26 to 50 of 100 OWASP Jobs in London

.* Proficient in programming languages like C/C++, Java, JS, Python, Go, or Rust* Possess a deep understanding of common vulnerability frameworks (OWASP Top 10, SANS CWE Top 25).* Solid grasp of enterprise software development, Agile, CI/CD pipelines, and security tooling (SAST, DAST, OSA, Vulnerability Management ...

with AI and agentic security risks (prompt injection, data poisoning, model and agent governance). Have experience mapping security frameworks (NIST CSF, ISO 27001, OWASP, NIST AI RMF). Have hands‐on exposure to detection and response, red‐team, or pen‐test work. Have experience with our stack: Azure/ ...

Dynatrace, Catchpoint or similar. Experience managing incidents, problem management, root cause analysis and live production environments. Understanding of application and cloud security, including OWASP principles, WAF, bot management and security scanning. Experience with CDN technologies and security controls, such as Akamai, Cloudflare or equivalent. TPBN1_UKTJ ...

DAST tools. Scripting with Python, Bash, or PowerShell for automation. Git and branching strategies with a security‐focused approach. Knowledge of WAF, API security, OWASP Top 10, and common cloud‐security frameworks. WAF rules management, including creation, tuning, and monitoring. SSL/TLS configuration best practices, certificate lifecycle management. Experience ...

TypeScript. - Synthetic and application monitoring platforms such as Dynatrace and Catchpoint. - Understanding of .NET applications - Knowledge of Akamai or similar CDNs, perimeter security, and OWASP security guidelines. - Strong networking experience across DNS, routing, load balancers, and firewalls. - Skilled with enterprise level deployments across microservices and multi server environments. - Azure certification ...

systems such as Elastic APM or DataDog to track and diagnose issues in production A solid understanding of security principles and secure coding including OWASP Top 10 Nice to haves: Experience in VOIP (SIP and RTP advantageous) Experience of TDD/BDD/DDD Knowledge of PCI compliance and associated ...

DevOps: AWS‐native architectures, CI/CD automation using GitHub Actions,infrastructureand deployment optimisation. Security Engineering: Security‐by‐design mindset with applied knowledge of OWASP Top 10, WCAG, OAuth2, MFA, and secure identity patterns. Quality & Assurance: Proficient in unit testing frameworks; governance and execution of SAST, DAST, SCA, and penetration ...

government standards Writing clean, maintainable, and reusable code/configuration Supporting issue investigation, resolution, and continuous improvement Applying secure development practices, including awareness of OWASP principles Collaborating with stakeholders and clearly communicating technical concepts Tech and environment: Microsoft Power Platform (Power Apps, Power Automate, Dataverse) Integration with wider enterprise systems ...

improving the security of production software or cloud infrastructure Application and API security depth. Strong command of common web and API vulnerabilities including the OWASP Top 10, and practical knowledge of authentication, authorisation, sessions, secrets and encryption Cloud security. Hands-on experience securing AWS or another major cloud platform, including ...

monitoring. Experience applying AI/ML to security workflows – automated triage, behavioural analytics, or LLM‐assisted investigation. Understanding of AI security risks and frameworks: OWASP LLM Top 10, NIST AI RMF. Scripting proficiency in Python, PowerShell, or Bash for security automation. Strong grasp of PCI DSS, NIST ...

with the Model Context Protocol (MCP) for tool and context integration in agentic systems Familiarity with secure‐by‐design development principles (ISO 27001, NIST, OWASP) Experience in defence, national security, or similarly regulated environments Contributions to open‐source AI/ML projects An active SC or DV clearance ...

Governance: Proactively identify systemic delivery and technical risks—including model drift, IP leakage, licensing issues in generated code, data privacy breaches, and security vulnerabilities (OWASP Top 10 for LLMs). Regulatory & Safety Compliance: Ensure all delivery frameworks adhere strictly to evolving AI governance standards, copyright guidelines, data privacy regulations (GDPR ...

Bring Deep AppSec Expertise: Extensive, hands‐on experience in application security, with mastery of the SSDLC, secure coding principles, and common vulnerability classes (OWASP Top 10, etc.). A Builder of Standards: Proven experience creating, documenting, and rolling out security standards, patterns, and best practices in a complex engineering environment. ...

tools. • Experience with Continuous Security, Continuous Integration and Continuous Delivery techniques. • Experience of network security (e.g. OSI, TCP/IP), web application security (e.g. OWASP) and cryptographic controls (e.g. PKI, TLS). • We are passionate about developing people – a demonstrated ability in managing, mentoring and coaching members of your team ...

cloud and serverless architecture Solid grounding in secure software development, including threat modelling, secure coding, awareness of common application security risks such as the OWASP Top 10, automated security testing and running penetration tests Practical experience across vulnerability management, identity and privileged access, data security, and software supply‐chain practices ...

Pentera, etc.) Hands-on experience across Azure and Microsoft security stack Scripting/automation capability (PowerShell, Python, Bash) Strong grounding in MITRE ATT&CK, OWASP, and modern threat vectors (Background in insurance, financial services, or regulated environments is highly beneficial). If you are looking for: End-to-end ownership ...

security features Extensive RBAC/ABAC knowledge and implementation experience Experience with user, agent, and machine authentication workflows. Hands‐on experience with secure coding, OWASP Top 10, and threat modeling. Strong developer skills and extensive experience shipping code to production. Experienced in CI/CD, IaC, Python and Go. Track ...

machine learning applications Experience with frontend mapping frameworks (e.g., Cesium, Mapbox, Leaflet) Knowledge of application security best practices and secure coding principles (e.g., OWASP Top 10) Note: We want Arondite to bring together individuals from diverse backgrounds and perspectives. We don’t expect everyone to have experience across each ...

automated testing, test driven development (TDD), continuous integration, pair programming, code review and version control Understanding of common web security risks such as OWASP Top 10, and the corresponding mitigations Enjoy researching and learning new programming tools and techniques and sharing their skills with others Have experience working ...

mentor developers to build naturally resilient systems. As one of our Application Security Engineers, youll: Provide expert guidance on secure coding, threat modelling, and OWASP Top 10 mitigation. Promote a security-first mindset across development teams, acting as a supportive technical mentor. Integrate security assessments, code reviews, and penetration testing ...

tools. Experience with Continuous Security, Continuous Integration and Continuous Delivery techniques. Experience of network security (e.g. OSI, TCP/IP), web application security (e.g. OWASP) and cryptographic controls (e.g. PKI, TLS). We are passionate about developing people a demonstrated ability in managing, mentoring and coaching members of your team ...

tools. Experience with Continuous Security, Continuous Integration and Continuous Delivery techniques. Experience of network security (e.g. OSI, TCP/IP), web application security (e.g. OWASP) and cryptographic controls (e.g. PKI, TLS). We are passionate about developing people a demonstrated ability in managing, mentoring and coaching members of your team ...

through model outputs, training data poisoning, and preventing unauthorised data egress in regulated environments. Threat Landscape Awareness: Familiarity with AI-specific risk frameworks (e.g., OWASP Top 10 for LLMs, NIST AI Risk Management Framework) and emerging threat vectors such as prompt injection, model inversion, and inference attacks. Regulated Environment Navigation ...

OSCP certification is essential (OSEP, OSCE3, or other advanced Offensive Security certifications also accepted) Demonstrable knowledge of Web Application security, including common vulnerabilities (e.g., OWASP Top 10) Strong desire to deepen technical capabilities across various domains, including infrastructure, cloud, and red teaming Excellent written and verbal communication skills Exposure ...

Kubernetes Experience with SQL databases such as PostgreSQL Experience of machine learning applications Knowledge of application security best practices and secure coding principles (e.g., OWASP Top 10) Note: We want Arondite to bring together individuals from diverse backgrounds and perspectives. We don't expect everyone to have experience across each ...