essential asset to our success but also open doors More ❯

and Frameworks Payment Card Industry Data Security Standard (PCI-DSS) General Data Protection Regulation (GDPR) and Privacy Practices ISO 27001/2 Knowledge of OWASP 10 NIST Cybersecurity Framework (CSF) CIS and Benchmarking By joining Morrisons, you not only become an essential asset to our success but also open doors More ❯

practices and version control systems including CI/CD build pipelines (GitLab, Jenkins, Selenium). Experience of Secure web and API development best practices (OWASP) and authentication protocols and encryption techniques. Candidates MUST be based locally to West Yorkshire and have full right to work in the UK. No sponsorship More ❯

practices and version control systems including CI/CD build pipelines (GitLab, Jenkins, Selenium). Experience of Secure web and API development best practices (OWASP) and authentication protocols and encryption techniques. Candidates MUST be based locally to West Yorkshire and have full right to work in the UK. No sponsorship More ❯

architects, engineers, and QA teams to improve DevOps practices within an Agile framework. Ensure security compliance with UK regulations (UK-GDPR, PCI-DSS) and OWASP best practices. Support disaster recovery planning and backup strategies. What We're Looking For: Considerable experience in DevOps/Site Reliability Engineering for high-traffic More ❯

and digital experience owners to improve DevOps best practices and workflows within an Agile framework. Implementing security measures, compliance policies, and vulnerability assessments following OWASP guidelines and applicable UK regulations such as UK-GDPR, UK Payment Services Regulations and PCI-DSS. Supporting disaster recovery planning and backup strategies. Keeping up … Knowledge of scripting and automation languages such as Powershell, Bash. Familiarity with networking and security best practices. Knowledge of application secure coding principles (e.g., OWASP) for protection against vulnerabilities and the ability to implement secure coding and deployment best practices. Experience in Agile software development methodologies and how DevOps practices More ❯

SDLC) processes Works with engineering and development team to ensure in-house technologies comply with relevant security standards, regulations, and industry certifications, such as OWASP, CIS, PCI-DSS, ISO27001 to ensure security is prioritised throughout the development lifecycle Maintains current understanding of policy, regulations, and compliance standards that affect assigned … senior technology and information security executives and in influencing stakeholders to achieve strategic objectives Experience in working with industry frameworks and standards such as OWASP, PCIDSS, ISO27001/27002, CIS and NIST Information Security (CISSP, CISA, Security +) and cloud certification (preferably GCP/AWS) What’s In It For More ❯

SDLC) processes Works with engineering and development team to ensure in-house technologies comply with relevant security standards, regulations, and industry certifications, such as OWASP, CIS, PCI-DSS, ISO27001 to ensure security is prioritised throughout the development lifecycle Maintains current understanding of policy, regulations, and compliance standards that affect assigned … senior technology and information security executives and in influencing stakeholders to achieve strategic objectives Experience in working with industry frameworks and standards such as OWASP, PCIDSS, ISO27001/27002, CIS and NIST Information Security (CISSP, CISA, Security +) and cloud certification (preferably GCP/AWS) What’s In It For More ❯

ll analyse new feature code to identify security risks and work with engineers to mitigate them, working and applying modern security standards such as OWASP CI/CD, DSOMM, SAMM and Cloud Security Posture management systems such as Azure Defender and Prisma Cloud. What you'll be doing: · Analysing new … complicated Salesforce environments · Exposure to Cloud Native software development, including cloud infrastructure and API design (Azure preferred) · Proven experience applying modern standards such as OWASP CI/CD, DSOMM, SAMM etc · Strong networking protocol knowledge (TCP/IP, UDP, HTTP/3, AMQP, streaming protocols etc), cloud network design (VPNs More ❯

to work remotely with some occasional trips to the London site. This role will be operating INSIDE IR35 Key Skills Required: Deep knowledge of OWASP API Top 10 Able to review Swagger/Open API specs for vulnerabilities Advise on secure API design patterns Familiar with fallback controls such as … WAF's, API gateways Experience using SIEM/logging tools to track API threats Familiarity with NIST, OWASP SAMM, or internal security frameworks Experience producing risk dashboards/reports for API's Able to translate technical risks into business language, collaborating with key stakeholders If interested in this role, please More ❯