RoleWeek

OWASP jobs

30 roles posted Oct 21–27, 2026 list OWASP as a skill, from 29 employers. That is 1% of the 5,587 developer roles RoleWeek lists.

A role counts when OWASP is among the up to five technologies RoleWeek read in its posting. Data as of .

30roles list OWASP
29employers posted them
1posted in the last 24 hours
$125K–$200Kmedian posted yearly range, 17 roles

Who is hiring

EmployerRoles
Caris Life Sciences2
AIS1
Allstate1
BisectHosting1
Booz Allen1
Bright Machines1
Champion Foods1
Coinbase1
Compa1
Coupang1

The 10 employers with the most roles, out of 29. One role is one opening, however many places it is listed for.

By level

LevelRolesShare
Mid level1240%
Senior827%
Staff+620%
Manager310%
Director+13%

Level is RoleWeek’s reading of each posting.

What these roles post as salary

17 of these 30 roles list a yearly salary range in US dollars. The median bottom of those ranges is $125K and the median top is $200K; the middle half of the bottoms runs from $100K to $164K, and of the tops from $160K to $213K. These are the ranges employers posted in their own postings: not offers, not what people are paid and not a market average. Posted ranges across all the developer roles RoleWeek lists: Developer salary ranges by city.

Not counted: 10 roles list no salary and 3 list a yearly range in Canadian dollars. Pay by the hour, week or month is never converted or mixed with yearly ranges, and each page uses one currency.

Where the roles are

CityRoles
Remote8
Dallas-Fort Worth6
San Francisco Bay Area3
Seattle2
New York2
Boston2
Vancouver2
Elsewhere in the US & Canada2
Chicago1
Toronto1
Los Angeles1
Washington DC1

A role listed for several cities counts in each. Only cities with 15 or more roles have a page of their own.

Roles that list OWASP

Showing 24 of 30, newest first. Search the roles in this list that mention OWASP

How these counts are made

  • Source: the roles RoleWeek lists as posted in the last 7 days, straight from employers’ own hiring systems. A role counts for a skill when that skill is one of the up to five technologies RoleWeek read in the posting’s title and description (the title first, then the most mentioned). A role that names a skill once among many tools may not list it, so these count the roles that list the skill, not all the roles that touch it.
  • Names are matched exactly: Java is not JavaScript, C++ and C# are not C and not each other, Go is the language (never “go-to-market”) and R is the language. A posting that names a vendor only as its own employer, an investor or a customer does not count for that vendor’s product.
  • One role is one card: an opening listed for several places counts once on a page. A role listed in several cities counts on each city’s page.
  • A skill has a page when 15 or more roles list it, and a city page when 15 or more do there and it is not the same set of roles as the skill’s own page. Practices that are not one technology (CI/CD, Git, microservices, networking) have none.
  • Salaries are only what employers posted, summarised by the rules of the salary pages: yearly ranges only, one currency per page, a median shown with 15 or more roles. The numbers are rebuilt every day.

The full list: All developer roles (5,587 roles posted in the last 7 days). Every skill: developer roles by skill.

Listed together with OWASP

Other skills