101 to 125 of 173 OWASP Jobs in England

Google and UCL, the company digitally transforms the global insurance market. Задачи Provide implementation advice on securing AI-powered applications using frameworks such as OWASP ASVS and the OWASP Top 10 for LLM Applications; Lead threat modelling sessions for AI and agentic systems during technical design using STRIDE ...

global insurance market. What you will be doing: Provide practical implementation advice and guidance on securing AI-powered applications, aligning with frameworks like OWASP ASVS and the OWASP Top 10 for LLM Applications. Lead threat modelling sessions for AI and agentic systems during the technical design phase using STRIDE ...

Controls Cyber Essentials & Cyber Essentials Plus DORA, NIS2, EU AI Act Requirements, GDPR Risk Management and Security Governance Security Operating Models and Roadmaps OWASP, MITRE, MITRE ATLAS. Microsoft Security Expertise – Strong working knowledge of: Microsoft 365 Security & Compliance Microsoft Security Copilot Agent 365 and emerging Microsoft AI‐driven security capabilities ...

products and services. Conduct and oversee SAST, DAST, fuzz testing and API security assessments. Perform architecture, design and code security reviews. Assess applications against OWASP Top 10 and other industry standards. Translate findings into practical remediation plans and developer guidance. Secure Development & DevSecOps Support the development of secure coding standards … practices. Experience working with SAST, DAST and Software Composition Analysis (SCA) tools. Experience integrating security controls into CI/CD pipelines. Strong understanding of OWASP Top 10 and common vulnerability classes. Experience with API and web application security. Knowledge of threat modelling techniques and methodologies. Experience working closely with software ...

implement Security Operations Centre (SOC) operating models. Conduct vulnerability management programmes, gap analyses, and remediation tracking. Lead penetration testing and application security assessments (OWASP Top 10). Oversee DLP and DDA monitoring strategies. Compliance & Regulatory Alignment Support ISMS implementation aligned with ISO 27001. Ensure alignment with GDPR, PCI‐DSS, DORA ...

design principles. Experience deploying and managing containerised applications and environments. Familiarity with cyber security frameworks and standards, including: NIST Cyber Security Framework Cyber Essentials OWASP IEC 62443 EU Cyber Resilience Act (CRA) UK Product Security and Telecommunications Infrastructure (PSTI) requirements Desirable Experience Operational Technology (OT) and manufacturing environment experience. Knowledge ...

architecture expertise to assess control effectiveness across modern engineering environments. You will review security tooling, map controls to frameworks such as NIST SSDF and OWASP DSOMM, conduct control assessments and facilitate engineering #J-18808-Ljbffr ...

deduplication and timeout handling. Protocols and security: Understand HTTP/1.1, HTTP/2 and HTTP/3, HTTPS, CORS, preflight requests, secure headers, OWASP Top 10 risks including XSS, CSRF and injection, plus OAuth 2.0, OIDC, SSO, MFA and secure Bearer token management. Performance, state and data Performance: Reduce ...

Proficiency with Maven/Nexus and GitLab CI/CD. Understanding of distributed systems, clustering, and failover. Strong knowledge of web security standards and OWASP Top 10. Optional: Exposure to front-end tech, Python scripting, or AI/ML APIs. 8+ years of professional Java development. Enterprise-level backend/ ...

risks are appropriately recorded and accepted. Ensure penetration testing and remediation activities align with relevant security standards, regulatory requirements and industry best practice, including OWASP, NIST, ISO 27001, PCI-DSS, GDPR and CAF. Ensure appropriate governance, documentation and evidence is maintained throughout the testing lifecycle. Provide assurance over the quality ...

risks are appropriately recorded and accepted. Ensure penetration testing and remediation activities align with relevant security standards, regulatory requirements and industry best practice, including OWASP, NIST, ISO 27001, PCI-DSS, GDPR and CAF. Ensure appropriate governance, documentation and evidence is maintained throughout the testing lifecycle. Provide assurance over the quality ...

leadership.* Expertise in Java/Kotlin, Spring Boot, REST APIs, and MongoDB.* Experience with ReactJS, JavaScript, and TypeScript.* Strong understanding of secure coding (e.g., OWASP principles).* Strong experience with CI/CD, Git workflows, automated testing.* Experience leading AI feature development or integrating ML models into production systems.**Career ...

Apply techniques including STRIDE, PASTA, Attack Trees and MITRE ATT&CK to identify and assess threats. Identify vulnerabilities using frameworks such as CWE and OWASP . Define, document and maintain appropriate security controls and mitigations. Manage the lifecycle of identified threats and associated controls. Deliver threat models and supporting activities … Trees, tooling and MITRE ATT&CK. Professional experience working within a Cyber Security/Information Security role - essential . Identifying vulnerabilities using CWE and OWASP . Security principles covering: Authentication and authorisation Logging and monitoring Encryption Infrastructure security Network security and segmentation Operating systems and security hardening. Software development concepts ...

independently What will you bring to the team? Experience defining controls for complex environments independent of the underlying platform or technology Detailed knowledge of OWASP Top 10, and in relation how to design appropriate security controls Experience working with Secure Coding Tools (SCA, SAST & Secrets) Experience in identifying & addressing vulnerabilities ...

against web applications) Experience securing cloud-based infrastructures and solutions Previous experience working on an information security team Advanced knowledge of common security vulnerabilities (OWASP) and best practices Familiarity with SOC II controls and how to review them Experience in other technical roles (SysAdmin, Helpdesk, etc.) Strong understanding of Linux ...

parties, including conflict resolution due to changing priorities. Experience of using common information security management frameworks, such as NIST, PCI, GDPR, ISO Series, OWASP the IT Infrastructure Library (ITIL), the ISF Standards of Good Practice (SoGP) and ISACA’s Control Objectives for Information and related Technology (COBIT) frameworks. Actively represent ...

high-risk products and services. Conduct and oversee SAST, DAST, API security, fuzz testing and architecture-level assessments . Assess applications against the OWASP Top 10 and other relevant security standards. Identify vulnerabilities, understand their root causes and translate findings into practical remediation plans. Provide secure design and coding guidance … security , including model, data and prompt/model manipulation risks. Experience delivering developer-focused security training or workshops. Knowledge of frameworks such as OWASP SAMM, ASVS, NIST CSF or NIST SSDF . Relevant application security, cloud security or offensive security certifications. Experience working across multiple teams, countries or business entities. ...

assessing security controls across cloud environments, APIs, CI/CD pipelines, identity services and data platforms. Working knowledge of relevant guidance, such as OWASP guidance for LLM and agentic applications, MITRE ATLAS and cloud-provider AI security guidance. Ability to participate in incident response and product security operations as required. ...

following: Security Engineering Identity & Access Management Email Security Vulnerability Management Security monitoring and logging Secure technical change Security frameworks including ISO 27001, NIST or OWASP Experience with Microsoft Defender, Purview, Intune, cloud automation or DevSecOps would be advantageous but isn't essential. What's in this for you This role ...

security Endpoint Protection Identity & Access Management Email Security Vulnerability Management Security monitoring and logging Secure technical change Security frameworks including ISO 27001, NIST or OWASP Experience with Microsoft Defender, Purview, Intune, cloud automation or DevSecOps would be advantageous but isn't essential. What's in this for you This role ...

generative AI, LLMs and AI-enabled solutions in a change environment. Knowledge of emerging AI security frameworks and standards, including NIST AI RMF, the OWASP Top 10 for LLM Applications, MITRE ATLAS and ISO 42001. The judgement to balance innovation with security, regulatory compliance and operational resilience. Clear communication skills ...

generative AI, LLMs and AI-enabled solutions in a change environment. Knowledge of emerging AI security frameworks and standards, including NIST AI RMF, the OWASP Top 10 for LLM Applications, MITRE ATLAS and ISO 42001. The judgement to balance innovation with security, regulatory compliance and operational resilience. Clear communication skills ...

stakeholders. Key Skills: Knowledge and experience with technology, security and DP related compliance, legal & regulatory frameworks and standards, including Cyber Essentials, ISO27001, PCI DSS, OWASP, GDPR etc. Knowledge and experience of the Microsoft stack. Purview experience is beneficial. Ability to demonstrate expert knowledge and understanding of information security good practice. ...

HTML and CSS MySQL or similar relational databases RESTful API development and integration Git/GitHub Understanding of secure web development practices Awareness of OWASP and common web application vulnerabilities Ability to understand and work effectively within an existing codebase Experience with Claude Code, Anthropic or other AI coding assistants ...

significant focus on web application security. Strong hands-on experience attacking and defending modern web tech stacks Proficient with offensive web toolsets (Burp Suite, OWASP ZAP) and experienced building extensions/scripts. Experience with developing and maintaining web-focused tooling and automation (Burp extensions, custom scanners, authenticated API fuzzers, GraphQL ...