76 to 100 of 113 OWASP Jobs in London

response automation.Awareness of AI-specific threats and incident types (prompt injection, model/data poisoning, sensitive-data exposure via GenAI), and familiarity with OWASP LLM Top 10/MITRE ATLAS.Hands-on cloud incident response across Azure, AWS, and/or GCP, including cloud-native log sources (Azure Activity/Entra ...

with cloud deployment using Vercel, Azure, GitHub Actions, Docker, and CI/CD pipelines. Knowledge of application security, including OAuth, SSO, API Security, and OWASP best practices. Experience with databases such as PostgreSQL, SQL Server, MongoDB, and Redis. Ability to provide technical leadership, architecture guidance, code reviews, and mentorship ...

Skills Cloud security architecture and operations, with hands-on depth in AWS (IAM, VPC, KMS, CloudTrail, GuardDuty, Security Hub). Web application security fundamentals: OWASP Top 10, secure SDLC, API security, and encryption standards (TLS, AES-256, key management). Working knowledge of SaaS security models, multi-tenant architecture ...

growth environmentsTechnical SkillsCloud security architecture and operations, with hands-on depth in AWS (IAM, VPC, KMS, CloudTrail, GuardDuty, Security Hub).Web application security fundamentals: OWASP Top 10, secure SDLC, API security, and encryption standards (TLS, AES-256, key management).Working knowledge of SaaS security models, multi-tenant architecture, and shared ...

implement best practices Debugging within Visual Studio (or an IDE of your preference) Experience in Data Security within the application and familiarity with OWASP top 10 threats (desirable) Experience with CI/CD pipelines and cloud technologies such as Azure (desirable) Experience working in an Agile environment (desirable) What ...

Senior Cyber Security Analyst (OWASP/SAST/DAST – Banking Client Application Security | Secure Design | Threat Modelling | DevSecOps) Locations: London, Paris, Brussels, Amsterdam Rate: Flexible Duration: 12 months We are looking for a Cyber Security Analyst specialising in Application Security and Secure Architecture to join a high-performing security team … alignment with secure-by-design principles, embed security into the software development lifecycle (SDLC), support development teams in implementing secure coding practices aligned with OWASP guidelines. Security Testing & DevSecOps – Define and review security testing activities including SAST, DAST and software composition analysis (SCA), work with engineering teams to integrate security ...

with GitHub Advanced Security (GHAS), including Code Scanning (SAST), Secret Scanning, and Dependency Review.Proficiency in SAST, DAST, and SCA tools (e.g., CodeQL, Burp Suite, OWASP ZAP, Snyk, Checkmarx, Veracode).Hands-on experience integrating security testing tools into CI/CD pipelines for automated security scanning, including designing and building pipeline … workflows.Hands-on penetration testing/offensive security experience across web applications, APIs, or cloud infrastructure.Knowledge of common application security vulnerabilities and mitigations (OWASP Top 10, CWE, business logic flaws, API security).Ability to perform threat modeling and participate in design/architecture spec reviews to assess security risks in applications ...

Salt Digital Recruitment is searching for a Senior Cyber Security Analyst to join a high-performing team. This role focuses on application security, secure architecture, and threat modelling, ensuring security is embedded throughout the software ...

application security reviews for high-risk products and services.Conduct and oversee SAST, DAST, API security, fuzz testing and architecture-level assessments.Assess applications against the OWASP Top 10 and other relevant security standards.Identify vulnerabilities, understand their root causes and translate findings into practical remediation plans.Provide secure design and coding guidance throughout … environments.Awareness of AI security, including model, data and prompt/model manipulation risks.Experience delivering developer-focused security training or workshops.Knowledge of frameworks such as OWASP SAMM, ASVS, NIST CSF or NIST SSDF.Relevant application security, cloud security or offensive security certifications.Experience working across multiple teams, countries or business entities.In return ...

London base. The ideal candidate will assess security across codebases and APIs using Java, TypeScript and Python, and will be well-versed in OWASP Top 10 and secure coding practices. You will triage, validate and remediate vulnerabilities with both technical and non-technical stakeholders, and embed security tooling into ...

Experience with infrastructure and DevOps fundamentals: CI/CD, cloud platforms, CDN, monitoring/observability, and deployment strategies. Strong understanding of security best practices (OWASP, authentication/authorization patterns, secure data handling) — especially in a financial context. Experience hiring, mentoring, and growing engineers — building a high‐performing team, not just ...

understanding of secure, scalable application architecture, APIs and modern CI/CD development practices using Git and Jira. Knowledge of accessibility standards (WCAG), GDPR, OWASP security principles and age-appropriate design. Experience working collaboratively within multidisciplinary teams, with the confidence to communicate technical ideas clearly and effectively. Why join ...

Experience with infrastructure and DevOps fundamentals: CI/CD, cloud platforms, CDN, monitoring/observability, and deployment strategies. Strong understanding of security best practices (OWASP, authentication/authorization patterns, secure data handling) — especially in a financial context. Experience hiring, mentoring, and growing engineers — building a high‐performing team, not just ...

leadership.* Expertise in Java/Kotlin, Spring Boot, REST APIs, and MongoDB.* Experience with ReactJS, JavaScript, and TypeScript.* Strong understanding of secure coding (e.g., OWASP principles).* Strong experience with CI/CD, Git workflows, automated testing.* Experience leading AI feature development or integrating ML models into production systems.**Career ...

Strong stakeholder communication skills, able to advise Engineering, Product and Pre-Sales credibly. Extremely strong documentation skills. Experience with AI/LLM security testing (OWASP LLM Top 10, prompt injection, model/vendor risk assessment). Familiarity with the Microsoft 365 E5 security stack (Entra ID, Defender for Endpoint, Intune … deployment plan). AI & Emerging Risk Provide technical engineering support to the AI Security & Governance function for LLM/model security testing (OWASP LLM Top 10 etc.), including scripted test harnesses and repeatable validation tooling, where execution capacity is needed. Support technical validation of AI/cloud vendor control claims ...

with technical and non-technical stakeholders alike.Nice to have:Experience in high-growth tech environments, BioTech, ML-centric companies, or the pharmaceutical industry.Familiarity with OWASP Top 10 for LLMs, prompt injection prevention, and secure integration of internal AI assistants.Hands-on experience building or integrating AI-driven automation, agentic workflows ...

technical stakeholders alike. Nice to have: Experience in high-growth tech environments, BioTech, ML-centric companies, or the pharmaceutical industry. Familiarity with OWASP Top 10 for LLMs, prompt injection prevention, and secure integration of internal AI assistants. Hands-on experience building or integrating AI-driven automation, agentic workflows, or custom ...

ensure we are secure and demonstrably so to our customers. You’ll embed secure-by-design practices, monitor for irregular behaviour, align with OWASP Top 10 and AWS Well-Architected, and lead risk assessments and policy documentation under ISO 27001 ISMS. #J-18808-Ljbffr ...

manually auditing source code to find security issues or programming skills in one or more of: Java, .NET, Python or JavaScript frameworks.Strong understanding on OWASP TOP 10 vulnerabilities.Strong understanding of common API security risksStrong understanding on Cloud-Native application architecture, microservices, containerization technologies, secure deployment and implementation issues.Proven experience … relation to application securityExperience working with threat modeling methodologies such as MITRE ATT&CK, STRIDE, PASTA etc.Efficiency with web proxies such as Burp or OWASP ZAP or FiddlerUnderstanding of OAuth and JWT implementations.Ability to organize & communicate effectively, both written and verbal, with technical and non-technical people across functional teamsA ...

application architecture for Enterprise scale web applications including Microservices and Micro Frontends.Experience with cloud solutions & containerised web application designA good understanding of the OWASP top 10, and common patterns to protect against those vulnerabilitiesDeep knowledge of web infrastructure subjects i.e. CDNs, WAFs, DNSs, SSL and TLSDemonstrable hands-on experience designing ...

architecture for Enterprise scale web applications including Microservices and Micro Frontends.* Experience with cloud solutions & containerised web application design* A good understanding of the OWASP top 10, and common patterns to protect against those vulnerabilities* Deep knowledge of web infrastructure subjects i.e. CDNs, WAFs, DNSs, SSL and TLS* Demonstrable hands ...

architecture for Enterprise scale web applications including Microservices and Micro Frontends. Experience with cloud solutions & containerised web application design A good understanding of the OWASP top 10, and common patterns to protect against those vulnerabilities Deep knowledge of web infrastructure subjects i.e. CDNs, WAFs, DNSs, SSL and TLS Demonstrable hands ...

guardrails. Nice to have Working familiarity with AI security standards and references such as the NIST AI RMF, ISO 42001, MITRE ATLAS, or the OWASP LLM Top 10. Hands‐on experience with policy‐as‐code and turning standards into enforced controls. Contributions to security standards, frameworks, or industry practice. ...

need for guardrails.Nice to haveWorking familiarity with AI security standards and references such as the NIST AI RMF, ISO 42001, MITRE ATLAS, or the OWASP LLM Top 10.Hands-on experience with policy-as-code and turning standards into enforced controls.Contributions to security standards, frameworks, or industry practice.Our Commitment to Diversity ...

technical point of contact. Communicate complex technical concepts clearly to both non-technical and actuarial audiences. Quality, governance & continuity Uphold secure coding standards (e.g. OWASP), code quality, and engineering governance. Ensure solutions are reliable, maintainable, and appropriately documented. Provide hands-on support and continuity to the Senior Manager … Server, PostgreSQL, DBML, NoSQL databases Cloud & DevOps: Azure, AWS, Docker, Azure DevOps, GitHub, CI/CD, PowerShell, YAML Ways of working: Agile/Scrum, OWASP-aligned secure development Qualifications Degree in Computer Science, Software Engineering, or a related discipline, or equivalent practical experience. Cloud architecture certification desirable (e.g. Azure Solutions ...