101 to 120 of 120 OWASP Jobs in the UK

management. Excellent attention to detail. Adheres to and promotes high standards. Understanding of vulnerability and threat assessment frameworks, such as: CVSS, CVE, CWE,OWASP, MITRE. Operational Technology (OT) management experience in vulnerability scanning. Competent at keeping up to date on CTI (Cyber Threat Intelligence) Desirable Experience with security or compliance ...

knowledge of RAG patterns and vector store integration (e.g., Qdrant, pgvector, Pinecone). Awareness of AI‐specific risk areas relevant to a regulated environment (OWASP LLM Top 10, hallucination/determinism concerns, and auditability of agent decisions). EEO Statement We are proud to be an equal opportunity workplace ...

developer tooling used inside our own delivery pipelines. Threat modelling and risk Lead threat modelling for applications, APIs and AI features using STRIDE and OWASP methods, supported by appropriate HL TM tooling, driving the resulting mitigations to closure. Assess the security implications of new products, technologies and third-party integrations … sector; mobile application security; software supply chain and secure SDLC; hands-on experience with Amazon Bedrock or comparable managed model platforms; familiarity with the OWASP Top 10 for LLM and Agentic Applications; working knowledge of OWASP ASVS, Top 10 and API Security Top 10. Azure exposure is useful, although ...

manually confirming exploitability beyond what scanners or AI analysis reports. Use Interactive Application Security Testing (IAST) tools for runtime analysis, such as Burp Suite, OWASP ZAP, Frida, applying hands‐on technique to validate and extend automated results. Conduct Static Application Security Testing (SAST) and Software Composition Analysis (SCA) on source … secure coding training and promote a positive security posture. Requirements Have hands‐on experience with DAST, IAST and penetration testing tools (e.g., Burp Suite, OWASP ZAP, Frida), and can manually identify and exploit vulnerabilities beyond what these tools surface automatically. Can demonstrate independent, hands‐on technical ability, for example through ...

practical terms. Experience with AI governance, responsible AI, model risk management or AI assurance. Familiarity with frameworks and guidance such as NIST AI RMF, OWASP Top 10 for LLM Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations ...

should have practical security testing experience on web apps, APIs, or mobile apps, and familiarity with Burp Suite, nuclei, and Nmap. Knowledge of OWASP Top 10 and ability to report risk clearly is essential. #J-18808-Ljbffr ...

C#, MVC, ASP.NET Core, JavaScript, HTML & CSS Experience debugging, profiling and deploying web applications Solid understanding of MVC patterns, ASP.NET controllers & web security (OWASP) Comfortable working with IIS Exposure to frameworks like React, Vue, Angular or Knockout is a plus Degree in Computer Science or related field preferred ...

development experience- Experience with SQL Server or similar relational databases- Experience building web applications using Angular, React, Blazor or similar frameworks- An understanding of OWASP security best practices and secure by design principles- The ability to communicate effectively with technical and non-technical stakeholders- The ability to estimate, prioritise ...

Application, AI, and Infrastructure security: AI & Application Security: Lead the defense against LLM-specific vulnerabilities (Prompt Injection, Insecure Output Handling) and standard web threats (OWASP Top 10). Implement "Guardrails" that sanitize agent inputs/outputs and conduct continuous red-teaming of our agent behaviors. Secure SDLC & DevSecOps: Embed security … code in Python or Go and spot logic flaws that scanners miss. AI Security Curiosity: Understand the unique risks of LLMs. Familiar with the OWASP Top 10 for LLMs and have explored defenses against prompt injection and data exfiltration in agentic systems. Cloud Native Security: Hands-on experience securing ...

over 8 years of experience and a strong focus on security feature design, authentication workflows, and extensive knowledge of secure coding practices, including OWASP Top 10. Additional perks include equity options, private medical insurance, and a hybrid working model. #J-18808-Ljbffr ...

security reviews, threat modeling applications and identifying areas of risk Experience implementing strategies to support secure and compliant architectures Deep understanding of the OWASP Top 10 application security risks and how to address them Expert knowledge of Amazon AWS, Microsoft Azure or other cloud computing platform offerings and security related … experience Nice to Have Experience with assessing and providing recommendations for securing generative AI solutions Working knowledge of the Microsoft Security Development Lifecycle (SDL), OWASP Software Assurance Maturity Model (SAMM), or Building Security in Maturity Model (BSIMM). Familiar with compliance regulations like; ISO, GDPR, SOC2, SOX MS in Cyber ...

majority remote role with a London focus. The candidate will evaluate security impacts across Java, TypeScript and Python codebases and APIs, with strong OWASP Top 10 knowledge and secure coding practices. You will triage, validate and remediate vulnerabilities, coordinating with both technical and non-technical stakeholders and embedding security tooling ...

issues Lead the pentesting cadence around the core application set by conducting hacking exercises Provide application code reviews against known development frameworks such as OWASP ASVS Provide input into the design of functional and non-functional security controls such as customer authentication workflows Run Security Champion sessions to keep developers … Application Security Understanding of Software Development Life Cycle Desirable Security professional at heart borne froma software engineering background Experience of working with the OWASP ASVS framework Experience in Agile delivery environments Greenfield experience setting up security technologies from scratch Outgoing and able to build relationships with key stakeholders Personal Capabilities ...

Akamai, tuning rules and responding to emerging threats. Review and improve web ingress controls including DDoS mitigation, rate limiting, and certificate management. Apply OWASP principles across the organisation's web applications, working with development teams to identify and remediate vulnerabilities. Lead API security design and governance, ensuring consistent security controls … platforms. Deep hands‐on experience with Microsoft Defender for Cloud, Entra ID, Conditional Access policies, and Azure app registrations. Practical knowledge of API security, OWASP Top 10 remediation, and secure web application design. Experience working embedded in engineering or platform teams within an Agile/DevOps environment. Familiarity with ...

hardening Monitor systems for irregular behaviour and proactively design detection and prevention mechanisms Ensure infrastructure and applications align with accepted industry standards (e.g. OWASP Top 10 , AWS Well-Architected Framework ) Conduct and lead risk assessments , including third-party/vendor reviews and internal evaluations Document and maintain security policies, procedures … ecosystem and can comfortably navigate enterprise security tools across vendors Have solid foundations in networking, systems, and cloud infrastructure, and can apply frameworks like OWASP and AWS Well-Architected to real-world scenarios Have experience reviewing and improving product and infrastructure security, including secure SDLC practices (e.g. threat modelling, secure ...

Team experience running adversary simulations as an operator* Familiarity with common security testing tools: Burp Suite, nuclei, nmap, or similar* Working knowledge of OWASP Top 10 and at least some exposure to OWASP LLM Top 10 or MITRE ATLAS* Ability to triage findings and communicate risk clearly to technical ...

security engineering experience. Proven experience administering Akamai WAAP. Strong knowledge of WAF policy tuning, API security controls and application onboarding. Good understanding of OWASP Top 10 and OWASP API Security Top 10. Knowledge of HTTP/S, REST APIs and application layer attack mitigation. Experience with vulnerability management, Qualys ...

authentication mechanisms. Security Expertise Runtime Application Self‐Protection (RASP) Anti‐tampering protections Anti‐debugging mechanisms Certificate pinning Application integrity validation Strong understanding of: OWASP Mobile Top 10 OWASP MASVS Secure SDLC practices Mobile attack techniques and adversarial behaviour Knowledge of: Frida Objection Dynamic instrumentation frameworks Jailbreak environments Runtime hooking methodologies ...

Proven hands-on administration experience of Akamai WAAP including WAF policy tuning, API security controls, application onboarding and security profile management. Strong understanding of OWASP Top 10, OWASP API Security Top 10, HTTP/S, REST APIs and application-layer threat mitigation techniques. Good experience of vulnerability management, Qualys ...

Job Title: Digital Development Manager Salary Range: £51,540 - £62,451 per annum Permanent - Fulltime (36 Hours) Location: Twickenham Other essential information: Immediate start available This is a hands-on technical leadership role for someone ...