1 to 25 of 43 OWASP Jobs in the UK excluding London

Helm) CI/CD pipeline design and management (Jenkins, GitHub Actions, or equivalent) Configuration management and release management Software Engineering Practices Secure development and OWASP best practices Source control and code management (Git, branching strategies) Software design and development (clean code, code reviews) Service operations and resiliency (fault tolerance, circuit ...

. Strong knowledge of software testing principles and SDLC. Experience with manual and automated testing frameworks. Experience with tools such as Selenium, BrowserStack, JMeter, OWASP ZAP, Burp Suite, Jira, or Azure DevOps. Understanding of CI/CD pipelines and Agile delivery. Working knowledge of Python, Java, or JavaScript. Strong analytical ...

Hands-on experience with tools/frameworks such as Selenium and BrowserStack. Experience in performance, load, and security testing, using tools such as JMeter, OWASP ZAP, or Burp Suite. Understanding of CI/CD pipelines and the Software Development Lifecycle (SDLC), including integrating testing into automated delivery pipelines. Experience with ...

. Strong knowledge of software testing principles and SDLC. Experience with manual and automated testing frameworks. Experience with tools such as Selenium, BrowserStack, JMeter, OWASP ZAP, Burp Suite, Jira, or Azure DevOps. Understanding of CI/CD pipelines and Agile delivery. Working knowledge of Python, Java, or JavaScript. Strong analytical ...

distributed systems, scalability, resilience and performance tuning Experience with cloud-native applications, Docker, Kubernetes and CI/CD Strong knowledge of application security, OWASP principles and secure development practices Knowledge of a modern front-end node-based framework Other Information Permanent role – 37.5 hours per week. Monday to Friday ...

Strong grasp of integration patterns with Legacy systems (mainframe, ESB, message‐based, batch) and incremental modernisation strategies Solid understanding of secure‐by‐design principles, OWASP risks, and engineering for high‐assurance environments Experience with infrastructure‐as‐code (Terraform, CloudFormation, CDK) and modern CI/CD practices Strong experience working ...

/CD pipelines (e.g., Jenkins, GitHub Actions) and utilizing containerisation and infrastructure-as-code tooling. Security & Accessibility: Comprehensive understanding of secure coding practices (e.g., OWASP), data encryption, and WCAG 2.2 accessibility compliance. Agile Mindset: A strong track record of operating effectively in blended, multi-supplier agile environments (Scrum/Kanban ...

teams. Desirable Skills Experience with the following technologies and tools would be advantageous: Testing & Automation JUnit Playwright Selenium Cucumber Performance Testing Gatling Security Testing OWASP ZAP Cloud & Containerisation Docker Kubernetes AWS Accessibility Testing WCAG Standards WAVE ...

audit engagements (ISO 27001, SOC 2, Cyber Essentials, GDPR). Fluent in security frameworks and threat methodologies (MITRE ATT&CK, NIST CSF, CIS Controls, OWASP) with practical application, not just theoretical knowledge. Experience securing cloud‐native and SaaS‐heavy environments (AWS preferred). Strategic thinker who can define a roadmap ...

communication skills Proven team engagement skills Proven coaching skills Quality Driven Adaptable/ability to context switch Stakeholder Management Optional Skills: Junit Playwright Gatling OWASP Zap SonarQube GitHub Co-pilot Wiremock Wave Axe Kubernetes Docker Micro-services AWS Open API WCAG Cucumber/Gherkin Selenium Agile Scrum Agile Practices ...

distributed systems, scalability, resilience and performance tuning Experience with cloud‐native applications, Docker, Kubernetes and CI/CD Strong knowledge of application security, OWASP principles and secure development practices Knowledge of a modern front‐end node‐based framework Other Information Permanent role – 37.5 hours per week. Monday to Friday ...

functional, integration and non-functional testing Strong communication, stakeholder management and team collaboration skills Nice to have Cucumber/Gherkin Gatling performance testing OWASP ZAP security testing SonarQube GitHub Copilot WireMock Accessibility testing tools such as Axe or Wave Kubernetes and Docker AWS OpenAPI specifications If you're interested ...

functional, integration and non-functional testing Strong communication, stakeholder management and team collaboration skills Nice to have Cucumber/Gherkin Gatling performance testing OWASP ZAP security testing SonarQube GitHub Copilot WireMock Accessibility testing tools such as Axe or Wave Kubernetes and Docker AWS OpenAPI specifications If you're interested ...

Lifecycle Professional) GWAPT (GIAC Web Application Penetration Tester) GCSA (GIAC Cloud Security Automation) CASE (Certified Application Security Engineer) Certified DevSecOps Professional Strong familiarity with OWASP (including Top 10 and ASVS) At least 5 years experience in information security assurance, with a strong focus on application security. Hands-on experience with ...

DDoS mitigation, web proxy, vulnerability management) Understanding of Information Security principles, frameworks and regulatory requirements (e.g. ISO27001, FCA, PRA, ICO) Working knowledge of OWASP Top 10 and build/integration tools (e.g. Maven, Jenkins, Chef, TFS) Effective communication skills, including the ability to explain technical concepts and impacts ...

approaches, including unit/integration testing and support for system/UAT. Ability to apply secure development practices, including awareness of common vulnerabilities (e.g. OWASP Top 10) and safe handling of sensitive data. Working knowledge of information handling controls relevant to NHS environments, including safe haven practices where applicable ...

communication protocols (e.g.A2A) Familiarity with MCPs for tool and context integration in agentic systems Familiarity with secure-by-design development principles (ISO 27001, NIST, OWASP) Experience in defence, national security, or similarly regulated environments Contributions to open-source AI/ML projects Soft Skills Delivery-focused - you ship working systems ...

infrastructure, cloud, mobile and wireless security testing. Experience with black-box, grey-box and white-box testing methodologies. Knowledge of AWS, Azure, Google Cloud, OWASP, PTES and OSSTMM. Experience scoping, delivering and quality assuring complex security testing engagements. Strong communication skills with clients, stakeholders and technical teams. Desirable Experience Experience ...

proficiency Strong communication and coaching abilities Quality-focused mindset Stakeholder management Preferred Skills Testing tools (JUnit, Playwright, Selenium, Cucumber), performance tools (Gatling), security tools (OWASP Zap), containerization (Docker, Kubernetes), cloud (AWS), and accessibility testing (WCAG, Wave, Axe). ...

security incidents Good understanding of network security technologies including Firewalls, IDS/IPS, WAF and VPNs Knowledge of secure software development, application security and OWASP principles Experience working with Identity & Access Management (IAM) Knowledge of security frameworks such as ISO27001, NIST or NIS2 Experience within regulated environments would be advantageous ...

strong attention to detail A solid understanding of how web applications work including security, session management, and best development practices Full understanding of the OWASP framework. Enforcement of the framework throughout all coding Create, maintain and coordinate backup mechanisms for the purposes of business continuity while maintaining a high level ...

across endpoint, network, cryptography, information management, and IAM in enterprise environments Awareness of industry security standards including ISO 27001, NIST, PCI DSS, COBIT, and OWASP, with experience in public and/or private cloud environments Desirable: security certifications such as CISSP, CISM, CCSP, CEH, or OSCP Contract Details Initial ...

design leadership. Deep understanding of AWS security, hybrid cloud design, and modern DevSecOps principles. Strong knowledge of frameworks such as NIST, ISO 27001, OWASP, and CIS. Experience designing and implementing secure, compliant PCI‐DSS solutions. Solid grounding in tools and technologies like SIEM, IDS/IPS, DLP, endpoint protection ...

strong attention to detail A solid understanding of how web applications work including security, session management, and best development practices Full understanding of the OWASP framework. Enforcement of the framework throughout all coding Create, maintain and coordinate backup mechanisms for the purposes of business continuity while maintaining a high level ...

processes such as penetration testing, vulnerability scanning and red/blue team activities would be advantageous. An understanding of security testing methodologies such as OWASP or NIST would be beneficial. Previous experience within a large enterprise or regulated environment would be advantageous. Exposure to security tooling, including vulnerability management platforms ...