1 to 25 of 29 Remote/Hybrid OWASP Jobs in the UK

support, and participate in on‐call, recovery and post‐mortem activities to ensure availability and reliability. Produce high‐quality code aligned to standards (e.g. OWASP, GDPR, Git/Azure DevOps), supporting junior team members and contributing to DevOps culture. Advise internal teams and customers on DevOps principles, administer in‐house ...

Working with shared/common government tech stacks (Node.js, PostgreSQL, Redis) Investigating and resolving technical issues across the stack Applying secure development practices, including OWASP principles and vulnerability management Collaborating with stakeholders and communicating technical concepts clearly Tech stack includes: Node.js, HAPI (web framework) API development (REST, OpenAPI) PostgreSQL, MongoDB ...

conducting threat modelling (e.g. STRIDE, attack trees) and risk analysis Strong understanding of security frameworks and best practice such as ISO 27001, NIST, CIS, OWASP, NCSC guidance Experience working in the UK Public Sector and associated security standards and guidance including GovAssure/NCSC CAF, HMG Security Policy Framework. Knowledge ...

conducting threat modelling (e.g. STRIDE, attack trees) and risk analysis Strong understanding of security frameworks and best practice such as ISO 27001, NIST, CIS, OWASP, NCSC guidance Experience working in the UK Public Sector and associated security standards and guidance including GovAssure/NCSC CAF, HMG Security Policy Framework. Knowledge ...

Azure, or GCP), including identity, network security, and platform controls. Active SC Clearance Experience with security frameworks and standards (eg NIST, ISO 27001, CIS, OWASP). Hands-on understanding of modern application architectures (microservices, APIs, event-driven systems). Experience working within Agile/Scrum delivery environments. Strong stakeholder engagement ...

wireless, and mobile security testing. Experience leading security teams and managing the delivery of offensive security engagements. Deep understanding of penetration testing methodologies including OWASP Testing Guide, PTES, and OSSTMM. Experience working within Red Team, Blue Team, and Purple Team environments. Strong knowledge of common attack techniques, threat emulation, vulnerability ...

penetration testing engagements. Provide technical guidance and support to penetration testers and security consultants. Ensure testing methodologies align with: NCSC CHECK requirements CREST standards OWASP Testing Guide Review and validate findings to ensure technical accuracy and consistency. Perform peer reviews and quality assurance of technical reports. Lead technical investigations ...

government standards Writing clean, maintainable, and reusable code/configuration Supporting issue investigation, resolution, and continuous improvement Applying secure development practices, including awareness of OWASP principles Collaborating with stakeholders and clearly communicating technical concepts Tech and environment: Microsoft Power Platform (Power Apps, Power Automate, Dataverse) Integration with wider enterprise systems ...

Lifecycle Professional) GWAPT (GIAC Web Application Penetration Tester) GCSA (GIAC Cloud Security Automation) CASE (Certified Application Security Engineer) Certified DevSecOps Professional Strong familiarity with OWASP (including Top 10 and ASVS) At least 5 years experience in information security assurance, with a strong focus on application security. Hands-on experience with ...

Lifecycle Professional) GWAPT (GIAC Web Application Penetration Tester) GCSA (GIAC Cloud Security Automation) CASE (Certified Application Security Engineer) Certified DevSecOps Professional Strong familiarity with OWASP (including Top 10 and ASVS) At least 5 years’ experience in information security assurance, with a strong focus on application security. Hands-on experience with ...

Microsoft Purview • Background in eComm, marketplace, or retail technology • Scripting (Python, PowerShell), Terraform, or detection-as-code experience • Familiarity with NIST CSF, ISO 27001, OWASP LLM Top 10, or similar frameworks What's on Offer for the Security Engineer • Real ownership — a genuine mandate to drive change, with the tooling ...

Awareness of AI/ML in security operations and AI-specific threats (e.g. prompt injection, sensitive-data exposure via GenAI), with awareness of the OWASP LLM Top 10 and MITRE ATLAS. Exposure to cloud detection across Azure, AWS, and/or GCP and to cloud and identity log sources (e.g. ...

management and application monitoring. Knowledge of advanced agent orchestration protocols (eg, A2A communication) and Model Context Protocols (MCPs). Familiarity with secure development frameworks (OWASP, NIST, ISO 27001). Background working in Defence, GovTech, aerospace, or similarly regulated sectors. ...

management and application monitoring. Knowledge of advanced agent orchestration protocols (e.g., A2A communication) and Model Context Protocols (MCPs). Familiarity with secure development frameworks (OWASP, NIST, ISO 27001). Background working in Defence, GovTech, aerospace, or similarly regulated sectors. ...

application monitoring. Knowledge of advanced agent orchestration protocols (e.g., A2A communication) and Model Context Protocols (MCPs). xkybehq Familiarity with secure development frameworks (OWASP, NIST, ISO 27001). Background working in Defence, GovTech, aerospace, or similarly regulated sectors. ...

deadlines Desirable Attributes Certifications such as CISSP, CISA, CRISC, or equivalent. Familiarity with additional frameworks (e.g., ISO 22301, ISO 31000, ISO 28000, ITIL, PASTA, OWASP Top 10, PCI-DSS, GDPR, DEFCON 660/659 etc..). We are a Disability Confident Employer Capgemini is proud to be a Disability Confident ...

InsightVM/InsightIDR, SentinelOne, Cloudflare, OneTrust, Microsoft Purview, or KnowBe4 Background in e‐commerce, marketplace, or retail technology Familiarity with NIST CSF, ISO 27001, OWASP LLM Top 10, or similar frameworks What We Offer Remote/hybrid working, UK‐based, with flexible London office presence A clear mandate to drive ...

architecture principles Leading Infrastructure as Code implementation using Bicep Driving CI/CD maturity (Bitbucket preferred) with strict SDK and dependency version control Ensuring OWASP-aligned secure coding practices and GDPR compliance Collaborating with QA to support automated and manual test strategies Documenting architectural decisions (ADRs) and maintaining clear technical ...

within cybersecurity services, technical assurance, or adjacent complex B2B professional services Strong commercial understanding of cybersecurity regulatory frameworks and standards (including ISO 27001, NIST, OWASP, NCSC, Radio Equipment Directive, Cyber Resilience Act), and the ability to translate regulatory drivers into revenue opportunities Proven success closing strategically significant, multi‐year contracts ...

areas such as: Cyber security audits/assessments Vulnerability management Product or application security Security testing strategy Secure SDLC Risk, controls and remediation planning OWASP principles Reviewing security tooling and processes Translating technical findings into clear business language You don’t need to be a pure pen tester for this ...

Experience with infrastructure and DevOps fundamentals: CI/CD, cloud platforms, CDN, monitoring/observability, and deployment strategies. Strong understanding of security best practices (OWASP, authentication/authorization patterns, secure data handling) — especially in a financial context. Experience hiring, mentoring, and growing engineers — building a high‐performing team, not just ...

Experience with infrastructure and DevOps fundamentals: CI/CD, cloud platforms, CDN, monitoring/observability, and deployment strategies. Strong understanding of security best practices (OWASP, authentication/authorization patterns, secure data handling) — especially in a financial context. Experience hiring, mentoring, and growing engineers — building a high‐performing team, not just ...

Information Security, Vulnerability Management or Security Operations Strong understanding of vulnerability assessment, patch management and remediation processes Knowledge of secure web application principles (OWASP Top 10, SANS 25) Experience with application and infrastructure security, including: Firewalls, Web & Email Security, AD/Group Policy, MFA, DMARC, DKIM, SPF Good understanding ...

enable consistent and compliant environm entsImplement automation across build, test, and deployment processes to ensure reliable and repeatable deli veryApply security best practices, including OWASP principles, throughout the development and deployment lifec ycleDeploy and manage containerised applications using Kubernetes or AWS-native services such as ECS or EKSMonitor system performance … using Terraform for infrastructure-as-code del iverySolid understanding of Kubernetes architecture and cloud-based container orchestr ationWorking knowledge of secure development practices, including OWASP principles within CI/CD and infrastructure d esignExperience with scripting languages such as Python, Bash, or Power ShellFamiliarity with Agile delivery environments and collaboration ...

across infrastructure and web application testing Strong written communication skills Proficiency with standard tooling: Nmap, Burp Suite, Metasploit, Nessus, and similar Good understanding of OWASP Top 10, CVE exploitation, and common network attack paths Interested? Apply now for more information ...