26 to 50 of 120 OWASP Jobs in the UK

risks, with a focus on recommendations for enhancements or remediation, and proficiency in multiple security assessment methodologies (e.g., Open Worldwide Application Security Project (OWASP) Top Ten, National Institute of Standards and Technology (NIST) Cybersecurity Framework), offensive testing tools, or resiliency testing equivalents Excellent communication, collaboration, and report writing skills, with ...

communication skills Proven team engagement skills Proven coaching skills Quality Driven Adaptable/ability to context switch Stakeholder Management Optional Skills: Junit Playwright Gatling OWASP Zap SonarQube GitHub Co-pilot Wiremock Wave Axe Kubernetes Docker Micro-services AWS Open API WCAG Cucumber/Gherkin Selenium Agile Scrum Agile Practices ...

distributed systems, scalability, resilience and performance tuning Experience with cloud‐native applications, Docker, Kubernetes and CI/CD Strong knowledge of application security, OWASP principles and secure development practices Knowledge of a modern front‐end node‐based framework Other Information Permanent role – 37.5 hours per week. Monday to Friday ...

latest exploits, vulnerabilities (CVEs), and threatactor tactics Requirements Required Skills Strongproficiency in penetration testing tools (e.g., Kali Linux, BurpSuite, Metasploit, Nmap, Wireshark) Experiencewith OWASP Top 10 , vulnerability scanning, and exploit development Familiaritywith MITRE ATT&CK framework and red team methodology Solidknowledge of TCP/IP, firewalls, DNS, HTTP/HTTPS ...

functional, integration and non-functional testing Strong communication, stakeholder management and team collaboration skills Nice to have Cucumber/Gherkin Gatling performance testing OWASP ZAP security testing SonarQube GitHub Copilot WireMock Accessibility testing tools such as Axe or Wave Kubernetes and Docker AWS OpenAPI specifications If you're interested ...

functional, integration and non-functional testing Strong communication, stakeholder management and team collaboration skills Nice to have Cucumber/Gherkin Gatling performance testing OWASP ZAP security testing SonarQube GitHub Copilot WireMock Accessibility testing tools such as Axe or Wave Kubernetes and Docker AWS OpenAPI specifications If you're interested ...

with AI and agentic security risks (prompt injection, data poisoning, model and agent governance). Have experience mapping security frameworks (NIST CSF, ISO 27001, OWASP, NIST AI RMF). Have hands‐on exposure to detection and response, red‐team, or pen‐test work. Have experience with our stack: Azure/ ...

risks, with a focus on recommendations for enhancements or remediation, and proficiency in multiple security assessment methodologies (e.g., Open Worldwide Application Security Project (OWASP) Top Ten, National Institute of Standards and Technology (NIST) Cybersecurity Framework), offensive testing tools, or resiliency testing equivalents Excellent communication, collaboration, and report writing skills, with ...

principles across all AI workloads, including prompt injection defence and data protection. Partner with AI Safety and Compliance teams to enforce standards aligned to OWASP GenAI, NIST AI RMF, and ISO/IEC 42001. Implement guardrails for model usage, data handling, and fairness/bias mitigation. Ensure full audit trails ...

OpenAPI Databases PostgreSQL MongoDB Redis Testing Jest Vitest DevOps & Cloud AWS Docker Git GitHub GitHub Actions Delivery Jira Azure DevOps Agile delivery environments Security OWASP awareness Vulnerability scanning Secure development practices Desirable GOV.UK or GDS experience Public sector experience Experience delivering services in Beta and Live Experience with GitHub Copilot ...

Infrastructure as Code (Terraform), observability tooling (Grafana, Kibana, Datadog, CloudWatch), automated testing (NUnit, xUnit, Cypress, Playwright), Git‐based workflows, and secure development practices including OWASP, secrets management and Vault. Ways of Working, Comfortable in Scrum/Kanban environments with strong communication skills; experienced with Jira, Confluence, Slack and MS Teams ...

government standards Writing clean, maintainable, and reusable code/configuration Supporting issue investigation, resolution, and continuous improvement Applying secure development practices, including awareness of OWASP principles Collaborating with stakeholders and clearly communicating technical concepts Tech and environment: Microsoft Power Platform (Power Apps, Power Automate, Dataverse) Integration with wider enterprise systems ...

Lifecycle Professional) GWAPT (GIAC Web Application Penetration Tester) GCSA (GIAC Cloud Security Automation) CASE (Certified Application Security Engineer) Certified DevSecOps Professional Strong familiarity with OWASP (including Top 10 and ASVS) At least 5 years experience in information security assurance, with a strong focus on application security. Hands-on experience with ...

Lifecycle Professional) GWAPT (GIAC Web Application Penetration Tester) GCSA (GIAC Cloud Security Automation) CASE (Certified Application Security Engineer) Certified DevSecOps Professional Strong familiarity with OWASP (including Top 10 and ASVS) At least 5 years’ experience in information security assurance, with a strong focus on application security. Hands-on experience with ...

business terms to exec and board audiences, and technical terms to engineers, without losing precision in either direction. Technical foundation Strong AppSec expertise (OWASP, API security, SAST/DAST, SDLC) with practical threat modelling experience – enough to challenge and coach our most senior application security engineers. Hands‐on understanding ...

DDoS mitigation, web proxy, vulnerability management) Understanding of Information Security principles, frameworks and regulatory requirements (e.g. ISO27001, FCA, PRA, ICO) Working knowledge of OWASP Top 10 and build/integration tools (e.g. Maven, Jenkins, Chef, TFS) Effective communication skills, including the ability to explain technical concepts and impacts ...

monitoring. Experience applying AI/ML to security workflows – automated triage, behavioural analytics, or LLM‐assisted investigation. Understanding of AI security risks and frameworks: OWASP LLM Top 10, NIST AI RMF. Scripting proficiency in Python, PowerShell, or Bash for security automation. Strong grasp of PCI DSS, NIST ...

security features Extensive RBAC/ABAC knowledge and implementation experience Experience with user, agent, and machine authentication workflows. Hands‐on experience with secure coding, OWASP Top 10, and threat modeling. Strong developer skills and extensive experience shipping code to production. Experienced in CI/CD, IaC, Python and Go. Track ...

approaches, including unit/integration testing and support for system/UAT. Ability to apply secure development practices, including awareness of common vulnerabilities (e.g. OWASP Top 10) and safe handling of sensitive data. Working knowledge of information handling controls relevant to NHS environments, including safe haven practices where applicable ...

communication protocols (e.g.A2A) Familiarity with MCPs for tool and context integration in agentic systems Familiarity with secure-by-design development principles (ISO 27001, NIST, OWASP) Experience in defence, national security, or similarly regulated environments Contributions to open-source AI/ML projects Soft Skills Delivery-focused - you ship working systems ...

infrastructure, cloud, mobile and wireless security testing. Experience with black-box, grey-box and white-box testing methodologies. Knowledge of AWS, Azure, Google Cloud, OWASP, PTES and OSSTMM. Experience scoping, delivering and quality assuring complex security testing engagements. Strong communication skills with clients, stakeholders and technical teams. Desirable Experience Experience ...

infrastructure, cloud, mobile and wireless security testing. Experience with black-box, grey-box and white-box testing methodologies. Knowledge of AWS, Azure, Google Cloud, OWASP, PTES and OSSTMM. Experience scoping, delivering and quality assuring complex security testing engagements. Strong communication skills with clients, stakeholders and technical teams. Desirable Experience Experience ...

protocols (e.g. A2A) Familiarity with MCPs for tool and context integration in agentic systems Familiarity with secure-by-design development principles (ISO 27001, NIST, OWASP) Experience in defence, national security, or similarly regulated environments Contributions to open-source AI/ML projects Soft Skills Delivery-focused - you ship working systems ...

protocols (e.g. A2A) Familiarity with MCPs for tool and context integration in agentic systems Familiarity with secure-by-design development principles (ISO 27001, NIST, OWASP) Experience in defence, national security, or similarly regulated environments Contributions to open-source AI/ML projects Soft Skills Delivery-focused - you ship working systems ...

containerization (Docker, Kubernetes). Experience working in an Agile/Scrum development environment. Knowledge of AI security frameworks and responsible AI practices (e.g., OWASP for LLMs, MCP). Industry experience in manufacturing or a related industrial sector. Physical Demands Duties of this position are performed in a normal office environment. ...