1 to 25 of 173 OWASP Jobs in England

Access Management (IAM) Data Protection & Privacy Controls Enterprise Security Architecture Frameworks Familiarity with: NCSC Cloud Security Principles ISO 27001 NIST Cybersecurity Framework CIS Controls OWASP Technical Experience Cloud Platforms AWS Microsoft Azure Google Cloud Platform (GCP) Security Technologies Microsoft Defender Suite Splunk Microsoft Sentinel CrowdStrike Prisma Cloud Wiz Lacework Tenable ...

utilise them In-depth knowledge of security principles, technologies, best practices, and threat detection and mitigation strategies Knowledge of common attack vectors and methodologies (OWASP Top 10, MITRE ATT&CK Framework and social engineering tactics) The ability to identify potential threats, attack vectors and vulnerabilities in systems and applications ...

utilise them In-depth knowledge of security principles, technologies, best practices, and threat detection and mitigation strategies Knowledge of common attack vectors and methodologies (OWASP Top 10, MITRE ATT&CK Framework and social engineering tactics) The ability to identify potential threats, attack vectors and vulnerabilities in systems and applications ...

programming and FastAPI, plus unit testing with Pytest. Experience applying security standards and SDLC controls to software platforms. Experience identifying vulnerabilities using CWE or OWASP, hardening operating systems, and designing or reviewing technical architectures. Working knowledge of agile/DevOps delivery, Jira, CDK/GitOps, penetration testing and technologies such ...

Controls - SABSA - TOGAF Understanding of security operations concepts, incident response, and detection capabilities. Knowledge of application security principles, including secure coding practices and OWASP guidance. Experience with DevSecOps practices and security automation. Familiarity with container and Kubernetes security. Understanding of encryption, key management, and data protection principles. Strong documentation, communication ...

Controls - SABSA - TOGAF Understanding of security operations concepts, incident response, and detection capabilities. Knowledge of application security principles, including secure coding practices and OWASP guidance. Experience with DevSecOps practices and security automation. Familiarity with container and Kubernetes security. Understanding of encryption, key management, and data protection principles. Strong documentation, communication ...

Kubernetes deployment experience. Prometheus or comparable observability platforms. AWS Karpenter. AWS Compute Optimizer. Experience operating highly distributed systems. Familiarity with ISO 27001, NIST SSDF, OWASP SAMM or similar security frameworks. Understanding of GDPR fundamentals. Experience working within defence, national security, critical infrastructure or other regulated environments. Security Clearance ...

with Terraform and infrastructure-as-code at scale Strong understanding of Kubernetes architecture and operating containerised workloads in cloud environments Good understanding of DevSecOps, OWASP principles and security‐by‐design Experience designing and implementing monitoring, logging and observability solutions Strong scripting skills using Python, Bash, PowerShell or similar Experience making ...

with Terraform and infrastructure-as-code at scale Strong understanding of Kubernetes architecture and operating containerised workloads in cloud environments Good understanding of DevSecOps, OWASP principles and security-by-design Experience designing and implementing monitoring, logging and observability solutions Strong scripting skills using Python, Bash, PowerShell or similar Experience making ...

distributed security culture across engineering. What you would bring - Strong hands-on experience in application security, with a solid understanding of secure software development, OWASP Top 10, common application vulnerabilities and secure SDLC practices. Proficiency in one or more programming languages, such as Python or JavaScript, with experience using code ...

technical people. Desirable: An industry recognised qualification in Cyber Security. AWS or Azure mid-level certifications. Participation in the cyber security community (e.g. OWASP, HackTheBox, CTFs etc.). Experience working with agile software development methodologies (e.g. Scrum or Kanban). Embracing our differences At Kainos, we believe in the power ...

accelerate triage, remediation recommendations, and incident response, with appropriate human review and judgement. Knowledge of vulnerability management, common attack patterns, and mitigation techniques. (e.g., OWASP Top 10, MITRE ATT&CK.) Preferred technical and professional experience Experience in security engineering or adjacent engineering roles. (e.g., networking, infrastructure, cloud, or application development. ...

with Terraform and infrastructure‐as‐code at scale Strong understanding of Kubernetes architecture and operating containerised workloads in cloud environments Good understanding of DevSecOps, OWASP principles and security‐by‐design Experience designing and implementing monitoring, logging and observability solutions Strong scripting skills using Python, Bash, PowerShell or similar Experience making ...

Familiarity with CFTC system safeguards expectations, including 17 C.F.R. § 38.1051 and § 39.18 or similar regulatory requirements. AppSec Foundations: Strong grasp of application security principles (OWASP Top 10, NIST) and secure SDLC practices. CI/CD & Tooling: Proficiency with CI/CD tooling (GitHub Actions, GitLab CI, Jenkins, Azure DevOps, CircleCI ...

ZenML) Deployment of on-premise Kubernetes Prometheus (or other stacks) observability Experience with AWS Karpenter & Compute Optimizer Compliance literacy - ISO 27001, NIST SSDF/OWASP SAMM, GDPR basics An active SC or DV clearance is a strong advantage for this role. Why This Role? This is a role for engineers ...

global financial services business models, regional compliance regulations and applicable laws advantageous. Understanding and knowledge of common industry cybersecurity frameworks, standards, and methodologies, including OWASP, ISO2700x series, PCI DSS, GLBA, Global data security and privacy acts, FFIEC guidelines, CIS, and NIST standards advantageous. Skills sre site reliability azure devops bash ...

/SSL, certificates, and access control Experience with observability, monitoring, and alerting tools Security & Compliance Practical experience implementing ISO27001 and SOC2 controls Knowledge of OWASP methodologies and secure development lifecycle practices Experience with vulnerability management, PAM, secrets management, and secure access Platform & Operations Excellence Experience running and scaling highly available ...

Test automation framework experience Strong stakeholder engagement and communication skills Agile Scrum experience Quality-driven mindset Desirable Skills Playwright, JUnit, Selenium, Cucumber/Gherkin, OWASP ZAP, SonarQube, Kubernetes, Docker, AWS, Microservices, OpenAPI, WCAG and DevSecOps practices. What We're Looking For A proactive Quality Engineer who thrives in Defence environments ...

Jenkins, AWS CodePipeline, GitLab CI, or GitHub Actions* Solid understanding of relational and NoSQL databases (e.g., PostgreSQL, MongoDB)* Knowledge of security best practices (e.g. OWASP) and performance optimization* Excellent leadership, communication, time management and mentoring skills, with the ability to influence technical direction **Desirable Qualifications*** Experience in fintech, payments ...

Jenkins, AWS CodePipeline, GitLab CI, or GitHub Actions Solid understanding of relational and NoSQL databases (e.g., PostgreSQL, MongoDB) Knowledge of security best practices (e.g. OWASP) and performance optimization Excellent leadership, communication, time management and mentoring skills, with the ability to influence technical direction Desirable Qualifications Experience in fintech, payments ...

product and adapt to changing priorities. Desirable Technologies Experience with any of the following would be advantageous: JUnit | Playwright | Selenium | Cucumber/Gherkin | Gatling | OWASP ZAP | SonarQube | WireMock | Axe | WCAG | Kubernetes | Docker | Microservices | AWS | OpenAPI | GitHub Copilot The Opportunity This is an excellent opportunity for a Quality Engineer with strong ...

information security, with a strong focus on application security and DevSecOps Strong understanding of secure software development practices and common application security risks (e.g. OWASP Top 10) Hands-on experience working with or integrating DevSecOps tooling within CI/CD environments (e.g. GitLab pipelines) Experience with application security testing tools ...

information security, with a strong focus on application security and DevSecOps Strong understanding of secure software development practices and common application security risks (e.g. OWASP Top 10) Hands-on experience working with or integrating DevSecOps tooling within CI/CD environments (e.g. GitLab pipelines) Experience with application security testing tools ...

high-risk products and services. Conduct and oversee SAST, DAST, API security, fuzz testing and architecture-level assessments . Assess applications against the OWASP Top 10 and other relevant security standards. Identify vulnerabilities, understand their root causes and translate findings into practical remediation plans. Provide secure design and coding guidance ...

continuous deployment (CI/CD) Experience with security testing tools, such as static Code analysis and dynamic Application security testing (DAST) Strong understanding of OWASP Top 10, application security vulnerabilities and web security testing methodologies Understanding of secure coding practices for compliance requirements within SOC2, ISO, HIPAA, HITRUST, etc. Able ...