51 to 75 of 199 OWASP Jobs in the UK

Dynatrace, Catchpoint or similar. Experience managing incidents, problem management, root cause analysis and live production environments. Understanding of application and cloud security, including OWASP principles, WAF, bot management and security scanning. Experience with CDN technologies and security controls, such as Akamai, Cloudflare or equivalent. TPBN1_UKTJ ...

optimisation and performance tuning using PostgreSQL, MySQL or equivalent. Experience with Linux, Git, Docker and containerised development. Experience with automated testing, secure coding and OWASP practices. A track record of maintaining and modernising legacy applications. Clear communication skills and the ability to work independently and directly with technical ...

DAST tools. Scripting with Python, Bash, or PowerShell for automation. Git and branching strategies with a security‐focused approach. Knowledge of WAF, API security, OWASP Top 10, and common cloud‐security frameworks. WAF rules management, including creation, tuning, and monitoring. SSL/TLS configuration best practices, certificate lifecycle management. Experience ...

programmes. Experience conducting threat modelling and architecture security reviews. Deep understanding of application security principles, attack techniques, and risk management. Hands‐on experience with OWASP Top 10, SAST, DAST, SCA, Container Security, Infrastructure as Code Security, CI/CD Security, and API Security. Experience securing cloud-native environments, particularly ...

Entra ID Practical expertise managing WAF technologies such as Cloudflare, Akamai, or equivalent enterprise platforms Strong understanding of web application security, API security, and OWASP Top 10 vulnerabilities Experience implementing identity and access management controls, including Conditional Access and identity governance Experience working within Agile, DevOps, or platform engineering environments ...

/New Relic) testing across frontend and backend Comfortable working with CI/CD pipelines Understanding of secure coding practices across the stack (e.g. OWASP, input validation, authentication A team player with high energy and can-do attitude, able to work well within a team Versatile and adaptable, able ...

TypeScript. - Synthetic and application monitoring platforms such as Dynatrace and Catchpoint. - Understanding of .NET applications - Knowledge of Akamai or similar CDNs, perimeter security, and OWASP security guidelines. - Strong networking experience across DNS, routing, load balancers, and firewalls. - Skilled with enterprise level deployments across microservices and multi server environments. - Azure certification ...

systems such as Elastic APM or DataDog to track and diagnose issues in production A solid understanding of security principles and secure coding including OWASP Top 10 Nice to haves: Experience in VOIP (SIP and RTP advantageous) Experience of TDD/BDD/DDD Knowledge of PCI compliance and associated ...

DevOps: AWS‐native architectures, CI/CD automation using GitHub Actions,infrastructureand deployment optimisation. Security Engineering: Security‐by‐design mindset with applied knowledge of OWASP Top 10, WCAG, OAuth2, MFA, and secure identity patterns. Quality & Assurance: Proficient in unit testing frameworks; governance and execution of SAST, DAST, SCA, and penetration ...

government standards Writing clean, maintainable, and reusable code/configuration Supporting issue investigation, resolution, and continuous improvement Applying secure development practices, including awareness of OWASP principles Collaborating with stakeholders and clearly communicating technical concepts Tech and environment: Microsoft Power Platform (Power Apps, Power Automate, Dataverse) Integration with wider enterprise systems ...

review code and communicate security issues clearly to developers, primarily within a C# ecosystem, with exposure to Java or Python Strong knowledge of the OWASP Top 10 and practical mitigation patterns Experience implementing or improving SAST/DAST processes: tool tuning, triage workflows, and reducing signal to noise Working understanding ...

review code and communicate security issues clearly to developers, primarily within a C# ecosystem, with exposure to Java or Python Strong knowledge of the OWASP Top 10 and practical mitigation patterns Experience implementing or improving SAST/DAST processes: tool tuning, triage workflows, and reducing signal to noise Working understanding ...

improving the security of production software or cloud infrastructure Application and API security depth. Strong command of common web and API vulnerabilities including the OWASP Top 10, and practical knowledge of authentication, authorisation, sessions, secrets and encryption Cloud security. Hands-on experience securing AWS or another major cloud platform, including ...

DDoS mitigation, web proxy, vulnerability management) Understanding of Information Security principles, frameworks and regulatory requirements (e.g. ISO27001, FCA, PRA, ICO) Working knowledge of OWASP Top 10 and build/integration tools (e.g. Maven, Jenkins, Chef, TFS) Effective communication skills, including the ability to explain technical concepts and impacts ...

Kubernetes, and secure software development across Azure and/or AWS Good knowledge of security frameworks and standards, including NIST CSF, MITRE ATT&CK, OWASP, and how to apply security controls in DevOps platforms and processes Experience working across enterprise and solution architecture, with strong knowledge of application security, data ...

cloud environments Knowledge of Windows and Linux/Unix security Understanding of IAM, encryption, PKI and TLS Knowledge of web security principles, including OWASP Top 10, WAF and API security Experience with vulnerability management, patching and security remediation Knowledge of the MITRE ATT&CK Framework and common attack techniques Experience ...

monitoring. Experience applying AI/ML to security workflows – automated triage, behavioural analytics, or LLM‐assisted investigation. Understanding of AI security risks and frameworks: OWASP LLM Top 10, NIST AI RMF. Scripting proficiency in Python, PowerShell, or Bash for security automation. Strong grasp of PCI DSS, NIST ...

design leadership. Deep understanding of AWS security, hybrid cloud design, and modern DevSecOps principles. Strong knowledge of frameworks such as NIST, ISO 27001, OWASP, and CIS. Experience designing and implementing secure, compliant PCI‐DSS solutions. Solid grounding in tools and technologies like SIEM, IDS/IPS, DLP, endpoint protection ...

with the Model Context Protocol (MCP) for tool and context integration in agentic systems Familiarity with secure‐by‐design development principles (ISO 27001, NIST, OWASP) Experience in defence, national security, or similarly regulated environments Contributions to open‐source AI/ML projects An active SC or DV clearance ...

with the Model Context Protocol (MCP) for tool and context integration in agentic systems Familiarity with secure‐by‐design development principles (ISO 27001, NIST, OWASP) Experience in defence, national security, or similarly regulated environments Contributions to open‐source AI/ML projects An active SC or DV clearance ...

Governance: Proactively identify systemic delivery and technical risks—including model drift, IP leakage, licensing issues in generated code, data privacy breaches, and security vulnerabilities (OWASP Top 10 for LLMs). Regulatory & Safety Compliance: Ensure all delivery frameworks adhere strictly to evolving AI governance standards, copyright guidelines, data privacy regulations (GDPR ...

Governance: Proactively identify systemic delivery and technical risks—including model drift, IP leakage, licensing issues in generated code, data privacy breaches, and security vulnerabilities (OWASP Top 10 for LLMs). Regulatory & Safety Compliance: Ensure all delivery frameworks adhere strictly to evolving AI governance standards, copyright guidelines, data privacy regulations (GDPR ...

Bring Deep AppSec Expertise: Extensive, hands‐on experience in application security, with mastery of the SSDLC, secure coding principles, and common vulnerability classes (OWASP Top 10, etc.). A Builder of Standards: Proven experience creating, documenting, and rolling out security standards, patterns, and best practices in a complex engineering environment. ...

appropriate tools. Familiarity with Continuous Security, Continuous Integration and Continuous Delivery practices. Solid understanding of network security (OSI, TCP/IP), web application security (OWASP) and cryptographic controls (PKI, TLS). Track record in managing, mentoring and coaching team members, with a passion for people development. Excellent communication skills, able ...

practices. Work with Continuous Security, CI/CD, and automated testing approaches. Apply expertise in network security (OSI, TCP/IP), web application security (OWASP), and cryptography (PKI, TLS). Mentor, coach, and support the development of junior staff. Communicate complex security topics effectively to both technical and non-technical ...