About the role
Strong practical knowledge of the OWASP Top 10 and common web application attack vectors. Deep understanding of securing modern web applications, REST APIs, authentication and authorisation mechanisms (OAuth2, OIDC, JWT). Experience implementing and managing SAST, DAST, SCA, API security and penetration testing programmes. Experience automating security controls within CI/CD pipelines and software delivery processes. Strong knowledge of secure software engineering practices and secure-by-design…