26 to 43 of 43 OWASP Jobs in the UK excluding London

communication protocols (e.g.A2A) Familiarity with MCPs for tool and context integration in agentic systems Familiarity with secure‐by‐design development principles (ISO 27001, NIST, OWASP) Experience in pharma/bio tech or highly regulated environments is a plus Contributions to open-source AI/ML projects Soft Skills Delivery-focused ...

following: TDD, automated acceptance testing or BDD or Cucumber, performance and scalability testing with tools such as JMeter, penetration testing knowledge or OWASP, Kubernetes or container orchestration, designing and consuming HTTP APIs, SQL databases such as Postgres, MySQL or MariaDB Experience with 3 or more AWS services including ...

attack types (e.g. SQL injection, phishing, malware) Experience with log analysis and incident investigation Familiarity with Windows and/or Linux environments Understanding of OWASP Top 10 security risks Ability to work in a fast-paced, incident-driven environment Desirable Security certifications such as CompTIA Security+, GIAC GSEC, or ISC2 ...

attack types (e.g. SQL injection, phishing, malware) Experience with log analysis and incident investigation Familiarity with Windows and/or Linux environments Understanding of OWASP Top 10 security risks Ability to work in a fast-paced, incident-driven environment Desirable Security certifications such as CompTIA Security+, GIAC GSEC, or ISC2 ...

grounding in identity and access management: OAuth2, OIDC, SAML, SSO, JWT, MFA Desirable: AWS security services experience (IAM, Cognito, KMS, Secrets Manager) Familiarity with OWASP Top 10 and threat modelling Prior technical leadership or mentorship experience Benefits & Package £80,000-£90,000 salary Hybrid working model (Extremely flexible) Global business ...

manual testing where it delivers the greatest value Provide clear, risk-based recommendations to support release decisions Contribute to security focused testing, including OWASP principles and lightweight threat modelling Help ensure products meet accessibility standards by testing against WCAG guidelines Continuously identify opportunities to improve testing processes, tooling, and overall ...

dynamic working environment. You have an Engineering degree or equivalent experience in Computer Science, Electronics, Telecoms or a related field. Awareness of NIST, OWASP, GCF and UK TSA requirements and how they impact delivery and testing of secure networks Willing to support an on‐call rota as required. Ability ...

guardrails. Nice to have Working familiarity with AI security standards and references such as the NIST AI RMF, ISO 42001, MITRE ATLAS, or the OWASP LLM Top 10. Hands‐on experience with policy‐as‐code and turning standards into enforced controls. Contributions to security standards, frameworks, or industry practice. ...

management. Excellent attention to detail. Adheres to and promotes high standards. Understanding of vulnerability and threat assessment frameworks, such as: CVSS, CVE, CWE,OWASP, MITRE. Operational Technology (OT) management experience in vulnerability scanning. Competent at keeping up to date on CTI (Cyber Threat Intelligence) Desirable Experience with security or compliance ...

developer tooling used inside our own delivery pipelines. Threat modelling and risk Lead threat modelling for applications, APIs and AI features using STRIDE and OWASP methods, supported by appropriate HL TM tooling, driving the resulting mitigations to closure. Assess the security implications of new products, technologies and third-party integrations … sector; mobile application security; software supply chain and secure SDLC; hands-on experience with Amazon Bedrock or comparable managed model platforms; familiarity with the OWASP Top 10 for LLM and Agentic Applications; working knowledge of OWASP ASVS, Top 10 and API Security Top 10. Azure exposure is useful, although ...

manually confirming exploitability beyond what scanners or AI analysis reports. Use Interactive Application Security Testing (IAST) tools for runtime analysis, such as Burp Suite, OWASP ZAP, Frida, applying hands‐on technique to validate and extend automated results. Conduct Static Application Security Testing (SAST) and Software Composition Analysis (SCA) on source … secure coding training and promote a positive security posture. Requirements Have hands‐on experience with DAST, IAST and penetration testing tools (e.g., Burp Suite, OWASP ZAP, Frida), and can manually identify and exploit vulnerabilities beyond what these tools surface automatically. Can demonstrate independent, hands‐on technical ability, for example through ...

C#, MVC, ASP.NET Core, JavaScript, HTML & CSS Experience debugging, profiling and deploying web applications Solid understanding of MVC patterns, ASP.NET controllers & web security (OWASP) Comfortable working with IIS Exposure to frameworks like React, Vue, Angular or Knockout is a plus Degree in Computer Science or related field preferred ...

development experience- Experience with SQL Server or similar relational databases- Experience building web applications using Angular, React, Blazor or similar frameworks- An understanding of OWASP security best practices and secure by design principles- The ability to communicate effectively with technical and non-technical stakeholders- The ability to estimate, prioritise ...

security reviews, threat modeling applications and identifying areas of risk Experience implementing strategies to support secure and compliant architectures Deep understanding of the OWASP Top 10 application security risks and how to address them Expert knowledge of Amazon AWS, Microsoft Azure or other cloud computing platform offerings and security related … experience Nice to Have Experience with assessing and providing recommendations for securing generative AI solutions Working knowledge of the Microsoft Security Development Lifecycle (SDL), OWASP Software Assurance Maturity Model (SAMM), or Building Security in Maturity Model (BSIMM). Familiar with compliance regulations like; ISO, GDPR, SOC2, SOX MS in Cyber ...

issues Lead the pentesting cadence around the core application set by conducting hacking exercises Provide application code reviews against known development frameworks such as OWASP ASVS Provide input into the design of functional and non-functional security controls such as customer authentication workflows Run Security Champion sessions to keep developers … Application Security Understanding of Software Development Life Cycle Desirable Security professional at heart borne froma software engineering background Experience of working with the OWASP ASVS framework Experience in Agile delivery environments Greenfield experience setting up security technologies from scratch Outgoing and able to build relationships with key stakeholders Personal Capabilities ...

Akamai, tuning rules and responding to emerging threats. Review and improve web ingress controls including DDoS mitigation, rate limiting, and certificate management. Apply OWASP principles across the organisation's web applications, working with development teams to identify and remediate vulnerabilities. Lead API security design and governance, ensuring consistent security controls … platforms. Deep hands‐on experience with Microsoft Defender for Cloud, Entra ID, Conditional Access policies, and Azure app registrations. Practical knowledge of API security, OWASP Top 10 remediation, and secure web application design. Experience working embedded in engineering or platform teams within an Agile/DevOps environment. Familiarity with ...

security engineering experience. Proven experience administering Akamai WAAP. Strong knowledge of WAF policy tuning, API security controls and application onboarding. Good understanding of OWASP Top 10 and OWASP API Security Top 10. Knowledge of HTTP/S, REST APIs and application layer attack mitigation. Experience with vulnerability management, Qualys ...

Proven hands-on administration experience of Akamai WAAP including WAF policy tuning, API security controls, application onboarding and security profile management. Strong understanding of OWASP Top 10, OWASP API Security Top 10, HTTP/S, REST APIs and application-layer threat mitigation techniques. Good experience of vulnerability management, Qualys ...