1 to 25 of 79 Remote/Hybrid OWASP Jobs in the UK

Experience securing video streaming architectures or high‐scale backend services. A history of leading incident response in a remote‐first environment. Deep expertise in OWASP Top 10 and secure API design. What Success Looks Like: Within 6 Months: You complete a security audit of our current CI/CD pipeline ...

Helm) CI/CD pipeline design and management (Jenkins, GitHub Actions, or equivalent) Configuration management and release management Software Engineering Practices Secure development and OWASP best practices Source control and code management (Git, branching strategies) Software design and development (clean code, code reviews) Service operations and resiliency (fault tolerance, circuit ...

Helm) CI/CD pipeline design and management (Jenkins, GitHub Actions, or equivalent) Configuration management and release management Software Engineering Practices Secure development and OWASP best practices Source control and code management (Git, branching strategies) Software design and development (clean code, code reviews) Service operations and resiliency (fault tolerance, circuit ...

. Strong knowledge of software testing principles and SDLC. Experience with manual and automated testing frameworks. Experience with tools such as Selenium, BrowserStack, JMeter, OWASP ZAP, Burp Suite, Jira, or Azure DevOps. Understanding of CI/CD pipelines and Agile delivery. Working knowledge of Python, Java, or JavaScript. Strong analytical ...

. Strong knowledge of software testing principles and SDLC. Experience with manual and automated testing frameworks. Experience with tools such as Selenium, BrowserStack, JMeter, OWASP ZAP, Burp Suite, Jira, or Azure DevOps. Understanding of CI/CD pipelines and Agile delivery. Working knowledge of Python, Java, or JavaScript. Strong analytical ...

/Security Hub. Strong coding ability in TypeScript or Python or Go comfortable shipping production code, not just configs and scripts. Application security fluency: OWASP Top 10, threat modeling, and code‐level reviews on real systems. Experience securing a B2B SaaS multi‐tenant production environment. Comfort owning ...

supporting live-service issues. Strong attention to detail and commitment to secure, reliable and maintainable solutions. Desirable Skills Interest in Infrastructure as Code, OpenTelemetry, OWASP, PowerShell, Postman, YAML, Pulumi or Terraform. Exposure to containers, CDNs, networking or IT service management. Experience with GraphQL or SOAP. Experience with Power Apps ...

. Deployment of on‐premise Kubernetes Prometheus (or other stacks) observability Experience with AWS Karpenter & Compute Optimizer Compliance literacy - ISO 27001, NIST SSDF/OWASP SAMM, GDPR basics Why Oxford Dynamics? Join the most exciting growth area in the UK: AI and robotics. Every member of the Oxford Dynamics team ...

have the following experience; Experience assessing security impacts across codebases and APIs using languages such as Java, TypeScript and Python. Strong knowledge of the OWASP Top 10, secure coding practices, and common web and API vulnerabilities. Hands-on experience triaging, validating and remediating vulnerabilities with both technical and non-technical ...

5+ years of relevant experience in the medical device space (either industry or through consulting/service provider) Proficiency in security frameworks (e.g., NIST, OWASP, MITRE ATT&CK, PASTA, STRIDE) and standards such as FDA cybersecurity guidance Experience assessing security risks using industry standard methods (penetration test results, threat modeling ...

product launches Threat modeling, secure design reviews, and static/dynamic code analysis across the SDLC Identifying and remediating common web application vulnerabilities (OWASP Top 10) Experience securing internal AI/LLM platforms and coding agents (model gateways, prompt/response controls, agent permissioning) Nice to have experience: Experience ...

security and security operations. Proven leadership of security engineering or SOC teams — including distributed, multi-region teams. Expert-level knowledge of secure SDL frameworks (OWASP SAMM, NIST SSDF), threat modelling, and security architecture. Deep experience with detection engineering, SIEM/XDR platforms, incident response, and MSSP management. Strong cloud security ...

security and security operations. Proven leadership of security engineering or SOC teams — including distributed, multi-region teams. Expert-level knowledge of secure SDL frameworks (OWASP SAMM, NIST SSDF), threat modelling, and security architecture. Deep experience with detection engineering, SIEM/XDR platforms, incident response, and MSSP management. Strong cloud security ...

distributed systems, scalability, resilience and performance tuning Experience with cloud-native applications, Docker, Kubernetes and CI/CD Strong knowledge of application security, OWASP principles and secure development practices Knowledge of a modern front-end node-based framework Other Information Permanent role – 37.5 hours per week. Monday to Friday ...

consumer-driven contract testing between services, for example using Pact. Ensure security is embedded into engineering practices, including SAST scanning, dependency updates, and OWASP-aligned API design via Azure API Management. Technical Leadership & Mentoring Lead, mentor and develop a small engineering squad through structured code reviews, pair programming, technical coaching ...

have the following experience: Experience assessing security impacts across codebases and APIs using languages such as Java, TypeScript and Python. Strong knowledge of the OWASP Top 10, secure coding practices, and common web and API vulnerabilities. Hands-on experience triaging, validating and remediating vulnerabilities with both technical and non-technical ...

latest exploits, vulnerabilities (CVEs), and threatactor tactics Requirements Required Skills Strongproficiency in penetration testing tools (e.g., Kali Linux, BurpSuite, Metasploit, Nmap, Wireshark) Experiencewith OWASP Top 10 , vulnerability scanning, and exploit development Familiaritywith MITRE ATT&CK framework and red team methodology Solidknowledge of TCP/IP, firewalls, DNS, HTTP/HTTPS ...

functional, integration and non-functional testing Strong communication, stakeholder management and team collaboration skills Nice to have Cucumber/Gherkin Gatling performance testing OWASP ZAP security testing SonarQube GitHub Copilot WireMock Accessibility testing tools such as Axe or Wave Kubernetes and Docker AWS OpenAPI specifications If you're interested ...

functional, integration and non-functional testing Strong communication, stakeholder management and team collaboration skills Nice to have Cucumber/Gherkin Gatling performance testing OWASP ZAP security testing SonarQube GitHub Copilot WireMock Accessibility testing tools such as Axe or Wave Kubernetes and Docker AWS OpenAPI specifications If you're interested ...

leading offensive security programs (penetration testing, red teaming, bug bounty).Practical understanding of governance and assurance frameworks such as ISO 27001, SOC 2, and OWASP SAMM.Familiarity with AI/LLM tooling (e.g., Cursor, GitHub Copilot, custom LLM integrations) and the associated security and governance considerations.Experience working with AWS and securing ...

with AI and agentic security risks (prompt injection, data poisoning, model and agent governance). Have experience mapping security frameworks (NIST CSF, ISO 27001, OWASP, NIST AI RMF). Have hands‐on exposure to detection and response, red‐team, or pen‐test work. Have experience with our stack: Azure/ ...

OpenAPI Databases PostgreSQL MongoDB Redis Testing Jest Vitest DevOps & Cloud AWS Docker Git GitHub GitHub Actions Delivery Jira Azure DevOps Agile delivery environments Security OWASP awareness Vulnerability scanning Secure development practices Desirable GOV.UK or GDS experience Public sector experience Experience delivering services in Beta and Live Experience with GitHub Copilot ...

Infrastructure as Code (Terraform), observability tooling (Grafana, Kibana, Datadog, CloudWatch), automated testing (NUnit, xUnit, Cypress, Playwright), Git‐based workflows, and secure development practices including OWASP, secrets management and Vault. Ways of Working, Comfortable in Scrum/Kanban environments with strong communication skills; experienced with Jira, Confluence, Slack and MS Teams ...

government standards Writing clean, maintainable, and reusable code/configuration Supporting issue investigation, resolution, and continuous improvement Applying secure development practices, including awareness of OWASP principles Collaborating with stakeholders and clearly communicating technical concepts Tech and environment: Microsoft Power Platform (Power Apps, Power Automate, Dataverse) Integration with wider enterprise systems ...

Lifecycle Professional) GWAPT (GIAC Web Application Penetration Tester) GCSA (GIAC Cloud Security Automation) CASE (Certified Application Security Engineer) Certified DevSecOps Professional Strong familiarity with OWASP (including Top 10 and ASVS) At least 5 years experience in information security assurance, with a strong focus on application security. Hands-on experience with ...