1 to 25 of 38 OWASP Jobs in the UK excluding London

support, and participate in on‐call, recovery and post‐mortem activities to ensure availability and reliability. Produce high‐quality code aligned to standards (e.g. OWASP, GDPR, Git/Azure DevOps), supporting junior team members and contributing to DevOps culture. Advise internal teams and customers on DevOps principles, administer in‐house ...

understanding of CI/CD pipelines, version control (Git), and modern deployment practices.Familiarity with security best practices relevant to web and mobile applications (e.g. OWASP Top 10).Excellent communication skills, able to articulate technical decisions clearly to both technical and non-technical stakeholders.Experience working within Agile or cross-functional delivery ...

/CD pipelines, version control (Git), and modern deployment practices. Familiarity with security best practices relevant to web and mobile applications (e.g. OWASP Top 10). Excellent communication skills, able to articulate technical decisions clearly to both technical and non-technical stakeholders. Experience working within Agile or cross-functional delivery ...

availability, reliability, and performance of services Contribute to CI/CD pipelines, applying TDD/BDD practices Implement Secure by Design principles and address OWASP Top 10 risks Promote observability, monitoring, and incident management best practices Mentor team members and produce clear technical documentation Essential Skills & Experience Strong experience ...

unit and automated testing using tools such as NUnit, Jasmine and SeleniumGood knowledge of SOLID principlesDesirable Skills:Containers (docker, K8s)Security best practice (OWASP top ten)OpenIDConnect/Identity serverMS SQL ServerAzure DevOps, TeamCityInfrastructure as Code (Bicep, ARM templates, Terraform)Please apply now or contact for more infoSpectrum IT Recruitment ...

SAML, OAuth, OpenID Connect, Active Directory, LDAP, ADFS) Secure application development (Java or .NET) Agile delivery environments API-driven architectures Security frameworks and principles (OWASP, NCSC guidance) Data protection and GDPR-compliant design Desirable Experience Defence, central government or highly regulated environments SC cleared environments Data architecture and modern data ...

security incidents Good understanding of network security technologies including Firewalls, IDS/IPS, WAF and VPNs Knowledge of secure software development, application security and OWASP principles Experience working with Identity & Access Management (IAM) Knowledge of security frameworks such as ISO27001, NIST or NIS2 Experience within regulated environments would be advantageous ...

Lifecycle Professional) GWAPT (GIAC Web Application Penetration Tester) GCSA (GIAC Cloud Security Automation) CASE (Certified Application Security Engineer) Certified DevSecOps Professional Strong familiarity with OWASP (including Top 10 and ASVS) At least 5 years experience in information security assurance, with a strong focus on application security. Hands-on experience with ...

Microsoft Purview • Background in eComm, marketplace, or retail technology • Scripting (Python, PowerShell), Terraform, or detection-as-code experience • Familiarity with NIST CSF, ISO 27001, OWASP LLM Top 10, or similar frameworks What's on Offer for the Security Engineer • Real ownership — a genuine mandate to drive change, with the tooling ...

strong attention to detail A solid understanding of how web applications work including security, session management, and best development practices Full understanding of the OWASP framework. Enforcement of the framework throughout all coding Create, maintain and coordinate backup mechanisms for the purposes of business continuity while maintaining a high level ...

ViTest) Contributing to CI/CD pipeline improvements and secure deployment practices Participating in architecture and technical design reviews Ensuring all development aligns with OWASP security best practices Tech Stack & Environment Core technologies: .NET 10/ASP.NET Core Angular 21 (mandatory) DevExpress DevExtreme v25 (mandatory) Entity Framework Core TypeScript/ ...

influencing technical direction. Experience using AI to accelerate software delivery. Bonus Points For Cyber security or regulated industry experience. Kubernetes and cloud-native technologies. OWASP, ISO 27001 or IEC 62443. Open-source contributions. ...

management and application monitoring. Knowledge of advanced agent orchestration protocols (e.g., A2A communication) and Model Context Protocols (MCPs). Familiarity with secure development frameworks (OWASP, NIST, ISO 27001). Background working in Defence, GovTech, aerospace, or similarly regulated sectors. ...

application monitoring. Knowledge of advanced agent orchestration protocols (e.g., A2A communication) and Model Context Protocols (MCPs). xkybehq Familiarity with secure development frameworks (OWASP, NIST, ISO 27001). Background working in Defence, GovTech, aerospace, or similarly regulated sectors. ...

proficiency Strong communication and coaching abilities Quality-focused mindset Stakeholder management Preferred Skills Testing tools (JUnit, Playwright, Selenium, Cucumber), performance tools (Gatling), security tools (OWASP Zap), containerization (Docker, Kubernetes), cloud (AWS), and accessibility testing (WCAG, Wave, Axe). ...

proficiency Strong communication and coaching abilities Quality-focused mindset Stakeholder management Preferred Skills Testing tools (JUnit, Playwright, Selenium, Cucumber), performance tools (Gatling), security tools (OWASP Zap), containerization (Docker, Kubernetes), cloud (AWS), and accessibility testing (WCAG, Wave, Axe). ...

deadlines Desirable Attributes Certifications such as CISSP, CISA, CRISC, or equivalent. Familiarity with additional frameworks (e.g., ISO 22301, ISO 31000, ISO 28000, ITIL, PASTA, OWASP Top 10, PCI-DSS, GDPR, DEFCON 660/659 etc..). We are a Disability Confident Employer Capgemini is proud to be a Disability Confident ...

architecture principles Leading Infrastructure as Code implementation using Bicep Driving CI/CD maturity (Bitbucket preferred) with strict SDK and dependency version control Ensuring OWASP-aligned secure coding practices and GDPR compliance Collaborating with QA to support automated and manual test strategies Documenting architectural decisions (ADRs) and maintaining clear technical ...

DAST, and SCA tooling - Snyk, Checkmarx, Semgrep, Burp Suite, or similar Threat modelling - comfortable running sessions with engineering and product teams Solid understanding of OWASP Top 10 and how to actually remediate real-world vulnerabilities API security - REST, GraphQL, and the common attack vectors around them Knowledge of secure SDLC ...

with SAST, DAST, and SCA tooling - Snyk, Checkmarx, Semgrep, Burp Suite, or similarThreat modelling - comfortable running sessions with engineering and product teamsSolid understanding of OWASP Top 10 and how to actually remediate real-world vulnerabilitiesAPI security - REST, GraphQL, and the common attack vectors around themKnowledge of secure SDLC ...

attack types (e.g. SQL injection, phishing, malware) Experience with log analysis and incident investigation Familiarity with Windows and/or Linux environments Understanding of OWASP Top 10 security risks Ability to work in a fast-paced, incident-driven environment Desirable Security certifications such as CompTIA Security+, GIAC GSEC, or ISC2 ...

attack types (e.g. SQL injection, phishing, malware) Experience with log analysis and incident investigation Familiarity with Windows and/or Linux environments Understanding of OWASP Top 10 security risks Ability to work in a fast-paced, incident-driven environment Desirable Security certifications such as CompTIA Security+, GIAC GSEC, or ISC2 ...

looking for someone with experience in software development and application security, strong coding skills in C/C++, C# or Python, knowledge of OWASP Top 10 risks, Git-based development workflows, and Linux/Windows environments. Experience working with embedded or performance-sensitive systems is a plus. Please apply ...

areas such as: Cyber security audits/assessments Vulnerability management Product or application security Security testing strategy Secure SDLC Risk, controls and remediation planning OWASP principles Reviewing security tooling and processes Translating technical findings into clear business language You don’t need to be a pure pen tester for this ...

direction, embedding automation, and confidently challenging stakeholders and delivery teams. Tech: AWS (Kubernetes), Java/Spring Boot, React, GitLab CI/CD, Playwright, OWASP, Gatling Role: Lead QA strategy and delivery across multiple teams Drive automation and modern QA practices Embed repeatable frameworks and standards Own test planning, risk ...