151 to 175 of 179 OWASP Jobs in England

manually confirming exploitability beyond what scanners or AI analysis reports. Use Interactive Application Security Testing (IAST) tools for runtime analysis, such as Burp Suite, OWASP ZAP, Frida, applying hands‐on technique to validate and extend automated results. Conduct Static Application Security Testing (SAST) and Software Composition Analysis (SCA) on source … secure coding training and promote a positive security posture. Requirements Have hands‐on experience with DAST, IAST and penetration testing tools (e.g., Burp Suite, OWASP ZAP, Frida), and can manually identify and exploit vulnerabilities beyond what these tools surface automatically. Can demonstrate independent, hands‐on technical ability, for example through ...

practical terms. Experience with AI governance, responsible AI, model risk management or AI assurance. Familiarity with frameworks and guidance such as NIST AI RMF, OWASP Top 10 for LLM Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations ...

simple, practical terms.Desirable SkillsExperience with AI governance, responsible AI, model risk management or AI assurance.Familiarity with frameworks and guidance such as NIST AI RMF, OWASP Top 10 for LLM Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks.Experience with SOC operations, SIEM ...

should have practical security testing experience on web apps, APIs, or mobile apps, and familiarity with Burp Suite, nuclei, and Nmap. Knowledge of OWASP Top 10 and ability to report risk clearly is essential. #J-18808-Ljbffr ...

C#, MVC, ASP.NET Core, JavaScript, HTML & CSS Experience debugging, profiling and deploying web applications Solid understanding of MVC patterns, ASP.NET controllers & web security (OWASP) Comfortable working with IIS Exposure to frameworks like React, Vue, Angular or Knockout is a plus Degree in Computer Science or related field preferred ...

development experience- Experience with SQL Server or similar relational databases- Experience building web applications using Angular, React, Blazor or similar frameworks- An understanding of OWASP security best practices and secure by design principles- The ability to communicate effectively with technical and non-technical stakeholders- The ability to estimate, prioritise ...

Expertise in Continuous Security, Continuous Integration and Continuous Delivery techniques• Knowledge of international security standards and regulations such as NCSC, NIST, CIS, PCI, GDPR, OWASP ASVS, HIPPA, SOC2 etc.• Knowledge of typical cyber security attack vectors (e.g. OWASP Top 10, SQL, XSS, XXE, MITM etc.) and can articulate threats … equivalent)• Experience of working with the external penetration test companies to translate report findings into actionable tasks.• Experience with security tools (e.g. Burp Suite, OWASP-ZAP, NMAP, Nessus, Kali, Metasploit etc.)• Knowledge about main cyber security areas (e.g. OSINT, network scanning, enumeration, sniffing, session hijacking, social engineering, firewalls, honeypots ...

Application, AI, and Infrastructure security: AI & Application Security: Lead the defense against LLM-specific vulnerabilities (Prompt Injection, Insecure Output Handling) and standard web threats (OWASP Top 10). Implement "Guardrails" that sanitize agent inputs/outputs and conduct continuous red-teaming of our agent behaviors. Secure SDLC & DevSecOps: Embed security … code in Python or Go and spot logic flaws that scanners miss. AI Security Curiosity: Understand the unique risks of LLMs. Familiar with the OWASP Top 10 for LLMs and have explored defenses against prompt injection and data exfiltration in agentic systems. Cloud Native Security: Hands-on experience securing ...

over 8 years of experience and a strong focus on security feature design, authentication workflows, and extensive knowledge of secure coding practices, including OWASP Top 10. Additional perks include equity options, private medical insurance, and a hybrid working model. #J-18808-Ljbffr ...

colleagues.- Assist in managing vulnerability findings from penetration tests, bug bounty programmes, and automated tooling, tracking remediation and validating fixes.- Apply knowledge of the OWASP Top 10 and secure development frameworks to practical security reviews and guidance activities.Technology Risk- Support technology risk assessments across infrastructure, cloud environments, and third-party … perspective.- Exposure to security or GRC tooling such as Wiz, Qualys, Microsoft Sentinel, ServiceNow GRC, or similar.- Awareness of AI governance frameworks or the OWASP LLM Top 10.- Some scripting or automation experience (Python, etc.) is a plus.Additional InformationBring all of you to workWe create the conditions for high performers ...

security reviews, threat modeling applications and identifying areas of risk Experience implementing strategies to support secure and compliant architectures Deep understanding of the OWASP Top 10 application security risks and how to address them Expert knowledge of Amazon AWS, Microsoft Azure or other cloud computing platform offerings and security related … experience Nice to Have Experience with assessing and providing recommendations for securing generative AI solutions Working knowledge of the Microsoft Security Development Lifecycle (SDL), OWASP Software Assurance Maturity Model (SAMM), or Building Security in Maturity Model (BSIMM). Familiar with compliance regulations like; ISO, GDPR, SOC2, SOX MS in Cyber ...

reference implementations, mentor engineers, and uplift AppSec skills.QualificationsWhat you need:Several years in Web applications and APIs, including focused on Application security.Deep knowledge of:OWASP Top 10, OWASP API Security Top 10, secure coding patterns, input validation, schema enforcement.APIs (e.g., GraphQL/REST, XML/SOAP API Gateways like Apigee ...

engage credibly on cyber and cloud security topics, such as securing web applications and cloud platforms (e.g. AWS or Azure), typical attack vectors (e.g. OWASP Top 10) and common security standards (e.g. NCSC, NIST, CIS, PCI, GDPR, OWASP ASVS, SOC2). You do not need to be the deepest technical ...

engage credibly on cyber and cloud security topics, such as securing web applications and cloud platforms (e.g. AWS or Azure), typical attack vectors (e.g. OWASP Top 10) and common security standards (e.g. NCSC, NIST, CIS, PCI, GDPR, OWASP ASVS, SOC2). You do not need to be the deepest technical ...

Checkout ahead of emerging obligations.Support Checkout's AI Security programme including threat modelling for agentic and LLM-based systems, and controls mapping against the OWASP LLM Top 10 and related frameworks.Technology RiskConduct technology risk assessments across infrastructure, cloud environments, and third-party systems, producing clear outputs with actionable treatment recommendations.Support … perspective.Experience with security or GRC tooling such as Wiz, Qualys, Microsoft Sentinel, ServiceNow GRC, or similar.Understanding of agentic AI and LLM security risks including OWASP LLM Top 10, prompt injection, and data exfiltration vectors.Hybrid Working ModelAll of our offices globally are onsite three times per week (Tuesday, Wednesday, and Thursday ...

majority remote role with a London focus. The candidate will evaluate security impacts across Java, TypeScript and Python codebases and APIs, with strong OWASP Top 10 knowledge and secure coding practices. You will triage, validate and remediate vulnerabilities, coordinating with both technical and non-technical stakeholders and embedding security tooling ...

issues Lead the pentesting cadence around the core application set by conducting hacking exercises Provide application code reviews against known development frameworks such as OWASP ASVS Provide input into the design of functional and non-functional security controls such as customer authentication workflows Run Security Champion sessions to keep developers … Application Security Understanding of Software Development Life Cycle Desirable Security professional at heart borne froma software engineering background Experience of working with the OWASP ASVS framework Experience in Agile delivery environments Greenfield experience setting up security technologies from scratch Outgoing and able to build relationships with key stakeholders Personal Capabilities ...

technical software issuesLead the pentesting cadence around the core application set by conducting hacking exercisesProvide application code reviews against known development frameworks such as OWASP ASVSProvide input into the design of functional and non-functional security controls such as customer authentication workflowsRun Security Champion sessions to keep developers aware … drive to succeed in Application SecurityUnderstanding of Software Development Life CycleDesirableSecurity professional at heart borne from a software engineering backgroundExperience of working with the OWASP ASVS frameworkExperience in Agile delivery environmentsGreenfield experience setting up security technologies from scratchOutgoing and able to build relationships with key stakeholdersPersonal Capabilities Required, e.g. skills ...

Akamai, tuning rules and responding to emerging threats. Review and improve web ingress controls including DDoS mitigation, rate limiting, and certificate management. Apply OWASP principles across the organisation's web applications, working with development teams to identify and remediate vulnerabilities. Lead API security design and governance, ensuring consistent security controls … platforms. Deep hands‐on experience with Microsoft Defender for Cloud, Entra ID, Conditional Access policies, and Azure app registrations. Practical knowledge of API security, OWASP Top 10 remediation, and secure web application design. Experience working embedded in engineering or platform teams within an Agile/DevOps environment. Familiarity with ...

hardening Monitor systems for irregular behaviour and proactively design detection and prevention mechanisms Ensure infrastructure and applications align with accepted industry standards (e.g. OWASP Top 10 , AWS Well-Architected Framework ) Conduct and lead risk assessments , including third-party/vendor reviews and internal evaluations Document and maintain security policies, procedures … ecosystem and can comfortably navigate enterprise security tools across vendors Have solid foundations in networking, systems, and cloud infrastructure, and can apply frameworks like OWASP and AWS Well-Architected to real-world scenarios Have experience reviewing and improving product and infrastructure security, including secure SDLC practices (e.g. threat modelling, secure ...

applications. Alternatively, Red Team experience running adversary simulations as an operatorFamiliarity with common security testing tools: Burp Suite, nuclei, nmap, or similarWorking knowledge of OWASP Top 10 and at least some exposure to OWASP LLM Top 10 or MITRE ATLASAbility to triage findings and communicate risk clearly to technical … requirements listed above.------------------------------------------------------Other Relevant Skills Agentic Design, AI Penetration Testing, Artificial Intelligence (AI), Cybersecurity, Large Language Models (LLMs), MITRE ATT&CK Framework, OWASP Top 10, Penetration Testing.------------------------------------------------------Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation ...

Our PurposeMastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital ...

Team experience running adversary simulations as an operator* Familiarity with common security testing tools: Burp Suite, nuclei, nmap, or similar* Working knowledge of OWASP Top 10 and at least some exposure to OWASP LLM Top 10 or MITRE ATLAS* Ability to triage findings and communicate risk clearly to technical ...

security engineering experience. Proven experience administering Akamai WAAP. Strong knowledge of WAF policy tuning, API security controls and application onboarding. Good understanding of OWASP Top 10 and OWASP API Security Top 10. Knowledge of HTTP/S, REST APIs and application layer attack mitigation. Experience with vulnerability management, Qualys ...

authentication mechanisms. Security Expertise Runtime Application Self‐Protection (RASP) Anti‐tampering protections Anti‐debugging mechanisms Certificate pinning Application integrity validation Strong understanding of: OWASP Mobile Top 10 OWASP MASVS Secure SDLC practices Mobile attack techniques and adversarial behaviour Knowledge of: Frida Objection Dynamic instrumentation frameworks Jailbreak environments Runtime hooking methodologies ...