1 to 25 of 43 Remote/Hybrid OWASP Jobs in London

utilise them In-depth knowledge of security principles, technologies, best practices, and threat detection and mitigation strategies Knowledge of common attack vectors and methodologies (OWASP Top 10, MITRE ATT&CK Framework and social engineering tactics) The ability to identify potential threats, attack vectors and vulnerabilities in systems and applications ...

information security, with a strong focus on application security and DevSecOps Strong understanding of secure software development practices and common application security risks (e.g. OWASP Top 10) Hands-on experience working with or integrating DevSecOps tooling within CI/CD environments (e.g. GitLab pipelines) Experience with application security testing tools ...

Design & Regulated Environments: Proven experience delivering solutions within highly regulated, security-sensitive or compliance-driven environments. Strong understanding of secure-by-design principles, OWASP, threat modelling, identity and access management, least-privilege principles and non-functional requirements.Software Engineering Authority: Extensive software engineering background with mastery of modern development practices, code ...

Jenkins, AWS CodePipeline, GitLab CI, or GitHub Actions Solid understanding of relational and NoSQL databases (e.g., PostgreSQL, MongoDB) Knowledge of security best practices (e.g. OWASP) and performance optimization Excellent leadership, communication, time management and mentoring skills, with the ability to influence technical direction Desirable Qualifications Experience in fintech, payments ...

security. Key Responsibilities SSDLC & Secure Coding Assist in integrating security controls into the SSDLC. Support the creation and maintenance of secure coding guidelines (e.g., OWASP Top 10, CERT Secure Coding Standards). Application Security Testing Run a Static Application Security Testing (SAST) and Software Composition Analysis (SCA) scans. Conduct ...

your background might be better suited to. 5+ years ofrelevantexperienceinthe medical devicespace (eitherindustryor through consulting/service provider) Proficiency in security frameworks (e.g., NIST, OWASP, MITRE ATT&CK, PASTA, STRIDE) and standards such as FDA cybersecurity guidance Experience assessing security risks using industry standard methods (penetration test results, threat modeling ...

with AI and agentic security risks (prompt injection, data poisoning, model and agent governance). Have experience mapping security frameworks (NIST CSF, ISO 27001, OWASP, NIST AI RMF). Have hands‐on exposure to detection and response, red‐team, or pen‐test work. Have experience with our stack: Azure/ ...

your background might be better suited to. 5+ years ofrelevantexperienceinthe medical devicespace (eitherindustryor through consulting/service provider) Proficiency in security frameworks (e.g., NIST, OWASP, MITRE ATT&CK, PASTA, STRIDE) and standards such as FDA cybersecurity guidance Experience assessing security risks using industry standard methods (penetration test results, threat modeling ...

Kubernetes). Incident & Penetration Expertise: Experience leading incident response and management, with familiarity in pen testing of applications and infrastructure. Application Security: Familiarity with OWASP principles, web application security, security practices on native mobile apps (iOS and Android), and security-by-design principles. Tooling & Threat Landscape: Familiarity with project management ...

Kubernetes). Incident & Penetration Expertise: Experience leading incident response and management, with familiarity in pen testing of applications and infrastructure. Application Security: Familiarity with OWASP principles, web application security, security practices on native mobile apps (iOS and Android), and security-by-design principles. Tooling & Threat Landscape: Familiarity with project management ...

/Security Hub. Strong coding ability in TypeScript or Python or Go comfortable shipping production code, not just configs and scripts. Application security fluency: OWASP Top 10, threat modeling, and code‐level reviews on real systems. Experience securing a B2B SaaS multi‐tenant production environment. Comfort owning ...

platforms Proven expertise in secure coding, endpoint protection, SIEM and IAM Familiarity with frameworks and standards such as ISO 27001, NIST and OWASP, alongside an understanding of responsible AI, security guardrails and human-in-the-loop controls Proficiency in Python, Bash, PowerShell or Go for security automation and tool development ...

5+ years of relevant experience in the medical devicespace (either industry or through consulting/service provider). Proficiency in security frameworks (e.g., NIST, OWASP, MITRE ATT&CK, PASTA, STRIDE) and standards such as FDA cybersecurity guidance. Experience assessing security risks using industry standard methods (penetration test results, threat modelling ...

such as IAM, cloud security, endpoint protection, SIEM, application security and vulnerability management, alongside working knowledge of frameworks such as NIST, ISO 27001 and OWASP Experience coordinating delivery across cloud, on-premise or hybrid technology environments and working effectively with security architects, engineers and business stakeholders Strong communication, organisation ...

oContinuous Integration (CI/CD)oPair programmingoCode reviewsoVersion control systems such as Git Knowledge of application security principles and common vulnerabilities, including the OWASP Top 10. Experience working within agile, multidisciplinary teams. A proactive approach to learning new technologies and sharing knowledge with colleagues. If you are an experienced Ruby ...

latest exploits, vulnerabilities (CVEs), and threatactor tactics Requirements Required Skills Strongproficiency in penetration testing tools (e.g., Kali Linux, BurpSuite, Metasploit, Nmap, Wireshark) Experiencewith OWASP Top 10 , vulnerability scanning, and exploit development Familiaritywith MITRE ATT&CK framework and red team methodology Solidknowledge of TCP/IP, firewalls, DNS, HTTP/HTTPS ...

tools. • Experience with Continuous Security, Continuous Integration and Continuous Delivery techniques. • Experience of network security (e.g. OSI, TCP/IP), web application security (e.g. OWASP) and cryptographic controls (e.g. PKI, TLS). • We are passionate about developing people – a demonstrated ability in managing, mentoring and coaching members of your team ...

defining integration builds, coordinating build activity across systems, and undertaking or supporting integration testing. Information security: Understanding of common web security risks, including the OWASP Top 10, and appropriate mitigations. Development process optimisation: Ability to identify opportunities to improve development processes and contribute to implementing practical solutions. Candidates should demonstrate ...

with the Model Context Protocol (MCP) for tool and context integration in agentic systems Familiarity with secure‐by‐design development principles (ISO 27001, NIST, OWASP) Experience in defence, national security, or similarly regulated environments Contributions to open‐source AI/ML projects An active SC or DV clearance ...

with the Model Context Protocol (MCP) for tool and context integration in agentic systems • Familiarity with secure-by-design development principles (ISO 27001, NIST, OWASP) • Experience in defence, national security, or similarly regulated environments • Contributions to open-source AI/ML projects An active SC or DV clearance ...

focus on secure code reviews, SAST/DAST, vulnerability assessments and embedding security throughout the CI/CD lifecycle. The role requires experience with OWASP Top 10, Veracode, DevSecOps, and cloud security across Azure/AWS, plus Kali Linux for manual testing. Hybrid work in London, Manchester or Glasgow with ...

Microsoft Azure Entra ID Vercel Firewall configuration and security controls SIEM technologies; Terraform or other Infrastructure-as-Code DevSecOps CI/CD security OWASP PCI DSS AWS security certifications Working Approach & Key Outcomes 3 months initially AWS Engineer, Security Engineer, AWS Security Engineer, Web, Online, Digital, E-commerce, e.commerce ...

through model outputs, training data poisoning, and preventing unauthorised data egress in regulated environments. Threat Landscape Awareness: Familiarity with AI-specific risk frameworks (e.g., OWASP Top 10 for LLMs, NIST AI Risk Management Framework) and emerging threat vectors such as prompt injection, model inversion, and inference attacks. Regulated Environment Navigation ...

mitigate security risks.Understanding of the security risks of AI itself, including prompt injection, data leakage and model misuse, and of frameworks such as the OWASP Top 10 for LLM Applications and ISO/IEC 42001.What's in it for you: Hybrid working and flexible start times24 days holiday (+ ...

senior leadership, governance forums, and risk committees Ensure alignment with recognised frameworks and standards including NIST AI RMF, MITRE ATT&CK, MITRE ATLAS, OWASP LLM Top 10, ISO 27001, the EU AI Act, and evolving UK regulatory requirements What it takes Significant experience within Cyber Security, Threat Intelligence, Incident Response ...