226 to 250 of 489 Penetration Testing Jobs in the UK

4. Technical Collaboration & Support Collaborate closely with technical teams to embed "security by design" into software development and cloud architecture. Manage vulnerability management frameworks, penetration testing cycles, and threat modeling exercises, ensuring timely remediation of findings. Cross-Functional Collaboration: Exceptional ability to forge and sustain relationships across organisational ...

network and host-based artifacts. Experience with IR and Forensics tools, packet inspection tools Security Engagement & Best Practice: Work alongside the company’s independent penetration testing program. Work closely with other technical and business departments to mitigate security/cyber risk: Implement SOPs and refine processes. Identify potential ...

Javelin Global Commodities in London seeks a Penetration Tester & AI Security Engineer to join the Infrastructure team. You will identify vulnerabilities across infrastructure, applications and AI-enabled solutions, and work with cross-functional teams to remediate and strengthen security controls. The role combines traditional penetration testing with … security testing, secure AI development and client-facing security assessments. Full-time, based in the London office near Victoria. #J-18808-Ljbffr ...

Penetration Tester/CHECK Team Member £45-55k + Benefits Remote UK Client-site testing as required An established and growing UK cyber security consultancy is expanding its technical security team and is looking for a CHECK Team Member to support penetration testing engagements across ...

vulnerabilities that are genuinely exploitable and partnering closely with engineering teams to resolve them. You will also define our approach to threat modelling, security testing and the integration of security guardrails into our CI/CD pipelines. You will join a small, collaborative Information Security team based across London … across our SDLC and CI/CD pipelines, embedding secure delivery as the default Build and maintain pipeline security guardrails, including static application security testing (SAST), software composition analysis (SCA), secrets scanning, and infrastructure-as-code (IaC) and container image scanning, with gating policies agreed with Engineering Strengthen software ...

identity, email, network, cloud, data and backup environments. Using techniques including breach and attack simulation, purple teaming, posture monitoring, attack surface management and detection testing to assess whether controls are deployed, configured correctly and operating effectively. Defining security control metrics and risk indicators, using evidence from control validation … major technology change. Shaping security architecture across AI and agentic technologies, zero trust and identity, Azure, AWS and GCP, DevSecOps and data security. Overseeing penetration testing and offensive assurance activity, working with CHECK or CREST-accredited providers and incorporating red and purple team activity into the wider assurance ...

identity, email, network, cloud, data and backup environments. Using techniques including breach and attack simulation, purple teaming, posture monitoring, attack surface management and detection testing to assess whether controls are deployed, configured correctly and operating effectively. Defining security control metrics and risk indicators, using evidence from control validation … major technology change. Shaping security architecture across AI and agentic technologies, zero trust and identity, Azure, AWS and GCP, DevSecOps and data security. Overseeing penetration testing and offensive assurance activity, working with CHECK or CREST-accredited providers and incorporating red and purple team activity into the wider assurance ...

software boundaries Review and influence system, hardware and software architectures, including secure communication flows, trust boundaries and attack surfaces Coordinate with customers, suppliers, penetration testers, external assessors and certification authorities Review Cybersecurity Requirements Specifications, security concepts and architecture documents to identify potential vulnerabilities across design, integration, testing, production … over-the-air updates Support vulnerability assessments using methods such as Attack Tree Analysis, STRIDE, DREAD, vulnerability scanning, penetration testing coordination and fuzz testing Job Requirements: Significant hands-on experience in cyber security engineering within the automotive, marine, industrial, machinery, aviation, aerospace or related sectors Engineering experience ...

infrastructure. You’ll lead the implementation and management of SIEM systems, Fortinet security tools, and endpoint detection & response (EDR) while conducting vulnerability assessments and penetration testing to stay ahead of cyber threats. You’ll enhance identity and access management (IAM) by maintaining Active Directory, Entra ...

senior non-technical stakeholders. Experience using programming languages such as Python, Java or C++. Hands-on experience with security assessment tools, vulnerability management and penetration testing methodologies. Understanding of regulatory and compliance requirements such as GDPR, PCI DSS and SOC 2. Industry-recognised cloud or security certifications, such ...

senior non-technical stakeholders. Experience using programming languages such as Python, Java or C++. Hands-on experience with security assessment tools, vulnerability management and penetration testing methodologies. Understanding of regulatory and compliance requirements such as GDPR, PCI DSS and SOC 2. Industry-recognised cloud or security certifications, such ...

network and host-based artifacts. Experience with IR and Forensics tools, packet inspection tools Security Engagement & Best Practice: Work alongside the company's independent penetration testing program. Work closely with other technical and business departments to mitigate security/cyber risk: Implement SOPs and refine processes. Identify potential ...

security of the infrastructure from the implementation of new systems through to the maintenance and monitoring of existing/legacy systems Work to organise Penetration Testing from organisation through to remediation, ensuring all are assigned adequate prioritisation and expertise to resolve Define, plan, implement, maintain, and upgrade security ...

risk basis and driving delivery with the Platform and IT teams Develop and oversee our external attack surface management capability Coordinate infrastructure and external penetration testing, from scoping through to tracking remediation to closure Detection and incident response Own the SIEM platform, including log source onboarding, the development ...

risk basis and driving delivery with the Platform and IT teams Develop and oversee our external attack surface management capability Coordinate infrastructure and external penetration testing, from scoping through to tracking remediation to closure Detection and incident response Own the SIEM platform, including log source onboarding, the development ...

nmap, Wireshark etc. Some experience with any scripting tools, such as Python, Bash, PowerShell Understanding of Windows and Linux Operating Systems Some understanding of penetration testing tools and techniques Strong understanding of TCP/IP and underlying network protocols Knowledge of current trends and developments in information technology ...

rota. Desirable skills and experience Threat hunting, detection-rule development, alert tuning, malware analysis or digital forensics experience. Knowledge of vulnerability and exposure management, penetration-testing remediation and security-control assurance. Knowledge of ISO 27001/27002, Cyber Essentials Plus, MITRE ATT&CK or comparable security frameworks. Relevant ...

rota. Desirable skills and experience Threat hunting, detection-rule development, alert tuning, malware analysis or digital forensics experience. Knowledge of vulnerability and exposure management, penetration-testing remediation and security-control assurance. Knowledge of ISO 27001/27002, Cyber Essentials Plus, MITRE ATT&CK or comparable security frameworks. Relevant ...

Multi-Factor Authentication, Privileged Identity Management and Zero Trust principles. Support Cyber Essentials Plus, ISO 27001, DSPT and NHS security compliance activities. Participate in penetration testing, security audits, incident response and root cause analysis. Promote cyber security awareness and best practice across the organisation. Drive innovation through automation ...

complex multi-supplier or multi-team environment, as an architect rather than an assessor. Experience conducting or coordinating technical security reviews and penetration testing in UK public sector contexts, including remediating findings and briefing senior technical stakeholders. Working knowledge of exposure management beyond CVE-only approaches — incorporating misconfiguration ...

before moving into security. Credibility with engineers and the ability to ship fixes, not just file tickets.Offensive security background (web/API or cloud penetration testing, exploit development, CTFs) used to inform defensive design.Experience securing multi-tenant SaaS at scale, including tenant isolation and EU data residency requirements.Experience ...

Penetration Testing Engineer, you will be conducting security assessments, working within our wider offensive security team, playing a key role in identifying and advising on technical findings across Nationwide’s estate. You will be joining a growing team of dedicated and like-minded individuals where you will … expected to work independently and proactively to ensure that penetration tests are completed successfully, and the findings are understood by key stakeholders. You will have demonstrable experience in delivering penetration tests from scoping through to reporting and post-test triage activity. You will be able to perform tests ...

enthusiastic security consultant to join our team. Working alongside some of the best hacking minds in the country, you will be delivering pen testing services to a diverse range of clients, from presales through to delivery and debriefs. We are looking for a consultant with a minimum … years’ experience in pen testing who can deliver the following: Web application testing API testing External & Internal Infrastructure testing (including build reviews) Mobile application testing (including knowledge of standards such as OWASP MASVS) Experience testing in any of the following areas is also desirable ...

This is a fantastic opportunity for an experienced penetration tester to move into an internal role with a leading financial services firm. The role offers variety across Penetration Testing (WebApp, Infrastructure – internal and external, and Cloud) along with involvement in Purple Teaming and Red Teaming engagements. ...

Senior and Principal level Consultants. Working within a defence-focused environment, you will deliver threat‐led security assessments, adversary emulation activities and advanced security testing for customers operating within complex and high‐assurance environments. You will emulate realistic cyber threats, assess the effectiveness of security controls and provide actionable … full list of our company benefits please visit our website. What you’ll bring Experience delivering red team, adversary simulation or advanced penetration testing activities. Relevant certifications relating to red teaming. Strong technical skills in one or more of the following areas: initial access, cloud exploitation, malware development ...