51 to 75 of 100 OWASP Jobs in London

either Claude or Copilot CLI; Strong problem-solving skills; Experience with Git, GitHub, and code review practices; Strong security awareness and knowledge of OWASP; Excellent communication skills; Excellent Bash and/or Zsh scripting skills; Experience with JavaScript, React, Babel, and Webpack; Nice to have: experience setting up and maintaining ...

queries. Experience developing secure code end to end: strong understanding of common vulnerabilities such as cross-site scripting, cross-site request forgery and other OWASP risks, along with authentication, authorisation and secrets handling, and best practices for testing and mitigating them. Solid grasp of frontend-backend integration, including asynchronous request ...

cloud‐based infrastructure , including CI/CD and pipeline observability. Experience owning threat modelling and security hardening for front‐end products; strong grasp of OWASP and secure coding practices. Track record of originating and shepherding cross‐team initiatives or RFCs to adoption. Excellent coaching, mentoring, and leadership skills - with evidence ...

security standards crucial to the finance and retail sectors, including the Digital Operational Resilience Act (DORA), the Cyber Resilience Act (CRA), and the OWASP Top 10. Proven success over 7+ years in a B2B SaaS sales role, with a track record of selling technical products to technical buyers and executive ...

Experience with infrastructure and DevOps fundamentals: CI/CD, cloud platforms, CDN, monitoring/observability, and deployment strategies. Strong understanding of security best practices (OWASP, authentication/authorization patterns, secure data handling) — especially in a financial context. Experience hiring, mentoring, and growing engineers — building a high‐performing team, not just ...

Experience with infrastructure and DevOps fundamentals: CI/CD, cloud platforms, CDN, monitoring/observability, and deployment strategies. Strong understanding of security best practices (OWASP, authentication/authorization patterns, secure data handling) — especially in a financial context. Experience hiring, mentoring, and growing engineers — building a high‐performing team, not just ...

solutions using Terraform to support repeatable and compliant environments Implement automation across build, test and deployment workflows to ensure consistent and reliable delivery Apply OWASP security principles and DevSecOps practices throughout the delivery lifecycle Deploy and maintain containerised workloads using Kubernetes or AWS-native services such … pipeline management Demonstrable experience with Terraform and infrastructure-as-code delivery Deep understanding of Kubernetes architecture and operations in cloud environments Working knowledge of OWASP security principles and how to apply them in CI/CD and infrastructure design Competence in scripting languages such as Python, Bash or PowerShell Experience ...

Google and UCL, the company digitally transforms the global insurance market. Задачи Provide implementation advice on securing AI-powered applications using frameworks such as OWASP ASVS and the OWASP Top 10 for LLM Applications; Lead threat modelling sessions for AI and agentic systems during technical design using STRIDE ...

global insurance market. What you will be doing: Provide practical implementation advice and guidance on securing AI-powered applications, aligning with frameworks like OWASP ASVS and the OWASP Top 10 for LLM Applications. Lead threat modelling sessions for AI and agentic systems during the technical design phase using STRIDE ...

Controls Cyber Essentials & Cyber Essentials Plus DORA, NIS2, EU AI Act Requirements, GDPR Risk Management and Security Governance Security Operating Models and Roadmaps OWASP, MITRE, MITRE ATLAS. Microsoft Security Expertise – Strong working knowledge of: Microsoft 365 Security & Compliance Microsoft Security Copilot Agent 365 and emerging Microsoft AI‐driven security capabilities ...

products and services. Conduct and oversee SAST, DAST, fuzz testing and API security assessments. Perform architecture, design and code security reviews. Assess applications against OWASP Top 10 and other industry standards. Translate findings into practical remediation plans and developer guidance. Secure Development & DevSecOps Support the development of secure coding standards … practices. Experience working with SAST, DAST and Software Composition Analysis (SCA) tools. Experience integrating security controls into CI/CD pipelines. Strong understanding of OWASP Top 10 and common vulnerability classes. Experience with API and web application security. Knowledge of threat modelling techniques and methodologies. Experience working closely with software ...

implement Security Operations Centre (SOC) operating models. Conduct vulnerability management programmes, gap analyses, and remediation tracking. Lead penetration testing and application security assessments (OWASP Top 10). Oversee DLP and DDA monitoring strategies. Compliance & Regulatory Alignment Support ISMS implementation aligned with ISO 27001. Ensure alignment with GDPR, PCI‐DSS, DORA ...

architecture expertise to assess control effectiveness across modern engineering environments. You will review security tooling, map controls to frameworks such as NIST SSDF and OWASP DSOMM, conduct control assessments and facilitate engineering #J-18808-Ljbffr ...

Proficiency with Maven/Nexus and GitLab CI/CD. Understanding of distributed systems, clustering, and failover. Strong knowledge of web security standards and OWASP Top 10. Optional: Exposure to front-end tech, Python scripting, or AI/ML APIs. 8+ years of professional Java development. Enterprise-level backend/ ...

leadership.* Expertise in Java/Kotlin, Spring Boot, REST APIs, and MongoDB.* Experience with ReactJS, JavaScript, and TypeScript.* Strong understanding of secure coding (e.g., OWASP principles).* Strong experience with CI/CD, Git workflows, automated testing.* Experience leading AI feature development or integrating ML models into production systems.**Career ...

cost. Build validation, schema enforcement and safe failure behaviour for outputs that may be well-formed yet wrong. Treat authentication, authorisation, secrets, input validation, OWASP awareness and audit trails as everyday engineering. WHAT YOU'LL BE DOING - DELIVERY AND COST Deploy and operate on AWS using EKS/ECS patterns ...

Apply techniques including STRIDE, PASTA, Attack Trees and MITRE ATT&CK to identify and assess threats. Identify vulnerabilities using frameworks such as CWE and OWASP . Define, document and maintain appropriate security controls and mitigations. Manage the lifecycle of identified threats and associated controls. Deliver threat models and supporting activities … Trees, tooling and MITRE ATT&CK. Professional experience working within a Cyber Security/Information Security role - essential . Identifying vulnerabilities using CWE and OWASP . Security principles covering: Authentication and authorisation Logging and monitoring Encryption Infrastructure security Network security and segmentation Operating systems and security hardening. Software development concepts ...

independently What will you bring to the team? Experience defining controls for complex environments independent of the underlying platform or technology Detailed knowledge of OWASP Top 10, and in relation how to design appropriate security controls Experience working with Secure Coding Tools (SCA, SAST & Secrets) Experience in identifying & addressing vulnerabilities ...

against web applications) Experience securing cloud-based infrastructures and solutions Previous experience working on an information security team Advanced knowledge of common security vulnerabilities (OWASP) and best practices Familiarity with SOC II controls and how to review them Experience in other technical roles (SysAdmin, Helpdesk, etc.) Strong understanding of Linux ...

high-risk products and services. Conduct and oversee SAST, DAST, API security, fuzz testing and architecture-level assessments . Assess applications against the OWASP Top 10 and other relevant security standards. Identify vulnerabilities, understand their root causes and translate findings into practical remediation plans. Provide secure design and coding guidance … security , including model, data and prompt/model manipulation risks. Experience delivering developer-focused security training or workshops. Knowledge of frameworks such as OWASP SAMM, ASVS, NIST CSF or NIST SSDF . Relevant application security, cloud security or offensive security certifications. Experience working across multiple teams, countries or business entities. ...

stakeholders. Key Skills: Knowledge and experience with technology, security and DP related compliance, legal & regulatory frameworks and standards, including Cyber Essentials, ISO27001, PCI DSS, OWASP, GDPR etc. Knowledge and experience of the Microsoft stack. Purview experience is beneficial. Ability to demonstrate expert knowledge and understanding of information security good practice. ...

significant focus on web application security. Strong hands-on experience attacking and defending modern web tech stacks Proficient with offensive web toolsets (Burp Suite, OWASP ZAP) and experienced building extensions/scripts. Experience with developing and maintaining web-focused tooling and automation (Burp extensions, custom scanners, authenticated API fuzzers, GraphQL ...

stakeholders to scope problems and agree on simple but scalable solutions. Build it to enterprise standard: build to current security practice, for example the OWASP Top 10 and the AWS Well-Architected Framework. Behind the scenes Ben runs on Python 3, Django, PostgreSQL, and React, on AWS. Our data platform ...

connectors Work with product and stakeholders to scope problems and agree on simple, scalable solutions Build according to security practices such as the OWASP Top 10 and AWS Well-Architected Framework Requirements Strong experience with Python and SQL A few years building and running production data pipelines that other people ...

Strong stakeholder communication skills, able to advise Engineering, Product and Pre-Sales credibly. Extremely strong documentation skills. Experience with AI/LLM security testing (OWASP LLM Top 10, prompt injection, model/vendor risk assessment). Familiarity with the Microsoft 365 E5 security stack (Entra ID, Defender for Endpoint, Intune … deployment plan). AI & Emerging Risk Provide technical engineering support to the AI Security & Governance function for LLM/model security testing (OWASP LLM Top 10 etc.), including scripted test harnesses and repeatable validation tooling, where execution capacity is needed. Support technical validation of AI/cloud vendor control claims ...