51 to 75 of 173 OWASP Jobs in England

systems such as Elastic APM or DataDog to track and diagnose issues in production A solid understanding of security principles and secure coding including OWASP Top 10 Nice to haves: Experience in VOIP (SIP and RTP advantageous) Experience of TDD/BDD/DDD Knowledge of PCI compliance and associated ...

DevOps: AWS‐native architectures, CI/CD automation using GitHub Actions,infrastructureand deployment optimisation. Security Engineering: Security‐by‐design mindset with applied knowledge of OWASP Top 10, WCAG, OAuth2, MFA, and secure identity patterns. Quality & Assurance: Proficient in unit testing frameworks; governance and execution of SAST, DAST, SCA, and penetration ...

government standards Writing clean, maintainable, and reusable code/configuration Supporting issue investigation, resolution, and continuous improvement Applying secure development practices, including awareness of OWASP principles Collaborating with stakeholders and clearly communicating technical concepts Tech and environment: Microsoft Power Platform (Power Apps, Power Automate, Dataverse) Integration with wider enterprise systems ...

review code and communicate security issues clearly to developers, primarily within a C# ecosystem, with exposure to Java or Python Strong knowledge of the OWASP Top 10 and practical mitigation patterns Experience implementing or improving SAST/DAST processes: tool tuning, triage workflows, and reducing signal to noise Working understanding ...

improving the security of production software or cloud infrastructure Application and API security depth. Strong command of common web and API vulnerabilities including the OWASP Top 10, and practical knowledge of authentication, authorisation, sessions, secrets and encryption Cloud security. Hands-on experience securing AWS or another major cloud platform, including ...

DDoS mitigation, web proxy, vulnerability management) Understanding of Information Security principles, frameworks and regulatory requirements (e.g. ISO27001, FCA, PRA, ICO) Working knowledge of OWASP Top 10 and build/integration tools (e.g. Maven, Jenkins, Chef, TFS) Effective communication skills, including the ability to explain technical concepts and impacts ...

Kubernetes, and secure software development across Azure and/or AWS Good knowledge of security frameworks and standards, including NIST CSF, MITRE ATT&CK, OWASP, and how to apply security controls in DevOps platforms and processes Experience working across enterprise and solution architecture, with strong knowledge of application security, data ...

cloud environments Knowledge of Windows and Linux/Unix security Understanding of IAM, encryption, PKI and TLS Knowledge of web security principles, including OWASP Top 10, WAF and API security Experience with vulnerability management, patching and security remediation Knowledge of the MITRE ATT&CK Framework and common attack techniques Experience ...

monitoring. Experience applying AI/ML to security workflows – automated triage, behavioural analytics, or LLM‐assisted investigation. Understanding of AI security risks and frameworks: OWASP LLM Top 10, NIST AI RMF. Scripting proficiency in Python, PowerShell, or Bash for security automation. Strong grasp of PCI DSS, NIST ...

design leadership. Deep understanding of AWS security, hybrid cloud design, and modern DevSecOps principles. Strong knowledge of frameworks such as NIST, ISO 27001, OWASP, and CIS. Experience designing and implementing secure, compliant PCI‐DSS solutions. Solid grounding in tools and technologies like SIEM, IDS/IPS, DLP, endpoint protection ...

with the Model Context Protocol (MCP) for tool and context integration in agentic systems Familiarity with secure‐by‐design development principles (ISO 27001, NIST, OWASP) Experience in defence, national security, or similarly regulated environments Contributions to open‐source AI/ML projects An active SC or DV clearance ...

Governance: Proactively identify systemic delivery and technical risks—including model drift, IP leakage, licensing issues in generated code, data privacy breaches, and security vulnerabilities (OWASP Top 10 for LLMs). Regulatory & Safety Compliance: Ensure all delivery frameworks adhere strictly to evolving AI governance standards, copyright guidelines, data privacy regulations (GDPR ...

Bring Deep AppSec Expertise: Extensive, hands‐on experience in application security, with mastery of the SSDLC, secure coding principles, and common vulnerability classes (OWASP Top 10, etc.). A Builder of Standards: Proven experience creating, documenting, and rolling out security standards, patterns, and best practices in a complex engineering environment. ...

appropriate tools. Familiarity with Continuous Security, Continuous Integration and Continuous Delivery practices. Solid understanding of network security (OSI, TCP/IP), web application security (OWASP) and cryptographic controls (PKI, TLS). Track record in managing, mentoring and coaching team members, with a passion for people development. Excellent communication skills, able ...

practices. Work with Continuous Security, CI/CD, and automated testing approaches. Apply expertise in network security (OSI, TCP/IP), web application security (OWASP), and cryptography (PKI, TLS). Mentor, coach, and support the development of junior staff. Communicate complex security topics effectively to both technical and non-technical ...

tools. • Experience with Continuous Security, Continuous Integration and Continuous Delivery techniques. • Experience of network security (e.g. OSI, TCP/IP), web application security (e.g. OWASP) and cryptographic controls (e.g. PKI, TLS). • We are passionate about developing people – a demonstrated ability in managing, mentoring and coaching members of your team ...

comfortable translating technical complexity into clear decisions, and confident working with stakeholders at all levels. You understand frameworks like NIST, ISO 27001, CIS, OWASP etc., and ideally have experience designing or supporting PCI compliant environments. You’re hands‐on with tools such as SIEM, IDS/ ...

cloud and serverless architecture Solid grounding in secure software development, including threat modelling, secure coding, awareness of common application security risks such as the OWASP Top 10, automated security testing and running penetration tests Practical experience across vulnerability management, identity and privileged access, data security, and software supply‐chain practices ...

Pentera, etc.) Hands-on experience across Azure and Microsoft security stack Scripting/automation capability (PowerShell, Python, Bash) Strong grounding in MITRE ATT&CK, OWASP, and modern threat vectors (Background in insurance, financial services, or regulated environments is highly beneficial). If you are looking for: End-to-end ownership ...

Reporting* SOC – Experienced in Security Ops, Incident Response, Threat Hunting, Malware/Forensic Analysis* WebApps – Experienced in WebApp DevSecOps best practices, WebApp scanning for OWASP top 10.* Good understanding of GRC strategies and tools, Threat Intelligence, SIEMs, XDR, ICS/OT security* Relevant industry certifications: CISSP, CEH, CCNP, Public Cloud ...

security features Extensive RBAC/ABAC knowledge and implementation experience Experience with user, agent, and machine authentication workflows. Hands‐on experience with secure coding, OWASP Top 10, and threat modeling. Strong developer skills and extensive experience shipping code to production. Experienced in CI/CD, IaC, Python and Go. Track ...

machine learning applications Experience with frontend mapping frameworks (e.g., Cesium, Mapbox, Leaflet) Knowledge of application security best practices and secure coding principles (e.g., OWASP Top 10) Note: We want Arondite to bring together individuals from diverse backgrounds and perspectives. We don’t expect everyone to have experience across each ...

automated testing, test driven development (TDD), continuous integration, pair programming, code review and version control Understanding of common web security risks such as OWASP Top 10, and the corresponding mitigations Enjoy researching and learning new programming tools and techniques and sharing their skills with others Have experience working ...

principles and modern development approaches: automated testing, TDD, continuous integration, pair programming, code review and version control Awareness of common web security risks (eg OWASP Top 10) and corresponding mitigations Comfortable with ambiguity and able to work through extended periods with little or no coding, focused instead on discovery ...

execution strategies Familiarity with observability tools (Application Insights, Azure Monitor) Exposure to performance testing tools (k6, JMeter,NBomber) Awareness of security testing principles (e.g. OWASP, SAST, dependency scanning) Why us? At The Openwork Partnership, we're a dynamic, fast paced, and growing business with huge ambition. This is all made ...