1 to 25 of 54 Remote/Hybrid OWASP Jobs in London

Helm) CI/CD pipeline design and management (Jenkins, GitHub Actions, or equivalent) Configuration management and release management Software Engineering Practices Secure development and OWASP best practices Source control and code management (Git, branching strategies) Software design and development (clean code, code reviews) Service operations and resiliency (fault tolerance, circuit ...

Helm) CI/CD pipeline design and management (Jenkins, GitHub Actions, or equivalent) Configuration management and release management Software Engineering Practices Secure development and OWASP best practices Source control and code management (Git, branching strategies) Software design and development (clean code, code reviews) Service operations and resiliency (fault tolerance, circuit ...

/Security Hub. Strong coding ability in TypeScript or Python or Go comfortable shipping production code, not just configs and scripts. Application security fluency: OWASP Top 10, threat modeling, and code‐level reviews on real systems. Experience securing a B2B SaaS multi‐tenant production environment. Comfort owning ...

supporting live-service issues. Strong attention to detail and commitment to secure, reliable and maintainable solutions. Desirable Skills Interest in Infrastructure as Code, OpenTelemetry, OWASP, PowerShell, Postman, YAML, Pulumi or Terraform. Exposure to containers, CDNs, networking or IT service management. Experience with GraphQL or SOAP. Experience with Power Apps ...

. Deployment of on‐premise Kubernetes Prometheus (or other stacks) observability Experience with AWS Karpenter & Compute Optimizer Compliance literacy - ISO 27001, NIST SSDF/OWASP SAMM, GDPR basics Why Oxford Dynamics? Join the most exciting growth area in the UK: AI and robotics. Every member of the Oxford Dynamics team ...

have the following experience; Experience assessing security impacts across codebases and APIs using languages such as Java, TypeScript and Python. Strong knowledge of the OWASP Top 10, secure coding practices, and common web and API vulnerabilities. Hands-on experience triaging, validating and remediating vulnerabilities with both technical and non-technical ...

5+ years of relevant experience in the medical device space (either industry or through consulting/service provider) Proficiency in security frameworks (e.g., NIST, OWASP, MITRE ATT&CK, PASTA, STRIDE) and standards such as FDA cybersecurity guidance Experience assessing security risks using industry standard methods (penetration test results, threat modeling ...

product launches Threat modeling, secure design reviews, and static/dynamic code analysis across the SDLC Identifying and remediating common web application vulnerabilities (OWASP Top 10) Experience securing internal AI/LLM platforms and coding agents (model gateways, prompt/response controls, agent permissioning) Nice to have experience: Experience ...

security and security operations. Proven leadership of security engineering or SOC teams — including distributed, multi-region teams. Expert-level knowledge of secure SDL frameworks (OWASP SAMM, NIST SSDF), threat modelling, and security architecture. Deep experience with detection engineering, SIEM/XDR platforms, incident response, and MSSP management. Strong cloud security ...

security and security operations. Proven leadership of security engineering or SOC teams — including distributed, multi-region teams. Expert-level knowledge of secure SDL frameworks (OWASP SAMM, NIST SSDF), threat modelling, and security architecture. Deep experience with detection engineering, SIEM/XDR platforms, incident response, and MSSP management. Strong cloud security ...

have the following experience: Experience assessing security impacts across codebases and APIs using languages such as Java, TypeScript and Python. Strong knowledge of the OWASP Top 10, secure coding practices, and common web and API vulnerabilities. Hands-on experience triaging, validating and remediating vulnerabilities with both technical and non-technical ...

latest exploits, vulnerabilities (CVEs), and threatactor tactics Requirements Required Skills Strongproficiency in penetration testing tools (e.g., Kali Linux, BurpSuite, Metasploit, Nmap, Wireshark) Experiencewith OWASP Top 10 , vulnerability scanning, and exploit development Familiaritywith MITRE ATT&CK framework and red team methodology Solidknowledge of TCP/IP, firewalls, DNS, HTTP/HTTPS ...

leading offensive security programs (penetration testing, red teaming, bug bounty).Practical understanding of governance and assurance frameworks such as ISO 27001, SOC 2, and OWASP SAMM.Familiarity with AI/LLM tooling (e.g., Cursor, GitHub Copilot, custom LLM integrations) and the associated security and governance considerations.Experience working with AWS and securing ...

with AI and agentic security risks (prompt injection, data poisoning, model and agent governance). Have experience mapping security frameworks (NIST CSF, ISO 27001, OWASP, NIST AI RMF). Have hands‐on exposure to detection and response, red‐team, or pen‐test work. Have experience with our stack: Azure/ ...

Infrastructure as Code (Terraform), observability tooling (Grafana, Kibana, Datadog, CloudWatch), automated testing (NUnit, xUnit, Cypress, Playwright), Git‐based workflows, and secure development practices including OWASP, secrets management and Vault. Ways of Working, Comfortable in Scrum/Kanban environments with strong communication skills; experienced with Jira, Confluence, Slack and MS Teams ...

government standards Writing clean, maintainable, and reusable code/configuration Supporting issue investigation, resolution, and continuous improvement Applying secure development practices, including awareness of OWASP principles Collaborating with stakeholders and clearly communicating technical concepts Tech and environment: Microsoft Power Platform (Power Apps, Power Automate, Dataverse) Integration with wider enterprise systems ...

Lifecycle Professional) GWAPT (GIAC Web Application Penetration Tester) GCSA (GIAC Cloud Security Automation) CASE (Certified Application Security Engineer) Certified DevSecOps Professional Strong familiarity with OWASP (including Top 10 and ASVS) At least 5 years experience in information security assurance, with a strong focus on application security. Hands-on experience with ...

Lifecycle Professional) GWAPT (GIAC Web Application Penetration Tester) GCSA (GIAC Cloud Security Automation) CASE (Certified Application Security Engineer) Certified DevSecOps Professional Strong familiarity with OWASP (including Top 10 and ASVS) At least 5 years’ experience in information security assurance, with a strong focus on application security. Hands-on experience with ...

threat intelligence monitoring.Experience applying AI/ML to security workflows - automated triage, behavioural analytics, or LLM-assisted investigation.Understanding of AI security risks and frameworks: OWASP LLM Top 10, NIST AI RMF.Scripting proficiency in Python, PowerShell, or Bash for security automation.Strong grasp of PCI DSS, NIST CSF, SOC 2, ISO27001 ...

security features Extensive RBAC/ABAC knowledge and implementation experience Experience with user, agent, and machine authentication workflows. Hands‐on experience with secure coding, OWASP Top 10, and threat modeling. Strong developer skills and extensive experience shipping code to production. Experienced in CI/CD, IaC, Python and Go. Track ...

infrastructure, cloud, mobile and wireless security testing. Experience with black-box, grey-box and white-box testing methodologies. Knowledge of AWS, Azure, Google Cloud, OWASP, PTES and OSSTMM. Experience scoping, delivering and quality assuring complex security testing engagements. Strong communication skills with clients, stakeholders and technical teams. Desirable Experience Experience ...

infrastructure, cloud, mobile and wireless security testing. Experience with black-box, grey-box and white-box testing methodologies. Knowledge of AWS, Azure, Google Cloud, OWASP, PTES and OSSTMM. Experience scoping, delivering and quality assuring complex security testing engagements. Strong communication skills with clients, stakeholders and technical teams. Desirable Experience Experience ...

protocols (e.g. A2A) Familiarity with MCPs for tool and context integration in agentic systems Familiarity with secure-by-design development principles (ISO 27001, NIST, OWASP) Experience in defence, national security, or similarly regulated environments Contributions to open-source AI/ML projects Soft Skills Delivery-focused - you ship working systems ...

protocols (e.g. A2A) Familiarity with MCPs for tool and context integration in agentic systems Familiarity with secure-by-design development principles (ISO 27001, NIST, OWASP) Experience in defence, national security, or similarly regulated environments Contributions to open-source AI/ML projects Soft Skills Delivery-focused - you ship working systems ...

Senior Application Security Consultant (SAST/DAST/OWASP )/DevSecOps Security - Banking - London Secure SDLC | SAST | DAST | Threat Modelling | Cloud Security | CI/CD Location: London (Hybrid - 8 days onsite per month) Contract: 12 Months + extension Rate: £500-£550 per day (Umbrella) The Opportunity We're looking … guidance and best practice documentation. Act as the Application Security SME across multiple technology programmes. Essential Skills Application Security Secure Software Development Lifecycle (SSDLC) OWASP Top 10 Secure Coding Secure Design Reviews API Security REST APIs Microservices Security Application Security Risk Assessments Threat Modelling STRIDE MITRE ATT&CK Security Architecture ...