26 to 50 of 73 OWASP Jobs in the UK excluding London

cloud environments Knowledge of Windows and Linux/Unix security Understanding of IAM, encryption, PKI and TLS Knowledge of web security principles, including OWASP Top 10, WAF and API security Experience with vulnerability management, patching and security remediation Knowledge of the MITRE ATT&CK Framework and common attack techniques Experience ...

design leadership. Deep understanding of AWS security, hybrid cloud design, and modern DevSecOps principles. Strong knowledge of frameworks such as NIST, ISO 27001, OWASP, and CIS. Experience designing and implementing secure, compliant PCI‐DSS solutions. Solid grounding in tools and technologies like SIEM, IDS/IPS, DLP, endpoint protection ...

appropriate tools. Familiarity with Continuous Security, Continuous Integration and Continuous Delivery practices. Solid understanding of network security (OSI, TCP/IP), web application security (OWASP) and cryptographic controls (PKI, TLS). Track record in managing, mentoring and coaching team members, with a passion for people development. Excellent communication skills, able ...

comfortable translating technical complexity into clear decisions, and confident working with stakeholders at all levels. You understand frameworks like NIST, ISO 27001, CIS, OWASP etc., and ideally have experience designing or supporting PCI compliant environments. You’re hands‐on with tools such as SIEM, IDS/ ...

Reporting* SOC – Experienced in Security Ops, Incident Response, Threat Hunting, Malware/Forensic Analysis* WebApps – Experienced in WebApp DevSecOps best practices, WebApp scanning for OWASP top 10.* Good understanding of GRC strategies and tools, Threat Intelligence, SIEMs, XDR, ICS/OT security* Relevant industry certifications: CISSP, CEH, CCNP, Public Cloud ...

execution strategies Familiarity with observability tools (Application Insights, Azure Monitor) Exposure to performance testing tools (k6, JMeter,NBomber) Awareness of security testing principles (e.g. OWASP, SAST, dependency scanning) Why us? At The Openwork Partnership, we're a dynamic, fast paced, and growing business with huge ambition. This is all made ...

GitOps and infrastructure as code experience at scale CI/CD pipeline automation experience Extensive experience with declarative orchestration and configuration management Knowledge of OWASP Top 10 CI/CD Security Risks and embedding security controls into delivery pipelines Experience mentoring engineers, leading technical initiatives or acting as a technical ...

working knowledge of DevOps and SRE (CI/CD, logging, monitoring, alerting), plus AWS or Azure Good working knowledge of relevant security concerns (e.g. OWASP Top 10) Strong coaching, communication, and stakeholder management skills Ability to work autonomously, manage your time well, and switch context frequently in a remote setting ...

working knowledge of DevOps and SRE (CI/CD, logging, monitoring, alerting), plus AWS or Azure* Good working knowledge of relevant security concerns (e.g. OWASP Top 10)* Strong coaching, communication, and stakeholder management skills* Ability to work autonomously, manage your time well, and switch context frequently in a remote setting ...

assessment, remediation tracking and risk‐based prioritisation. Understanding of common attack techniques, security monitoring, incident response and recognised application security risks such as the OWASP Top 10. Good understanding of the NIS/NIST Cybersecurity Framework (NIST CSF) and its practical application to identifying, protecting, detecting, responding to and recovering ...

tools. Experience with Continuous Security, Continuous Integration and Continuous Delivery techniques. Experience of network security (e.g. OSI, TCP/IP), web application security (e.g. OWASP) and cryptographic controls (e.g. PKI, TLS). We are passionate about developing people a demonstrated ability in managing, mentoring and coaching members of your team ...

DDoS mitigation, web proxy, vulnerability management) Understanding of Information Security principles, frameworks and regulatory requirements (e.g. ISO27001, FCA, PRA, ICO) Working knowledge of OWASP Top 10 and build/integration tools (e.g. Maven, Jenkins, Chef, TFS) Effective communication skills, including the ability to explain technical concepts and impacts ...

following: Web Application Security Infrastructure Security Cloud Security API Security Mobile Security Strong understanding of common vulnerabilities and exploitation techniques, including the OWASP Top 10 and network security fundamentals whilst possessing the ability to communicate technical findings clearly in both written reports and verbal discussions. Practical experience with industry-standard ...

dedicated focus and to grow with the role as we build our product security capability. Familiarity with recognised standards, frameworks or certifications such as OWASP, CSSLP, ISO 27001 or similar would be helpful. Experience in a product, platform or SaaS business. Experience in high-trust, regulated or mission-critical environments ...

dedicated focus and to grow with the role as we build our product security capability. Familiarity with recognised standards, frameworks or certifications such as OWASP, CSSLP, ISO 27001 or similar would be helpful. Experience in a product, platform or SaaS business. Experience in high-trust, regulated or mission-critical environments ...

dedicated focus and to grow with the role as we build our product security capability. Familiarity with recognised standards, frameworks or certifications such as OWASP, CSSLP, ISO 27001 or similar would be helpful. Experience in a product, platform or SaaS business. Experience in high-trust, regulated or mission-critical environments ...

well architected, maintainable and uses appropriate design patterns and SOLID principles.* Accountable to ensure team code quality, security and testability is high e.g. SonarQube, OWASP* Working with product management to provide technical solutions to meet product requirements and delight our customers.* Managing, leading and developing a team of engineers ...

working with API Gateway products (Google Apigee, Azure APIM) Containers and Container Orchestration - Docker, Kubernetes & OpenShift Continuous Integration Pipelines Git, Jenkins, Azure AKS Security (OWASP, Certificates, JWT, Encryption techniques) Knowledge, understanding and experience of software delivery methodologies and the application of them using tools like JIRA, Confluence, Gitlab and Jenkins ...

practices Awareness of authentication, authorisation, identity and access management, data protection or network security Experience considering security within software design and development Knowledge of OWASP, threat modelling or risk assessment would be advantageous Package & Benefits Salary up to £55,000 Bonus Comprehensive health, welfare and wellbeing benefits Hybrid working Opportunity ...

design principles. Experience deploying and managing containerised applications and environments. Familiarity with cyber security frameworks and standards, including: NIST Cyber Security Framework Cyber Essentials OWASP IEC 62443 EU Cyber Resilience Act (CRA) UK Product Security and Telecommunications Infrastructure (PSTI) requirements Desirable Experience Operational Technology (OT) and manufacturing environment experience. Knowledge ...

deduplication and timeout handling. Protocols and security: Understand HTTP/1.1, HTTP/2 and HTTP/3, HTTPS, CORS, preflight requests, secure headers, OWASP Top 10 risks including XSS, CSRF and injection, plus OAuth 2.0, OIDC, SSO, MFA and secure Bearer token management. Performance, state and data Performance: Reduce ...

delivering client-facing engagements. Network testing: external and internal, Active Directory attack paths, privilege escalation, lateral movement, post-exploitation. Web and API testing: the OWASP Top 10 and, more importantly, what it misses, meaning business logic flaws, authentication and session weaknesses, and multi-step chains. Red teaming: objective-based operations ...

parties, including conflict resolution due to changing priorities. Experience of using common information security management frameworks, such as NIST, PCI, GDPR, ISO Series, OWASP the IT Infrastructure Library (ITIL), the ISF Standards of Good Practice (SoGP) and ISACA’s Control Objectives for Information and related Technology (COBIT) frameworks. Actively represent ...

whilst promoting compliance with Government security guidance to internal stakeholders. What you bring: Knowledge of security frameworks and standards such as ISO 27001, NIST, OWASP, MITRE. Experience of performing risk assessments, providing recommendations for meeting the security requirements of systems and information systems so that they remain compliant with internal ...

assessing security controls across cloud environments, APIs, CI/CD pipelines, identity services and data platforms. Working knowledge of relevant guidance, such as OWASP guidance for LLM and agentic applications, MITRE ATLAS and cloud-provider AI security guidance. Ability to participate in incident response and product security operations as required. ...