You have a good knowledge of DevOps and IaC concepts You have a good understanding of cloud based security (e.g. ISO27001, NIST, CIS, OWASP, SOC2) and Identity and Access Management (IAM) within Azure You're familiar with ARM templates and/or Pulumi You have automation and scripting (PowerShell or more »
which matches the best, whilst ensuring compliance to regulatory requirements, company policy and standards. Experience with information security management frameworks (NIST, PCI, GDPR, ISO, OWASP, ITIL, ISF SoGP, COBIT) is essential. The role will involve supporting project managers in risk and issue management Creation, review, and approval of documentation such more »
with the development team. Preferred qualifications, capabilities and skills Knowledge of penetration testing techniques Knowledge of tools used in the security industry (e.g. Burp, OWASP ZAP) Python, Ruby, Go or a similar language that can help you aid in the implementation of automation tooling Experience with IT risk management operating more »
Reading, Berkshire, United Kingdom Hybrid / WFH Options
Project People
to regulatory requirements, company policy and standards. Should have experience of using common information security management frameworks, such as NIST, PCI, GDPR, ISO Series, OWASP the IT Infrastructure Library (ITIL), the ISF Standards of Good Practice (SoGP) and ISACA's Control Objectives for Information and related Technology (COBIT) frameworks. The more »
M.Inst.ISP, CISA by a recognised professional body Technical certifications by a recognised professional body in network or systems engineering Fundamental Cloud Concepts for AWS. OWASP Top 10: API Security Playbook. Ways of Working This role is based out of our London Bridge office. Our hybrid model way of working offers more »
Reading, England, United Kingdom Hybrid / WFH Options
Areti Group
outcomes with external partners, including resolving conflicts arising from changing priorities. · Familiarity with common information security management frameworks like NIST, PCI, GDPR, ISO Series, OWASP, ITIL, ISF Standards of Good Practice (SoGP), and ISACA’s Control Objectives for Information and related Technology (COBIT) frameworks. Areti Group – Carbon positive tech recruitment more »
Farnborough, Hampshire, South East, United Kingdom
Spectrum IT Recruitment
as defined and required by the ISMS Policies. Candidate Profile In Depth knowledge of ISO 27001 standards Knowledge of ISO31000 & ISO22301. Good knowledge of OWASP and NCSC Experience of working within an InfoSec focused role. Able to solve problems identified through audit, risk assessment or incidents. Proven experience in implementing more »
hardening cloud-based services e.g. M365, Azure, Salesforce Experience working withing global standards and best practices such as ISO27001, CIS Controls, Cyber Essentials and OWASP Benefits: Salary up to £85,000 depending on experience Bonus up to 20% Additional benefits package Please Note: This is a permanent role for UK more »
hardening cloud-based services e.g. M365, Azure, Salesforce Experience working withing global standards and best practices such as ISO27001, CIS Controls, Cyber Essentials and OWASP Benefits: Salary up to £85,000 depending on experience Bonus up to 20% Additional benefits package Please Note: This is a permanent role for UK more »
City of London, London, United Kingdom Hybrid / WFH Options
Nigel Frank International
hardening cloud-based services e.g. M365, Azure, Salesforce Experience working withing global standards and best practices such as ISO27001, CIS Controls, Cyber Essentials and OWASP Benefits: Salary up to £85,000 depending on experience Bonus up to 20% Additional benefits package Please Note: This is a permanent role for UK more »
City of London, London, United Kingdom Hybrid / WFH Options
Nigel Frank International
hardening cloud-based services e.g. M365, Azure, Salesforce Experience working withing global standards and best practices such as ISO27001, CIS Controls, Cyber Essentials and OWASP Benefits: Salary up to £85,000 depending on experience Bonus up to 20% Additional benefits package Please Note: This is a permanent role for UK more »
Central London, London, United Kingdom Hybrid / WFH Options
Big Red Recruitment Ltd
of Linux, Nginx, MySQL, PHP, Composer, and Vue.js. (PHP and Vue.js not essential). Experience with tools such as New Relic, Cloudflare, Alert Logic, OWASP ZAP, Burp Suite, and penetration testing. Skills in incident response management and stakeholder communication. If you feel this exciting opportunity is for you, please apply more »
control and associated procedures. Hands-on experience performing application static/dynamic security and penetration assessment with tools such as – SonarQube, CheckMarx, AppScan, BurpSuite, OWASP ZAP Proxy, WebInspect, Fortify, Veracode, Nessus etc. Familiarity with different types of security vulnerabilities and tools for countermeasure Experience with any high-level programming language. more »
penetration testing, and remediation. Strong knowledge of vulnerability scanning tools such as Nessus, Qualys, or similar. Understanding of industry frameworks and standards, such as OWASP, NIST, and CVSS. Ability to analyze and interpret vulnerability data to prioritize and address risks effectively. Excellent communication skills, with the ability to convey complex more »
Greater London, England, United Kingdom Hybrid / WFH Options
Thomson Keene
Vulnerability management environments Considerable experience using Vulnerability Management tools Experience with WebApplicationSecurity frameworks Knowledge of framework & methodologies such at CVSS, CIS Benchmarking, OWASP, MITRE, etc. Nice to have: Knowledge of software development methodologies such as DevSecOps & Secure Architecture Hands on knowledge of tools such as BurpSuite, Metasploit, Nmap more »
with experience in: Extensive Cyber Security background working Assurance, Compliance, Consultant based roles. Strong experience working with Security policies and frameworks (e.g. ISO27001, NIST, OWASP, CIS, JSP's) Experience working with central government clients on classified programmes of work Must have active eDV (UK**) Clearance Our client is looking to more »
Wakefield, West Yorkshire, Yorkshire, United Kingdom Hybrid / WFH Options
Circle Group
with RESTful APIs and integrating backend services In-depth experience with security, form validation, XSS prevention, database security, session management, input validation and other OWASP guidelines Proven experience in developing scalable web applications using Laravel and other web technologies Strong problem-solving skills and the ability to work both independently more »
XHTML Experience building software in Java using Spring. Experience creating secure multi-tier software solutions including avoidance and mitigation patterns for current and previous OWASP top-10 Demonstrable experience tuning both application/algorithmic and SQL query performance. Experience working with relational databases and efficient data design and access (ORM more »
London, England, United Kingdom Hybrid / WFH Options
Parkopedia
Commercial experience with AWS and IaC (Terraform/CDK/CloudFormation) Applicable understanding of API security, common exploits and secure development practices, including the OWASP Top 10 Benefits Parkopedia is committed to building a great work environment for all our employees. Here are just a few of the benefits that more »
London, Mayfair, United Kingdom Hybrid / WFH Options
Big Red Recruitment Midlands Limited
of Linux, Nginx, MySQL, PHP, Composer, and Vue.js. (PHP and Vue.js not essential). Experience with tools such as New Relic, Cloudflare, Alert Logic, OWASP ZAP, Burp Suite, and penetration testing. Skills in incident response management and stakeholder communication. If you feel this exciting opportunity is for you, please apply more »
London, England, United Kingdom Hybrid / WFH Options
Parkopedia
APIs Commercial experience with AWS and IaC (Terraform/CDK/CloudFormation) Understanding of API security, common exploits and secure development practices, including the OWASP Top 10 Strong MySQL competencies, familiarity with design patterns, ORM tools, performance tuning and administration/troubleshooting in a replicated environment Solid understanding of testing more »
architecture, dev-sec-ops, and network security. Experience in browser security or mobile app security is desirable. Good understanding of industry standards such as OWASP ASVS, OWASP Top-10, CIS benchmarks. Hands-on experience with complex Azure and AWS architectures with an emphasis on containerised workloads. Command-line/API more »
Greater London, England, United Kingdom Hybrid / WFH Options
Oliver Bernard
a deep understanding of webapplicationsecurity vulnerabilities, attack vectors, and mitigation strategies. Master the art of penetration testing with tools like Burp Suite, OWASP ZAP, and/or Kali Linux. Experience with secure coding practices, threat modeling, and API security is highly desirable. Are a skilled communicator and collaborator more »
Mirfield, England, United Kingdom Hybrid / WFH Options
Forensic Testing Service - Drug, Alcohol and DNA Testing & Expert Reporting
and deploying production systems to the web. Contributions to OSS on your git. Cyber security awareness, experience of secure app design and mitigating the OWASP top 10. Experience of working with large and complex codebases. Experience of working directly with non-technical end-users to understand requirements, design solutions, provide more »