6 of 6 OWASP Jobs in Edinburgh

such as github actions and Terraform. Hands‐on AWS security experience and Azure security experience (Entra ID, PIM, CAP, Defender, Policy) Deep knowledge of OWASP frameworks, secure SDLC, and application security assessment Experience conducting or coordinating penetration testing and threat modelling Experience with secure code and architecture review, ideally ...

Black Duck; policy as code; or threat modelling. Familiarity with relevant security standards and frameworks, such as NCSC Secure by Design, ISO 27001, OWASP or SLSA. Site reliability engineering practices, disaster recovery testing or supplier‐to‐operations handover. Candidates are not expected to have used every technology listed. Strong core ...

Must have the ability to take ownership for high complexity Security Assessments. Ability to operate Spacelabs Medical Devices and Solutions. Secure Coding and Development (OWASP SAMM), MITRE/SANS Top 25) Secure Software Development Life Cycle Security Frameworks (ISO 2700x, NIST Special Publications) Static Code Analysis Cloud Development and Cloud ...

Governance: Proactively identify systemic delivery and technical risks—including model drift, IP leakage, licensing issues in generated code, data privacy breaches, and security vulnerabilities (OWASP Top 10 for LLMs). Regulatory & Safety Compliance: Ensure all delivery frameworks adhere strictly to evolving AI governance standards, copyright guidelines, data privacy regulations (GDPR ...

well architected, maintainable and uses appropriate design patterns and SOLID principles.* Accountable to ensure team code quality, security and testability is high e.g. SonarQube, OWASP* Working with product management to provide technical solutions to meet product requirements and delight our customers.* Managing, leading and developing a team of engineers ...

delivering client‐facing engagements. Network testing: external and internal, Active Directory attack paths, privilege escalation, lateral movement, post‐exploitation. Web and API testing: the OWASP Top 10 and, more importantly, what it misses, meaning business logic flaws, authentication and session weaknesses, and multi‐step chains. Red teaming: objective‐based operations ...