15 of 15 OWASP Jobs in the Thames Valley

Kubernetes deployment experience. Prometheus or comparable observability platforms. AWS Karpenter. AWS Compute Optimizer. Experience operating highly distributed systems. Familiarity with ISO 27001, NIST SSDF, OWASP SAMM or similar security frameworks. Understanding of GDPR fundamentals. Experience working within defence, national security, critical infrastructure or other regulated environments. Security Clearance ...

distributed security culture across engineering. What you would bring - Strong hands-on experience in application security, with a solid understanding of secure software development, OWASP Top 10, common application vulnerabilities and secure SDLC practices. Proficiency in one or more programming languages, such as Python or JavaScript, with experience using code ...

distributed systems, scalability, resilience and performance tuning Experience with cloud-native applications, Docker, Kubernetes and CI/CD Strong knowledge of application security, OWASP principles and secure development practices Knowledge of a modern front-end node-based framework Other Information Permanent role – 37.5 hours per week. Monday to Friday ...

conducting threat modelling (e.g. STRIDE, attack trees) and risk analysis Strong understanding of security frameworks and best practice such as ISO 27001, NIST, CIS, OWASP, NCSC guidance Experience working in the UK Public Sector and associated security standards and guidance including GovAssure/NCSC CAF, HMG Security Policy Framework. Knowledge ...

following Working knowledge of NIST frameworks (e.g. SP 800-53, SSDF) or equivalent (Software Cyber, AI Cyber Security Code of Practice, ISO 27001, CIS, OWASP) and their application within software development and DevSecOps practices Familiarity with scientific, engineering, or technical domains relevant to UKAEA’s mission, particularly where computing infrastructure ...

/CD, automated testing, code quality controls, observability, incident diagnosis, reliability engineering and DevSecOps practices. Knowledge of application security, identity and access management, OWASP guidance, threat modelling, privacy by design and relevant compliance requirements. Experience producing high‐quality architecture artefacts, including context and container views, integration diagrams, data‐flow diagrams ...

Reporting* SOC – Experienced in Security Ops, Incident Response, Threat Hunting, Malware/Forensic Analysis* WebApps – Experienced in WebApp DevSecOps best practices, WebApp scanning for OWASP top 10.* Good understanding of GRC strategies and tools, Threat Intelligence, SIEMs, XDR, ICS/OT security* Relevant industry certifications: CISSP, CEH, CCNP, Public Cloud ...

parties, including conflict resolution due to changing priorities. Experience of using common information security management frameworks, such as NIST, PCI, GDPR, ISO Series, OWASP the IT Infrastructure Library (ITIL), the ISF Standards of Good Practice (SoGP) and ISACA’s Control Objectives for Information and related Technology (COBIT) frameworks. Actively represent ...

following: Security Engineering Identity & Access Management Email Security Vulnerability Management Security monitoring and logging Secure technical change Security frameworks including ISO 27001, NIST or OWASP Experience with Microsoft Defender, Purview, Intune, cloud automation or DevSecOps would be advantageous but isn't essential. What's in this for you This role ...

security Endpoint Protection Identity & Access Management Email Security Vulnerability Management Security monitoring and logging Secure technical change Security frameworks including ISO 27001, NIST or OWASP Experience with Microsoft Defender, Purview, Intune, cloud automation or DevSecOps would be advantageous but isn't essential. What's in this for you This role ...

Senior AI Engineer (BioTech/Pharma) | Outside IR35 Contract £600 - 700pd | Hybrid, Oxford | 6 Months Harvey Nash are working with an exciting consultancy who are looking to bring on a highly experienced AI Engineer to ...

security reviews, threat modeling applications and identifying areas of risk Experience implementing strategies to support secure and compliant architectures Deep understanding of the OWASP Top 10 application security risks and how to address them Expert knowledge of Amazon AWS, Microsoft Azure or other cloud computing platform offerings and security related … experience Nice to Have Experience with assessing and providing recommendations for securing generative AI solutions Working knowledge of the Microsoft Security Development Lifecycle (SDL), OWASP Software Assurance Maturity Model (SAMM), or Building Security in Maturity Model (BSIMM). Familiar with compliance regulations like; ISO, GDPR, SOC2, SOX MS in Cyber ...

Debug across whole chains, from application to integration to database to network, and write down what you found and changed Code securely as standard: OWASP practice, secrets in OCI Vault rather than source code, and security testing in every pipeline Join the on call rota for high priority incidents outside … debugged yourself: OAuth tokens, certificates and TLS Delivery discipline you can show: Git branching, peer review, pipelines with security testing, OWASP secure coding practice, and rollbacks tested Solid SQL and PL/SQL, used to trace and reconcile data, including on Oracle Autonomous AI Database The habit of debugging across ...

Senior Applied AI Engineer Private Sector Location: Harwell, Oxfordshire Hybrid (2 days per week on site, remainder remote) Contract: 6 months initially, with strong potential for extension Day Rate: £700£900 per day, depending on ...

finding. What You'll Do Own inbound product direction for your area. Research emerging agentic AI capabilities, attacker techniques, and adjacent standards (MCP, A2A, OWASP agentic-security guidance, agent identity frameworks) to determine what MARS for Agents should build next across the agent registry, Claude integration, Microsoft Copilot integration … integration platform. Direct experience with MCP, LLM/agent tool-calling architectures, or building integrations with Claude or other frontier model providers. Familiarity with OWASP frameworks, including emerging OWASP guidance for agentic AI security. Experience directly supporting a technical sales motion — SE enablement, competitive battlecards, customer discovery calls. Experience ...