51 to 75 of 158 Penetration Testing Jobs in London

technical and non-technical audiences. A structured and considered approach to solving complex problems, including during security incidents. Desirable Requirements Experience of security testing and vulnerability management, including penetration testing or code review. Experience developing or improving IT security policies, processes and standards. Audit, compliance or governance ...

global scanning programme. Prioritise remediation based on business impact - ensuring our systems and infrastructure remain resilient. Security Validation & Pentesting Pentest Ownership: Own the global Penetration Testing schedule, ensuring all critical outward-facing assets (website, head office, stores) are tested regularly. Continuous Testing: Implement and oversee Continuous Security … Testing or Attack Surface Management tools to identify vulnerabilities in real-time as our digital footprint scales. Remediation Management: Don’t just "pass the report" to IT; work with the Engineer and Developers to validate fixes and ensure that high-risk findings are closed out within agreed SLAs. Governance ...

security advice throughout the development lifecycle, so they can ship quickly and safely Own our secure development and secure coding standards, and coordinate penetration testing across the delivery lifecycle Run threat modelling on the highest‐risk work, and set up the approach and training so teams … grounding in secure software development, including threat modelling, secure coding, awareness of common application security risks such as the OWASP Top 10, automated security testing and running penetration tests Practical experience across vulnerability management, identity and privileged access, data security, and software supply‐chain practices such as SBOMs ...

Information Security Team. Key responsibilities The key tasks and responsibilities include, but are not limited to, the following: Conduct thorough Red Team offensive penetration testing on our IT (on prem and cloud) infrastructure to identify vulnerabilities and provide recommendations for remediation. Perform security assessments on cloud-based applications … ensuring they adhere to industry standards and best practices. Execute red team exercises to simulate real-world attack scenarios, testing the firm's detection and response capabilities both internal and external. Assess and test the security of internally deployed infrastructure IoT devices and sensors, identifying potential vulnerabilities and ensuring ...

optimise detection rules, correlation logic, security monitoring content, and custom indicators. Identify and address detection gaps uncovered during incident investigations. Support purple-team exercises, penetration testing activities, and security control validation exercises. Transform findings into actionable improvements to CyberOne's detection and response capabilities. Client-Focused Incident Response ...

privilege, contextual access control and segmentation of services, users and devices Defining and reviewing security assurance activities, including design assurance, verification, validation, vulnerability assessment, penetration testing inputs and interpretation of assurance evidence Developing and communicating corporate and domain information security policy, standards, guidelines and design guardrails Identifying ...

network and host-based artifacts. Experience with IR and Forensics tools, packet inspection tools Security Engagement & Best Practice: Work alongside the company’s independent penetration testing program. Work closely with other technical and business departments to mitigate security/cyber risk: Implement SOPs and refine processes. Identify potential ...

current operating systems i.e., Windows Server 2016-2019, Windows 10, Mac OS and Linux Microsoft Policy & Security – GPO’s, Patching (WSUS), Defender Antivirus & Firewall Penetration Testing exposure/awareness Experience performing technical analysis involving security event data and evaluating malicious activity Knowledge of TCP/IP and related … systems Liaise with the infrastructure team to maintain a secure environment Assist infrastructure/team lead in ongoing and new projects Conduct cyber incident testing Assisting with the development and implementation of security policy, standards, guidelines, and procedures to ensure ongoing improvement and maintenance of security posture Maintaining documentation ...

security Strong knowledge of security protocols and standards including OAuth2, OIDC, SAML, PKI, and PSD2 SCA Proven expertise in threat modelling, security architecture reviews, penetration testing, and vulnerability assessments specifically for IAM systems and APIs Experience with AWS security services and cloud security best practices, including IAM policies … security groups, encryption, HSMs, and key management Solid understanding of secure coding practices, security testing automation, and integration with CI/CD pipelines Some other highly desirable skills include: Hands-on experience securing Ping Identity platforms (PingGateway, PingAM, PingIDM) is a plus Experience in using AI-assisted security scanning ...

five years, such as operating-system hardening, CI/CD, pipelines, SDLC, CDK, GitOps, DevOps or Agile delivery, Docker, Kubernetes, serverless technologies, Helm, penetration testing, Snowflake, MongoDB, Terraform Cloud, GitHub, or Databricks. Essential Skills Strong analytical ability, diligence, and attention to detail. Adversarial mindset and effective problem-solving ...

multi-factor authentication, conditional access and privileged access management. Security monitoring: Logging, SIEM tools and managed detection and response services. Vulnerability management: Vulnerability scanning, penetration testing and remediation planning. Security architecture: Assessing proposed designs and ensuring security is Embedded into technology changes and new projects. Desirable Experience Experience ...

cyber incident tabletop exercises. Developing realistic incident scenarios, injects and exercise objectives. Evaluating exercise performance and producing post‐exercise reports and recommendations. Red Team, penetration testing or adversary simulation experience. Python, PowerShell or scripting for investigation and automation. Experience delivering cyber security consultancy services to external customers. Experience ...

want to work, collaboratively across teams, functions, and skillsets towards a shared goal. You advise, enable, and persuade. You do not gatekeep. Strongly preferred Penetration testing knowledge or experience. Application, infrastructure and cloud, red teaming, and beyond. We're interested in the perspective it gives … approach to application security is forwarding tool output to engineering teams with a due date attached, this is not the role. A pure offensive-testing career path. Offensive perspective is valuable here; full-time offensive work is coordinated separately. A GRC or auditor background. GRC is a separate function ...

understand Appreciation of the wider roles of interconnecting Cyber Security teams and collaboration with each of those (i.e. Forensics/Threat Intelligence/Penetration Testing/Vulnerability Management/“Purple Teaming” etc) Management, Communication and Process Skills: Experience with communicating technical topics both in writing and verbally ...

incident-response processes, coordinating technical response when required and ensuring lessons learned lead to measurable improvements. Work with teams on security assessments, threat modelling, penetration testing and control reviews, turning findings into practical remediation plans. Increase automation across security operations to improve coverage, consistency and response times. ...

security operations. Review security architecture, solution designs and material technology changes to identify security risks, control gaps and attack paths. Challenge vulnerability prioritisation, penetration testing findings, severity ratings, remediation plans and risk treatment decisions. Review privileged access, identity controls, service accounts, workload identities, secrets management, exceptions and compensating ...

with engineers on threat modelling, architecture reviews and secure design for new AI and document-processing features Operate and automate our vulnerability management, security testing, secrets management, access controls, logging and detection capabilities Maintain and exercise our incident response programme, including playbooks, simulations, investigations and continuous learning Coordinate independent … penetration testing and represent Crimson's security posture in customer security reviews Maintain the controls and evidence supporting Crimson's SOC 2 Type II attestation and enterprise customer requirements Embed practical security guidance and tooling into a fast-moving engineering environment What we're looking for Strong hands ...

help improve how vulnerability handling works as the volume grows. Your responsibilities Review incoming reports from external researchers, bug bounty and vulnerability disclosure programmes, penetration tests, AI-assisted testing platforms, and internal security assessments Validate findings: check the affected asset, reproduce the issue where safe and appropriate … impacting detail, internal infrastructure information, credentials, screenshots, logs, and exploit chains Your key competencies 5+ years of previous experience in vulnerability triage, application security, penetration testing, security operations, or a closely related security role Ability to understand and validate technical vulnerability reports, including incomplete, unclear, automated, or poorly ...

with meaningful careers. ROLE SUMMARY: This opportunity within the Offensive Security Operations team is a crucial role for the management of vulnerability discovery, offensive testing and remediation activities across the group which protects the business from sophisticated cyber threats! The role holder will work with our 3rd party vendors … plan and facilitate our testing programmes ensuring they run efficiently. The programmes in scope for the role include: Regulatory Threat Intelligence Led Pen Testing (TLTP) and Red teaming Bug Bounty Continuous External Attack Surface Management Active Directory security posture management Any programme launched in the future aimed ...

technical reports and executive summaries for stakeholders Stayup to date with the latest exploits, vulnerabilities (CVEs), and threatactor tactics Requirements Required Skills Strongproficiency in penetration testing tools (e.g., Kali Linux, BurpSuite, Metasploit, Nmap, Wireshark) Experiencewith OWASP Top 10 , vulnerability scanning, and exploit development Familiaritywith MITRE ATT&CK framework … communication skills Atleast one industry certification (OSCP, CEH, CREST CRT, or similar) Desired Skills Scriptingskills in Python, PowerShell, or Bash Experiencewith cloud security testing (AWS, Azure, GCP) Familiaritywith CI/CD environments and DevSecOps Exposureto purple teaming or adversary emulation Knowledgeof physical security and social engineering tactics Competitivesalary + ...

need to improve, and working directly with engineering and leadership to make those improvements happen. You'll turn findings from security tooling, audits, penetration tests, and engineering reviews into clear actions with owners and deadlines, and follow them through to remediation or explicit risk acceptance. You’ll also … integrations, ensuring controls, tests, alerts, and underlying data remain accurate and actionable. Vulnerability management. Own vulnerability management across applications and infrastructure, including triage, remediation, penetration testing, and escalation of critical issues. Secure engineering and access. Work with engineering on secure software delivery, change management, IAM, privileged access, environment ...

security incidents and breaches. Act as the escalation point for major incidents, leading investigations and coordinating response and mitigation efforts. Drive security assessments, including penetration testing, vulnerability assessments, and risk evaluations, to identify and address weaknesses within National Highways' infrastructure and applications. Champion continuous improvement and enhancements ...

technology change. Ensure security requirements are embedded within project, change and delivery lifecycles through secure-by-design principles and threat-led risk assessments. Oversee penetration testing, technical security assessments and vulnerability assurance activities, ensuring identified risks are appropriately assessed and managed. Provide cyber security expertise and advice ...

Security Operations Centre (SOC), Security Incident Response Team (SIRT), Security Information and Event Management (SIEM), Threat & Vulnerability Management, Identity & Access Management, Data Loss Prevention, Penetration Testing are well embedded and managed through either the UK in-house team, Group or externally sourced services. Implement (and maintain) clear ...

cybersecurity and engineering teams.**Experience & Qualifications:*** 10+ years in cybersecurity, including 5+ years of hands-on coding, alongside deep expertise in threat modeling, pen testing, code reviews, and offensive security methodologies.* Strong foundation in network protocols (IP, DNS, HTTP, SSL/TLS), cryptography (PKI, encryption at rest/ ...