1 to 25 of 55 Remote/Hybrid OWASP Jobs in the UK excluding London

similar security testing tools. Knowledge of SAST, DAST, SCA and vulnerability management. Understanding of cloud-hosted applications, containers and modern architectures. Familiarity with OWASP, ISO27001 and NCSC CAF frameworks. Strong stakeholder engagement and communication skills. Awareness of software supply chain threats, cloud security and emerging AI-related risks. Exposure ...

similar security testing tools. Knowledge of SAST, DAST, SCA and vulnerability management. Understanding of cloud-hosted applications, containers and modern architectures. Familiarity with OWASP, ISO27001 and NCSC CAF frameworks. Strong stakeholder engagement and communication skills. Awareness of software supply chain threats, cloud security and emerging AI-related risks. Exposure ...

segmentation, and host security. Hands on experience with the following security products Trellix, Ivanti, ClearSwift, Yubikey Understanding of secure coding practices and common vulnerabilities (OWASP Top 10, SANS Top 25). Expertise in identity and access management (IAM), including RBAC, ABAC, JWT and Cookie based authentication. Incident detection and response ...

application servers, databases, etc.) and how to leverage them in an assessment Good understanding of web technologies and how they are commonly subverted (e.g. OWASP Top 10) At least a basic understanding of development frameworks (.NET, Java,...) Good understanding of AI-assisted penetration testing capabilities: what level of human ...

Experience delivering large-scale digital transformation programmes. Kubernetes. Terraform. Infrastructure as Code. CI/CD automation and deployment pipelines. Application security best practices, including OWASP Top 10 awareness and secure-by-design principles. Experience within regulated or public-sector environments. Reasonable Adjustments: Respect and equality are core values to us. ...

conducting threat modelling (e.g. STRIDE, attack trees) and risk analysis Strong understanding of security frameworks and best practice such as ISO 27001, NIST, CIS, OWASP, NCSC guidance Experience working in the UK Public Sector and associated security standards and guidance including GovAssure/NCSC CAF, HMG Security Policy Framework. Knowledge ...

practices including CI/CD, source control, automated testing, and Agile delivery methodologies Desirable Skills Working knowledge of industry security frameworks and standards including OWASP Top 10, MITRE ATT&CK, NIST Cybersecurity Framework, OAuth 2.0, OpenID Connect, and SAML Experience supporting Security Operations, Incident Response, SOC, or breach modeling activities ...

practices including CI/CD, source control, automated testing, and Agile delivery methodologies. Desirable Skills: Working knowledge of industry security frameworks and standards including OWASP Top 10, MITRE ATT&CK, NIST Cybersecurity Framework, OAuth 2.0, OpenID Connect, and SAML. Experience supporting Security Operations, Incident Response, SOC, or breach modeling activities. ...

Desirable Technical Skills Experience with any of the following would be advantageous: Test Automation: Playwright, Selenium, JUnit, Cucumber/Gherkin Performance & Security Testing: Gatling, OWASP ZAP, SonarQube Accessibility Testing: Axe, WAVE, WCAG Development & Testing Tools: WireMock, GitHub Copilot, OpenAPI Cloud & Infrastructure: AWS, Docker, Kubernetes, Microservices Contract Details Rate ...

Comfortable learning new languages, tools and observability technologies as required. Nice to Have: Experience with AWS or GCP; GraphQL, gRPC or REST API design; OWASP and GDPR; or mobile and web performance optimisation. MEASURES & GOALS: (HOW WILL THE SUCCESS OF THE PERSON IN THIS POSITION BE MEASURED – WHAT ...

frameworks including Selenium, Cypress, Postman, or REST Assured. Familiarity with performance testing tools such as k6, JMeter, Gatling, or NeoLoad. Understanding of DevSecOps principles, OWASP, SAST/DAST, SonarQube, and Snyk. Active SC Clearance is essential. What's on Offer: Hybrid working from Telford. Opportunity to deliver critical government ...

MySQL Amazon RDS Amazon Aurora MariaDB CI/CD and build pipeline automation Tooling including: Helm Terragrunt Git ArgoCD Government cloud security standards: NIST OWASP CIS NCSC BASH scripting Python development RESTful microservices IT Service Management (ITSM) Leadership & Product Management Proven ability to lead teams in the design, implementation, administration ...

achieving alignment across multiple product portfolios and stakeholder group**Desirable Skills** * Working knowledge of application and API security concepts, including common vulnerability classes (e.g., OWASP Top 10) and attack techniques (e.g., MITRE ATT&CK)* Experience implementing or integrating security mechanisms such as authentication, authorization, and identity based access controls within ...

/CD, automated testing, code quality controls, observability, incident diagnosis, reliability engineering and DevSecOps practices. Knowledge of application security, identity and access management, OWASP guidance, threat modelling, privacy by design and relevant compliance requirements. Experience producing high‐quality architecture artefacts, including context and container views, integration diagrams, data‐flow diagrams ...

achieving alignment across multiple product portfolios and stakeholder group. Desirable Skills Working knowledge of application and API security concepts, including common vulnerability classes (e.g., OWASP Top 10) and attack techniques (e.g., MITRE ATT&CK). Experience implementing or integrating security mechanisms such as authentication, authorization, and identity based access controls ...

threat landscape They need a working knowledge of AI-specific attack techniques and should be fluent in the reference frameworks, mainly the OWASP Top 10 for LLM Applications and MITRE ATLAS. Key threats include: Direct and indirect prompt injection Data and model poisoning Sensitive data leakage through prompts and outputs ...

/CD)oPair programmingoCode reviewsoVersion control systems such as Git \n \n \n Knowledge of application security principles and common vulnerabilities, including the OWASP Top 10. \n \n \n Experience working within agile, multidisciplinary teams. \n \n \n A proactive approach to learning new technologies and sharing knowledge with colleagues. ...

/CD)oPair programmingoCode reviewsoVersion control systems such as Git \n \n \n Knowledge of application security principles and common vulnerabilities, including the OWASP Top 10. \n \n \n Experience working within agile, multidisciplinary teams. \n \n \n A proactive approach to learning new technologies and sharing knowledge with colleagues. ...

NoSQL databases and ORM's. Good development experience with any contemporary web application framework. Strong experience delivering solutions within an Agile environment. Knowledge of OWASP and web security best practices. Solid experience with source code management, e.g., git. Using unit test frameworks (e.g., moq) and knowledge of TDD. Experience with ...

MySQL compatible DBs: MySQL, RDS, Aurora, MariaDB Build Pipeline automation, CI/CD Build Tooling: Helm, Terragrunt, Git, ArgoCD Government Cloud Security standards (NIST, OWASP, CIS, NCSC etc...) BASH, Python RESTful microservices IT Service Management #J-18808-Ljbffr ...

review code and communicate security issues clearly to developers, primarily within a C# ecosystem, with exposure to Java or Python Strong knowledge of the OWASP Top 10 and practical mitigation patterns Experience implementing or improving SAST/DAST processes: tool tuning, triage workflows, and reducing signal to noise Working understanding ...

Experience working with security monitoring, vulnerability management and incident response processes. Scripting or automation experience using Python, JavaScript, C# or similar . Familiarity with OWASP, ISO27001 and NCSC CAF frameworks. Exposure to Palo Alto Cortex XDR/Cloud Security would be advantageous. Experience of GCP environments is desirable. What ...

Experience working with security monitoring, vulnerability management and incident response processes. Scripting or automation experience using Python, JavaScript, C# or similar . Familiarity with OWASP, ISO27001 and NCSC CAF frameworks. Exposure to Palo Alto Cortex XDR/Cloud Security would be advantageous. Experience of GCP environments is desirable. What ...

code with Terraform or Bicep, and PowerShell or Python to automate controls and response. Working knowledge of AKS and container security, and of the OWASP Top 10. Clear written communication: runbooks, incident reports and remediation plans that engineers and managers can act on. Desirable: Monitoring a multi‐tenant SaaS platform ...

Understanding of CI/CD pipelines and deployment strategies. Familiarity with feature toggling and A/B testing. Awareness of security best practices (e.g., OWASP Top 10). Interest in mentoring junior developers or apprentices. What do you get in return? 25 days annual leave rising to 30 5% pension ...