276 to 300 of 592 Penetration Testing Jobs in the UK

solutions. Support security incident detection, investigation, and response alongside the SOC and Red Team. Threat & Vulnerability Management Perform regular security assessments, vulnerability scans, and penetration tests, prioritizing remediation efforts. Develop automated remediation for common security risks and misconfigurations. Monitor and analyze security logs and alerts, fine-tuning detections …/SOAR, network security, and automation tools. Familiarity with scripting (Python, PowerShell) and infrastructure-as-code (Terraform, Ansible). Deep understanding of vulnerability management, penetration testing, and security hardening. Knowledge of SOC processes, incident response, and forensics. Strong grasp of zero-trust architectures, identity security, and secure DevOps ...

software development lifecycle, including secure design reviews, threat modelling, secure coding standards, dependency scanning, SAST/DAST tooling, secrets management, application/API penetration testing, vulnerability remediation tracking and release security governance. Support DORA‐related client and contractual obligations for EU financial services customers, including ICT risk management … evidence, incident response and notification processes, resilience testing, ICT third‐party risk controls, subcontractor oversight, exit planning and audit evidence. Provide security governance over cloud and SaaS environments, including identity and access management, logging and monitoring, encryption, key management, backup, tenant segregation, environment segregation, secure configuration and cloud security ...

Location: UK (Remote) Experience: 1–3 years About the Role: We’re looking for a Penetration Tester to join our clients growing cybersecurity team. You’ll conduct network, web, and application security testing for a range of clients, helping identify vulnerabilities and strengthen defences. Key Responsibilities Deliver high … quality penetration tests and vulnerability assessments. Produce clear, actionable reports and remediation guidance. Support engagements and collaborate with senior testers. Stay current with new exploits, tools, and testing techniques. Requirements 1–3 years’ experience in penetration testing or offensive security. OSCP Strong technical understanding of attack ...

vulnerabilities, aligned with criticality-based policy enforcement.Prioritise weaknesses in IT infrastructure and applications using manual and automated methods, including results from Static Application Testing (SAST) and Software Composition Analysis (SCA) tooling (in conjunction with the Service Transition team).Influence stakeholders to prioritise and drive remediation of process and technology … Teams, and IT Risk to ensure controls are met and vulnerabilities are addressed across infrastructure and applications.Engage and support Cyber Security for remediation of penetration test findings.Engage with Internal and External Auditors as the SME on all matters relating to VM.Stakeholder Engagement & CultureAct as the primary Service Matter Expert ...

vulnerabilities, aligned with criticality-based policy enforcement. Prioritise weaknesses in IT infrastructure and applications using manual and automated methods, including results from Static Application Testing (SAST) and Software Composition Analysis (SCA) tooling (in conjunction with the Service Transition team).Influence stakeholders to prioritise and drive remediation of process … Risk to ensure controls are met and vulnerabilities are addressed across infrastructure and applications. Engage and support Cyber Security for remediation of penetration test findings. Engage with Internal and External Auditors as the SME on all matters relating to VM.Stakeholder Engagement & CultureAct as the primary Service Matter Expert ...

Cyber Security Testing Lead Milton Keynes, Hybrid (up to 2 days per week in the office) Permanent offering up to £70 000 + Bonus Scheme Shape the Future of Security Testing! Are you an experienced cyber security professional who enjoys the technical side of penetration testing and vulnerability management, but wants to move beyond purely hands-on testing? This is an opportunity to lead and mature a sec click apply for full job details ...

Hardening - Proactive and risk-based vulnerability management, including attack surface reduction, system hardening, remediation support, and cloud security posture improvement. You will also coordinate penetration testing and security assessments, and drive the findings through to remediation. Automation and Continuous Improvement - Reduce manual effort across security operations through automation … Defender alerts. Microsoft Sentinel, including writing and tuning your own KQL queries, analytic rules, and workbooks. Microsoft Entra ID and Conditional Access policy design, testing, and troubleshooting. Microsoft Purview, Intune security controls, email security, and endpoint detection and response. Automation. Practical experience of removing manual effort from security operations ...

Excellent communication skills with the ability to work closely with developers and technical stakeholders Desirable Experience with: Vulnerability research/exploit development Manual penetration testing Cloud, web, embedded or mobile security Splunk/OSQuery AI/ML security Distributed systems AWS Security Specialty, OSCP, CISSP, CCSP, CCAK ...

scale and bespoke to the organisation.Oversee security within network architecture, encryption protocols, and identity/access management for restricted environments.Direct cyber security audits and penetration testing across defence platforms and supply chains.Provide cyber security training and awareness programs tailored to defence staff and contractors.Collaborate with engineering ...

bespoke to the organisation. Oversee security within network architecture, encryption protocols, and identity/access management for restricted environments. Direct cyber security audits and penetration testing across defence platforms and supply chains. Provide cyber security training and awareness programs tailored to defence staff and contractors. Collaborate with engineering ...

resolved within agreed SLAs. Coordinate vulnerability management activities, driving remediation across infrastructure, applications and cloud services. Conduct security assessments, technical reviews and support penetration testing programmes. Support and maintain the Information Security Management System (ISMS), including ISO 27001 and Cyber Essentials Plus compliance activities. Perform risk assessments ...

Threat Management Owning the end-to-end vulnerability management lifecycle, from scanning and validation through to prioritisation, remediation and reporting. Managing internal and external penetration testing and working with Engineering teams to resolve findings. Identity, Cloud & Technical Security Assuring Identity and Access Management controls including MFA, privileged access ...

with business priorities. Our commitment to security and quality is reinforced by our ISO27001 and ISO9001 certifications (UKAS), as well as our CREST approved penetration testing and SOC capabilities. Additionally, we are an IASME Cyber Essentials Certification Body and Cyber Essentials Plus certified. Find out more about ...

network, cloud, memory, and email forensics, incident response including the technical management of high‐profile security incidents, threat hunting and analysis, web application security, penetration testing, leading red and/or blue teaming exercises, and open‐source intelligence (OSINT). This role requires a logical, pragmatic, meticulous, analytical ...

place within NEC which ensures that our accreditations are maintained, the role will contribute to this by supporting the arrangement of security testing, producing remediation plans and driving the remediation of identified vulnerabilities with the wider business support teams to improve the security posture of our environments.The Security Manager … from customersProduce and maintain security assurance documentation required for accreditationEnsure compliance with relevant security standards, service management procedures, regulations, and industry best practicesSchedule security testing and create remediation plans from the test reports- seeing remediation through to completion. Contribute to process documentation and policy review. Conduct security assessments ...

reported vulnerabilities.Key Responsibilities:Serve as an application security subject matter expert who provides guidance to internal teamsWork closely with development teams, perform code reviews, penetration tests, and architectural reviews on existing codes and new features.Develop, implement, and communicate vulnerability mitigation strategies to development teamsHandle externally reported vulnerabilities … member of Corporate Information Security Responsible Disclosure Program committee. Drive Fortinet static and dynamic application security testing program.Develop strategies, evaluate solutions, design and implement tools, processes and controls to ensure that security and privacy are designed in Fortinet applicationsAdvise development teams on SDLC best practices.Proactively research new attack vectors ...

vulnerabilities. Key Responsibilities: Serve as an application security subject matter expert who provides guidance to internal teamsWork closely with development teams, perform code reviews, penetration tests, and architectural reviews on existing codes and new features. Develop, implement, and communicate vulnerability mitigation strategies to development teamsHandle externally reported vulnerabilities … member of Corporate Information Security Responsible Disclosure Program committee. Drive Fortinet static and dynamic application security testing program. Develop strategies, evaluate solutions, design and implement tools, processes and controls to ensure that security and privacy are designed in Fortinet applicationsAdvise development teams on SDLC best practices. Proactively research ...

risk appetite. Support the deployment of cloud-based services, predominantly within Azure environments. Work with technical teams to validate security control effectiveness. Assist with penetration testing and IT Health Check scoping activities. Review security findings and provide practical remediation guidance. Contribute to security standards, patterns and architecture documentation. … Azure security services, identity management and cloud-native security controls. Exposure to threat modelling and risk assessment methodologies. Understanding of security assurance and controls testing activities. Excellent stakeholder engagement and communication skills. Desirable Skills & Certifications CISSP, CISM, SABSA or TOGAF Azure or AWS cloud certifications Knowledge of PKI, Encryption ...

privilege, contextual access control and segmentation of services, users and devices Defining and reviewing security assurance activities, including design assurance, verification, validation, vulnerability assessment, penetration testing inputs and interpretation of assurance evidence Developing and communicating corporate and domain information security policy, standards, guidelines and design guardrails Identifying ...

privilege, contextual access control and segmentation of services, users and devices Defining and reviewing security assurance activities, including design assurance, verification, validation, vulnerability assessment, penetration testing inputs and interpretation of assurance evidence Developing and communicating corporate and domain information security policy, standards, guidelines and design guardrails Identifying ...

solutions Experience of threat intelligence Leadership and mentoring experience and skills Understanding of low-level concepts including operating systems and networking Commercial experience in Penetration Testing and/or Security Monitoring Understanding of networking and infrastructure design Knowledge/experience of one or more System administration (Linux, Windows ...

load for engineering teams, and improve release velocity. What You’ll Do Design, develop, and maintain CI/CD pipelines to automate software builds, testing, and releases. Build and maintain internal tooling to support the software development lifecycle (e.g., code quality analysis, dependency management, automated testing). Collaborate … maintain infrastructure as code (IaC) for internal development environments. Work closely with development teams to troubleshoot and resolve issues related to build processes, testing, and deployments. Coordinate penetration testing, code/virus scanning, and disseminate findings to the engineering team for resolution. Measure performance and environment ...

incidents - Implement and manage SAST/SCA tooling across application repositories to identify source code risks - Scale automated DAST solutions across applications to maximise testing coverage - Carry out penetration testing on internally developed applications Required Skills/Experience: - Experienced in application security focussing on red, blue ...

both Senior and Principal level Consultants.Working within a defence-focused environment, you will deliver threat-led security assessments, adversary emulation activities and advanced security testing for customers operating within complex and high-assurance environments. You will emulate realistic cyber threats, assess the effectiveness of security controls and provide actionable … while also wanting to influence how a capability develops and matures over time.Core areas (must have):Experience delivering red team, adversary simulation or advanced penetration testing activities.Relevant certifications relating to red teaming.Strong technical skills in one or more of the following areas: initial access, cloud exploitation, malware development ...

Senior and Principal level Consultants. Working within a defence-focused environment, you will deliver threat-led security assessments, adversary emulation activities and advanced security testing for customers operating within complex and high-assurance environments. You will emulate realistic cyber threats, assess the effectiveness of security controls and provide actionable … also wanting to influence how a capability develops and matures over time. Core areas (must have): Experience delivering red team, adversary simulation or advanced penetration testing activities. Relevantcertifications relating tored teaming. Strong technical skills in one or more of the following areas: initial access, cloud exploitation, malware development ...