1 to 25 of 191 Penetration Testing Jobs in London

Looking For We are seeking a Senior Penetration Testing Engineer to join State Street's Penetration Testing Team, reporting to the Penetration Testing Team Manager. This role sits within the Threat Intelligence and Assurance organization and is a deeply technical engineering position with strong … hands-on expectations. You will serve as a subject matter expert in application penetration testing, executing detailed assessments and contributing to the design and oversight of network penetration testing performed in partnership with third-party providers. The focus of this role is on building and applying ...

This role, within the Penetration Testing team, will be responsible for vendor management for third-party penetration testing delivery while owning the delivery excellence agenda across the program—governance, performance, and quality assurance. The role is the primary coordination point between Penetration Testing and the wider strategic functions and governance forums, supporting program-level governance oversight and alignment to Penetration Testing strategy. This is not a hands-on penetration testing role; it is a service delivery, governance, and commercial role with a strong technical and strategy focus. Success ...

This role, within the Penetration Testing team, will be responsible for vendor management for third-party penetration testing delivery while owning the delivery excellence agenda across the program-governance, performance, and quality assurance. The role is the primary coordination point between Penetration Testing and the wider strategic functions and governance forums, supporting program-level governance oversight and alignment to Penetration Testing strategy. This is not a hands-on penetration testing role; it is a service delivery, governance, and commercial role with a strong technical and strategy focus. Success ...

position is performing technical security risk assessments , translating identified risks into security requirements, reviewing and validating solution designs, and defining appropriate security testing requirements. This is not a SOC or purely operational security role. We are looking for experienced security professionals who can understand complex technical solutions, identify security … solutions. Translate security architecture, policies, risks and controls into clear functional and technical security requirements . Define and advise on the design, implementation and testing processes required to protect information systems and assets. Embed Secure by Design principles throughout the technology delivery lifecycle. Contribute to architectural and solution design ...

Cyber Security Consultant (Penetration Tester) Department: Cyber Employment Type: Permanent - Full Time Location: City, London Compensation: £45,000 - £55,000/year Description Moore Kingston Smith is seeking an experienced Cyber Security Consultant specialising in penetration testing to join our client-facing advisory team. You will join … team within our Risk Advisory practice, supporting a diverse portfolio of clients across multiple sectors. This is a hands‐on role focused on delivering penetration tests across web applications, APIs, and internal and external network infrastructure. You will also support Cyber Essentials Plus assessments and wider technical security reviews ...

Senior Penetration Tester Remote - Client Travel Required £60,000 - £65,000 VIQU are partnered with a leading Cyber Security Consultancy is looking for an experienced Senior Penetration Tester to join its team. You'll deliver end-to-end penetration testing engagements, work directly with clients … contribute to the development of technical capabilities. Key Responsibilities: Deliver penetration tests from scoping through to reporting and client debrief. Conduct testing across web applications, APIs, infrastructure, networks, cloud and mobile environments. Produce high-quality technical reports and present findings to clients. Support engagement scoping, proposals and client ...

align with security, regulatory and business requirements. Conduct and support threat modelling, risk assessments and vulnerability assessments. Provide technical oversight and recommendations for security testing and penetration testing activities. Support vulnerability management activities, helping teams prioritise and remediate security risks. Collaborate with architects, engineers, testers and assurance … effectively. Essential Skills & Experience Significant experience in one or more of the following areas: Security Architecture Security Engineering Cloud Security Network Security Application Security Penetration Testing Strong understanding of modern cyber threats, attack techniques and security risks. Experience applying secure-by-design principles across enterprise environments. Strong knowledge ...

join our team. Working alongside our experienced team of specialists, you’ll be delivering offensive security services including digital footprint reconnaissance, social engineering, penetration testing and vulnerability assessments and more to high profile clients across all industries. The purpose of this role is to deliver our offensive security … services including digital footprint reconnaissance, social engineering, vulnerability assessments, penetration testing, threat modelling, cyber-attack simulation exercises, and more to high profile clients across all industries. You’ll benefit from ongoing coaching, career mentoring, and be supported by our career pathway. You will have an opportunity to continue ...

supporting: Secure software development practices across our client Security integration into CI/CD pipelines (GitLab) Reduction of vulnerabilities through automated scanning and testing Assurance of internet-facing applications through structured penetration testing activities What you will do Provide security architecture expertise for application security and DevSecOps … software development, aligned to our clients Secure by Design principles Support the integration of security controls into CI/CD pipelines (GitLab), including automated testing and policy enforcement Design and implement application security controls, including: Static Application Security Testing (SAST) Dynamic Application Security Testing (DAST) Software Composition ...

person. In Technology, we’re asking that you attend the office a minimum of 1 day per week. About the Role As an experienced Penetration Tester at Starling, you’ll be joining an established team, working with talented cyber security professionals to ensure our services are designed, developed … operated securely. This is a collaborative role - you’ll directly interact with multiple areas of the business to understand requirements, conduct research, perform security testing, and report issues aligned to our risk framework. Being an internal tester, you’ll gain a strong understanding of how technology works at Starling ...

person. In Technology, we're asking that you attend the office a minimum of 1 day per week. About the RoleAs an experienced Penetration Tester at Starling, you'll be joining an established team, working with talented cyber security professionals to ensure our services are designed, developed and operated … securely. This is a collaborative role - you'll directly interact with multiple areas of the business to understand requirements, conduct research, perform security testing, and report issues aligned to our risk framework. Being an internal tester, you'll gain a strong understanding of how technology works at Starling ...

practices across ColtSecurity integration into CI/CD pipelines (GitLab)Reduction of vulnerabilities through automated scanning and testingAssurance of internet-facing applications through structured penetration testing activitiesWhat you will doProvide security architecture expertise for application security and DevSecOps, supporting standards and best practices across the software development lifecycleContribute … secure software development, aligned to Colt's Secure by Design principlesSupport the integration of security controls into CI/CD pipelines (GitLab), including automated testing and policy enforcementDesign and implement application security controls, including: Static Application Security Testing (SAST)Dynamic Application Security Testing (DAST)Software Composition Analysis ...

J.P. Morgan is seeking a Penetration Testing Vendor Management Lead to own delivery excellence across third-party testing programs. This governance and commercial role supports program-level oversight, working with Penetration Testing and wider governance forums. You will bridge product, engineering, procurement and finance, coaching ...

Team) to join a client on a short-term contract basis. This is an excellent opportunity for a hands-on security professional with strong penetration testing experience to support a variety of security assessment activities across enterprise systems and applications. Key Responsibilities Conduct penetration testing … technical reports and remediation recommendations Work closely with technical and project teams to improve security posture Support risk assessments and security assurance activities Ensure testing activities align with industry standards and best practices Essential Skills & Experience Demonstrable experience delivering penetration testing engagements Strong understanding of infrastructure, network ...

ability to judge their severity and impact to the business, and to articulate that risk clearly to both engineers and senior stakeholders Strong penetration testing skills, primarily focusing on web application penetration testing experience and security research, including the ability to identify logic flaws, chained vulnerabilities … bounty processes is a strong plus Experience in Information Security or a related field, with demonstrable hands-on work in vulnerability assessment, penetration testing, or security engineering. At Apple, we're not all the same. And that's our greatest strength. We draw on the differences ...

Type II, ISO 27001, Cyber Essentials Plus, and NIST 800-53 Embed DevSecOps and secure SDLC practices into CI/CD pipelines Oversee penetration testing, red teaming, and threat modeling across core infrastructure Serve as the technical security authority in customer procurement reviews, vendor risk assessments, and defense … Cyber Essentials Plus, and NIST 800-53 Experience embedding DevSecOps and secure SDLC practices into CI/CD pipelines Experience overseeing penetration testing, red teaming, and threat modeling Experience with customer procurement reviews, vendor risk assessments (DDQs), and defense customer evaluations Experience building and managing incident response, continuous ...

client, a leading technology business specialising in cybersecurity and penetration testing, is seeking an AI Software Engineer to join its permanent, fully remote team in the UK. This senior-level role focuses on building intelligent AI agents that can plan, reason, operate security tooling and identify exploitable vulnerabilities … within controlled environments. Key Responsibilities: Design, build and deploy AI agents that automate penetration testing, including planning, tool use and reasoning over security findings Develop sandboxed cyber-lab and range infrastructure using containers and Kubernetes Deliver AI features from initial design through to production, including evaluations, guardrails ...

J.P. Morgan is seeking a Program Governance Lead for Penetration Testing to coordinate vendor management and delivery excellence across the program. This role focuses on governance, strategy, and commercial aspects, not hands-on testing. The successful candidate will operate across vendor relationships, reporting structures, and cross-functional governance … forums to ensure consistent outcomes and alignment with the Penetration Testing strategy. #J-18808-Ljbffr ...

operational technology (OT), embedded systems, relevant international cyber security standards and regulations (including ISO/SAE 21434, UNECE R155, UNECE R156, and ISO 26262), penetration testing methodologies, and the broader transport ecosystem. In addition to technical delivery, the individual will play a key role in supporting business development … Road Vehicle Cybersecurity Engineering) UNECE R155 (Cyber Security Management System) UNECE R156 (Software Update Management System) ISO 26262 (Functional Safety) Conduct or support penetration testing, vulnerability assessments, architecture reviews, risk assessments, and Threat Analysis and Risk Assessments (TARA) for automotive clients. Provide expert interpretation of cyber security requirements ...

Penetration Tester DGH Recruitment are currently recruiting on behalf of a leading client in the Accountancy industry who require a Penetration Tester to join the firm in London. Key Responsibilities: * Lead and support penetration testing engagements across web applications, APIs, and internal and external network infrastructure. … Work with clients to define objectives, agree scope and rules of engagement, and plan testing that meets their assurance needs. * Apply manual and tool-assisted testing techniques aligned with recognised methodologies and frameworks, including the OWASP Web Security Testing Guide, PTES, and MITRE ATT&CK. * Deliver Cyber ...

Penetration Tester - Cloud Security, Active Directory, APIs Market Rate (Inside IR35) 6 Months initially Hybrid in London A client of mine is looking for a hands-on Penetration Tester to support their cybersecurity function, with some responsibilities across security operations and incident response. The right candidate will have … experience conducting infrastructure, Web Application, API, Cloud and Active Directory penetration tests within complex environments. Key Requirements: Proven commercial experience as a Penetration Tester, within a large enterprise environment. Strong hands-on Penetration Testing experience across Web Applications, APIs, infrastructure, Active Directory and cloud environments. Proven ...

office] Position Type: Full-Time Role Overview The Product, Application and Offensive Security Engineer is responsible for embedding security directly into the design, development, testing, and operation of DTS products and platforms. This is a hands-on security engineering role. The role requires someone who can work directly with … product and engineering teams, review designs, assess APIs, run threat models, test systems, coordinate penetration testing, identify vulnerabilities, and help teams remediate issues. The role ensures DTS products, APIs, data collaboration capabilities, AI-enabled workflows, and client-facing services are designed, built, and tested securely. It also owns ...

traceability between cyber risks, regulatory requirements and implemented controls. Define control objectives and collaborate with technical teams to develop implementation guidance, testing criteria and evidence requirements. Support the continuous enhancement of the control environment in response to emerging threats, incidents, audits and lessons learned. Provide leadership and direction … identifying weaknesses, gaps or degraded controls and recommending corrective action. Evaluate control effectiveness against current and emerging cyber threats. Track the outcomes of control testing activities, including penetration testing, vulnerability assessments and security exercises, ensuring identified actions are progressed to completion. Governance, Reporting & Stakeholder Engagement Attend governance ...

using SIEM/EDR data and MITRE ATT&CK‐aligned techniques. Support vulnerability assessment and security scanning activities using relevant tools. Provide input into penetration testing activities and interpret findings for remediation. Deliver training, coaching, and knowledge transfer to enhance the existing cybersecurity team's skills in CrowdStrike … enterprise environments. Experience supporting or working alongside managed SOC providers. At least 2 years’ experience in vulnerability assessment tools (desirable). Exposure to penetration testing and web application security testing (desirable). Expert‐level experience with CrowdStrike Falcon (Prevent, Insight, Discover). Strong expertise in Splunk, including ...

that supports how our engineering teams build and operate complex systems at scale. Take the next step in your career. Role As a Penetration Tester, you will lead and conduct penetration tests and vulnerability assessments across a wide range of internal systems and security controls. Your work will … directly strengthen our overall security posture through continuous testing, actionable insights and collaboration on remediation strategies. Responsibilities Perform in-depth penetration testing across a variety of technologies, including Kubernetes, Jenkins and Windows Domain Services. Deliver practical, impactful remediation advice to Control Owners based on identified vulnerabilities. Support ...