22 of 22 Penetration Testing Jobs in Scotland

Security Consultant (Penetration Testing) Location: Hybrid (UK) Salary: Competitive + Benefits Security Clearance: Current SC preferred About Citation Cyber Citation Cyber is one of the UK's leading cyber security consultancies, delivering penetration testing, Cyber Essentials certification, consultancy, training and managed cyber security services to organisations … across both the public and private sectors. As an NCSC CHECK provider and CREST member company , we're continuing to grow our penetration testing team and are looking for a talented Security Consultant to join us. Whether you're already a CHECK Team Member ...

Since being acquired by Nomios in late 2024, Dionach by Nomios has continued its dynamic growth as a leading information security company. Specializing in penetration testing and information assurance services, we offer an incredible opportunity to be part of an experienced team, build your skills, and grow professionally. … application process, let us know, and we'll work to meet your needs. What You'll Do Lead and mentor a team of Penetration testers, fostering a collaborative and high-performance work environment. Lead and oversee complex infrastructure penetration tests ensuring that they are conducted thoroughly ...

storage, networks and virtualisation, helping to protect critical systems. It's a hands-on assurance role combining technically advanced security assessments, ethical hacking and penetration testing with risk management, remediation planning and senior stakeholder engagement. You will advise complex projects on security requirements, translate technical findings into clear … with project teams, senior management and stakeholders, providing security briefings, technical guidance and input into system requirements. Plan and lead technically advanced security assessments, testing and reporting within agreed governance and timescales. Perform ethical hacking and penetration testing against internal systems using tools such as Kali Linux ...

looking for a Senior Security Engineer to join Point-in-Time Security Testing, AWS's expert security assurance function for the launches and architectures where security automation alone is not enough. You will be a technical leader on a team, owning complex security testing engagements … massive scale, and businesses from start-ups to large enterprises and governments run their most sensitive workloads on it. Point-in-Time Security Testing takes on the security engagements where the architecture, threat model, or potential impact is complex enough that expert reasoning matters most. We start from ...

leadership, innovative thinking, curiosity, and existing deep technical expertise to help Quorum Cyber close the distance between AI speed and efficiency, and human insight. Penetration testing, API and web application testing, and red teaming are delivered the traditional way: a skilled human, a scope document, a fixed … agent-building are both non-negotiable. Offensive security depth Around 7 years hands-on, including at least 4 delivering client-facing engagements. Network testing: external and internal, Active Directory attack paths, privilege escalation, lateral movement, post-exploitation. Web and API testing: the OWASP Top 10 and, more importantly ...

Citation Cyber seeks a Security Consultant (Penetration Testing) to join our hybrid UK team, delivering a range of security assessments across client environments and producing clear reports with remediation recommendations. Essential experience includes consultancy pentest work, strong reporting, Windows/Linux/AD knowledge, cloud security testing ...

Citation Cyber is seeking a Security Consultant (Penetration Testing) to join our expanding team. You'll deliver a range of security assessments across client environments, identifying vulnerabilities and helping strengthen cyber resilience in hybrid UK engagements. The role requires experience in infrastructure and web app testing, reporting ...

Since being acquired by Nomios in late 2024, Dionach by Nomios has continued its dynamic growth as a leading information security company. Specializing in penetration testing and information assurance services, we offer an incredible opportunity to be part of an experienced team, build your skills, and grow professionally. … required. Candidates must be eligible to work in the UK and willing to undergo the necessary vetting processes. What You'll Do Conduct penetration tests across various environments, including web applications, APIs, Cloud, and network infrastructure. Issue detailed reports outlining findings, risks, and recommendations for remediation. Translate complex technical ...

technology, AI and data privacy risks, in accordance with the firm's risk management framework.* Lead the firm's information risk assurance programme, including penetration testing, security and cyber resilience exercises, and other assurance activities across infrastructure, cloud services, applications, identity and access, data flows and third parties. … communicated clearly, with proportionate action taken where exposures require improvement.* **High-quality assurance:** The information risk assurance programme provides useful, evidence-based insight through penetration testing, security and cyber resilience exercises, and other targeted assurance activity.* **Strong governance:** Information risk frameworks, policies, ISO 27001 arrangements and reporting remain ...

Penetration Tester Programme - No Experience Required This is a self-funded career programme with a guaranteed job on completion or 100% of your course fees back Train. Certify. Get Hired. Are you looking to start a career in Penetration Testing but don't know where to begin ...

Penetration Tester Programme - No Experience Required This is a self-funded career programme with a guaranteed job on completion or 100% of your course fees back Train. Certify. Get Hired. Are you looking to start a career in Penetration Testing but don't know where to begin ...

Penetration Tester Programme - No Experience Required This is a self-funded career programme with a guaranteed job on completion or 100% of your course fees back Train. Certify. Get Hired. Are you looking to start a career in Penetration Testing but don't know where to begin ...

Penetration Tester Programme - No Experience Required This is a self-funded career programme with a guaranteed job on completion or 100% of your course fees back Train. Certify. Get Hired. Are you looking to start a career in Penetration Testing but don't know where to begin ...

Hardening - Proactive and risk-based vulnerability management, including attack surface reduction, system hardening, remediation support, and cloud security posture improvement. You will also coordinate penetration testing and security assessments, and drive the findings through to remediation. Automation and Continuous Improvement - Reduce manual effort across security operations through automation … Defender alerts. Microsoft Sentinel, including writing and tuning your own KQL queries, analytic rules, and workbooks. Microsoft Entra ID and Conditional Access policy design, testing, and troubleshooting. Microsoft Purview, Intune security controls, email security, and endpoint detection and response. Automation. Practical experience of removing manual effort from security operations ...

Assess and advise on risks relating to LLMs, Agentic AI, RAG architectures, prompt injection, data poisoning, model theft, and AI supply chain threats. Define penetration testing scope and collaborate closely with testing teams to validate security controls and remediation activities. Act as a trusted security advisor ...

Dionach by Nomios is seeking an experienced Lead Penetration Tester to guide a skilled team across web, mobile, internal and infrastructure tests. You will lead on-site engagements and act as the CHECK authority, delivering detailed reports and remediation guidance. Applicants should have extensive pen-testing experience, strong ...

security requirements to meet compliance standards and industry best practices.Perform security code reviews and act as a technical SME for engineering and compliance teams.Security Testing & DevSecOpsDeploy and manage automated security tools (SCA/SBOM, SAST, DAST, Secret Scanning) within CI/CD pipelines.Apply manual network/application testing …/CD pipelines.Software Engineering: Hands-on development experience, specifically in Go and C#.Standards & Frameworks: Knowledge of NIST, ISO 27001, CIS, and OWASP (ASVS/Testing Guides).Desirable QualificationsAdvanced Technical Skills: Deep vulnerability research, exploit R&D, manual pentesting (cloud/web/embedded/mobile), SIEM/logging platforms ...

meet compliance standards and industry best practices. Perform security code reviews and act as a technical SME for engineering and compliance teams. Security Testing & DevSecOpsDeploy and manage automated security tools (SCA/SBOM, SAST, DAST, Secret Scanning) within CI/CD pipelines. Apply manual network/application testing … pipelines. Software Engineering: Hands-on development experience, specifically in Go and C#.Standards & Frameworks: Knowledge of NIST, ISO 27001, CIS, and OWASP (ASVS/Testing Guides). Desirable QualificationsAdvanced Technical Skills: Deep vulnerability research, exploit R&D, manual pentesting (cloud/web/embedded/mobile), SIEM/logging platforms ...

threat intelligence Reviewing security designs for technology change, cloud services and business-led solutions Leading security investigations, threat hunting and incident response activities Managing penetration testing, attack simulations and remediation programmes Evaluating security controls across identity, endpoint, cloud, data protection and email security Conducting third-party ...

emerging best practices for securing AI-enabled applications, specifically managing the risks of AI agents, MCPs, and APIs. Forward-looking understanding of threat modeling, penetration testing and vulnerability management, specifically how these functions are changing with the introduction of AI. Demonstrate executive presence; can immediately establish credibility with ...

Cyber Resilience Act (CRA).* Secure Development Lifecycle (SDL) practices.* Security certification frameworks such as PSA Certified, SESIP, or Common Criteria.* Vulnerability management, penetration testing, or security assessments.* Hardware/software security co-design.* Artificial Intelligence and AI security.**Creating Secure Connections and Infrastructure for a Smarter World ...

What you’ll bring to the role: 3-5 years of experience directly in Cybersecurity related fields (Hunt, Intelligence, Detection Engineering, Blue Teaming, Pen testing, Incident Response, SOC Operations, Cyber Risk) or relevant educational experience. Ability to work with customers, gather requirements and distil them into complete solutions. Detailed ...