276 to 300 of 528 Penetration Testing Jobs

enthusiastic security consultant to join our team. Working alongside some of the best hacking minds in the country, you will be delivering pen testing services to a diverse range of clients, from presales through to delivery and debriefs. We are looking for a consultant with a minimum … years’ experience in pen testing who can deliver the following: Web application testing API testing External & Internal Infrastructure testing (including build reviews) Mobile application testing (including knowledge of standards such as OWASP MASVS) Experience testing in any of the following areas is also desirable ...

load for engineering teams, and improve release velocity. What You’ll Do Design, develop, and maintain CI/CD pipelines to automate software builds, testing, and releases. Build and maintain internal tooling to support the software development lifecycle (e.g., code quality analysis, dependency management, automated testing). Collaborate … maintain infrastructure as code (IaC) for internal development environments. Work closely with development teams to troubleshoot and resolve issues related to build processes, testing, and deployments. Coordinate penetration testing, code/virus scanning, and disseminate findings to the engineering team for resolution. Measure performance and environment ...

incidents - Implement and manage SAST/SCA tooling across application repositories to identify source code risks - Scale automated DAST solutions across applications to maximise testing coverage - Carry out penetration testing on internally developed applications Required Skills/Experience: - Experienced in application security focussing on red, blue ...

Assess and advise on risks relating to LLMs, Agentic AI, RAG architectures, prompt injection, data poisoning, model theft, and AI supply chain threats. Define penetration testing scope and collaborate closely with testing teams to validate security controls and remediation activities. Act as a trusted security advisor ...

proactive threat hunting to catch what existing controls miss Build and refine detection use cases, playbooks, and operational procedures Support vulnerability management, security testing, and control validation (including penetration testing coordination and phishing simulations) Produce clear technical reports and root-cause analysis following incidents and investigations ...

roleJob Title: Application Security EngineerJob Summary: Designs, implements, and operates security controls to prevent and detect attacks against company systems, applications, and data. Conducts penetration testing and vulnerability assessments across applications, operating systems, and networks. Responds to cybersecurity incidents by identifying, isolating, and removing unauthorized access. Researches emerging … system disruption, or unauthorized access. People Manager: NoWhat you'll do Administer and enforce security policies governing system and application access. Perform application security testing and reviews to ensure secure configurations and compliance with standards. Conduct penetration tests and vulnerability assessments across applications, OS, and network layers. Lead ...

good understanding of relevant data protection legislation (e.g., UK GDPR). ISO 27001, SOC 2, NIST CSF, CAF, HIPAA, DSPT Gap analysis, auditing, or penetration testing Process and procedure development Software or AI development/testing Client-facing roles Relevant certifications (CISSP, CISM, CREST, etc. ...

governance documentation. Drive maturity of assurance processes, tooling, reporting, and governance across multiple programmes. Lead incident response capability development, including response plans, playbooks, testing, exercising, and Tabletop Exercises (TTXs). Manage vulnerability, risk, audit, control assessment, and compliance activities, ensuring findings are prioritised and driven through to resolution. Engage … protection, IDS/IPS, SIEM, identity and access management, PKI, LDAP, Active Directory, SAML, encryption, and key management. Experience interpreting outputs from vulnerability assessments, penetration testing, IT Health Checks (ITHCs), and security monitoring activities to support remediation planning and risk-based prioritisation. Ability to assess technical security controls ...

governance documentation. Drive maturity of assurance processes, tooling, reporting, and governance across multiple programmes. Lead incident response capability development, including response plans, playbooks, testing, exercising, and Tabletop Exercises (TTXs). Manage vulnerability, risk, audit, control assessment, and compliance activities, ensuring findings are prioritised and driven through to resolution. Engage … protection, IDS/IPS, SIEM, identity and access management, PKI, LDAP, Active Directory, SAML, encryption, and key management. Experience interpreting outputs from vulnerability assessments, penetration testing, IT Health Checks (ITHCs), and security monitoring activities to support remediation planning and risk-based prioritisation. Ability to assess technical security controls ...

maintain secure network and application architectures; oversee secure software development lifecycle (SDLC) practices; ensure encryption, authentication, and authorisation controls are robust. Develop Automated Security Testing/Continuous Evaluation: Develop, implement, and continuously refine preferably automated tooling and reporting to perform some level of dynamic penetration testing ...

have experience in several of the following areas: Cisco Firewalls, Routers and Switches Juniper technologies SIEM platforms IDS/IPS solutions Vulnerability management Penetration testing Computer forensic tools Secure network design and administration ISO27001 and GDPR compliance You'll also possess: Strong troubleshooting and analytical skills Excellent communication ...

security strategy and maturity roadmap • Own and continuously improve security operations and the outsourced SOC • Lead cyber incident investigation and response • Oversee vulnerability management, penetration testing and remediation programmes • Maintain ownership of ISO 27001 and Cyber Essentials Plus • Establish security architecture principles across infrastructure, cloud, SaaS, data ...

track the end-to-end vulnerability management lifecycle, including vulnerability identification, reporting, remediation tracking, and escalation of overdue findings. Coordinate internal and external penetration testing activities and ensure findings are appropriately tracked through to resolution. Support the management and continuous improvement of security controls including endpoint protection, email ...

network, system, and applications. Create formal incidents and support the investigation of such incidents. Conduct Security Assessments: Perform regular security audits, vulnerability assessments, and penetration testing to identify and mitigate potential risks. Correlate telemetry data from security systems to identity cyber threats, risk patterns, and control weaknesses. System ...

measures that are "secure-by-design" and "secure-by-default." This engineering excellence has driven ControlPlane deeper into cybersecurity providing services like threat modelling, penetration testing, and supply chain security to ensure robust protection against cyberattacks in containerised and cloud-native environments. We are acclaimed for our contributions ...

such as model integrity, bias, data poisoning, and explainability.Work collaboratively with other security teams to ensure appropriate security gates are completed across programs – including penetration testing and supplier assurance reviews where applicable.Represent the team in governance forums, program boards, and working groups, communicating security risk with clarity ...

model integrity, bias, data poisoning, and explainability. Work collaboratively with other security teams to ensure appropriate security gates are completed across programs – including penetration testing and supplier assurance reviews where applicable. Represent the team in governance forums, program boards, and working groups, communicating security risk with clarity ...

expertise and risk-based recommendations to strengthen organizational resilience. Develop and maintain security policies, standards, procedures, and playbooks, support audits and certification activities, review penetration testing and vulnerability assessment results, and drive continuous improvement aligned with industry best practices. What You Will Need: Proven experience in cybersecurity operations ...

highly regulated cloud environments (e.g. PCI-DSS, ISO 27001, NIST guidelines). Demonstrated background in a highly technical role (e.g. Security Engineering, Infrastructure Engineering, Penetration Testing). Experience in infrastructure, application, and AI security (e.g. container security, secure code reviews, secure integration of generative AI/ML). ...

cybersecurity and engineering teams.**Experience & Qualifications:*** 10+ years in cybersecurity, including 5+ years of hands-on coding, alongside deep expertise in threat modeling, pen testing, code reviews, and offensive security methodologies.* Strong foundation in network protocols (IP, DNS, HTTP, SSL/TLS), cryptography (PKI, encryption at rest/ ...

help improve how vulnerability handling works as the volume grows. Your responsibilities Review incoming reports from external researchers, bug bounty and vulnerability disclosure programmes, penetration tests, AI-assisted testing platforms, and internal security assessments Validate findings: check the affected asset, reproduce the issue where safe and appropriate … impacting detail, internal infrastructure information, credentials, screenshots, logs, and exploit chains Your key competencies 5+ years of previous experience in vulnerability triage, application security, penetration testing, security operations, or a closely related security role Ability to understand and validate technical vulnerability reports, including incomplete, unclear, automated, or poorly ...

with meaningful careers. ROLE SUMMARY:This opportunity within the Offensive Security Operations team is a crucial role for the management of vulnerability discovery, offensive testing and remediation activities across the group which protects the business from sophisticated cyber threats! The role holder will work with our 3rd party vendors … plan and facilitate our testing programmes ensuring they run efficiently. The programmes in scope for the role include: Regulatory Threat Intelligence Led Pen Testing (TLTP) and Red teamingBug BountyContinuous External Attack Surface ManagementActive Directory security posture managementAny programme launched in the future aimed at driving down cyber risk ...

systems, networking, cloud infrastructure, and attacker tactics, techniques, and procedures (TTPs). Responsibilities of this position include vulnerability management, reporting, remediation and continuous assessment, penetration testing and red teaming. This position will work remote from home office located in the UK or India only. Must be able … third-party assets.Conduct continuous discovery and vulnerability assessment of enterprise-wide assets.Support auditors in their duties that focus on compliance and risk reduction.Perform penetration tests against company owned assets, including internal and cloud-based assets, as well as web applications and APIs.Perform other duties as assigned.QUALIFICATIONS:Education: Bachelor ...

workflows Support SAST, SCA, secrets scanning, and other security controls Maintain SBOMs, dependency visibility, and remediation follow-up Support security assessments, vulnerability assessments, and penetration testing Maintain vulnerability handling playbooks, product security procedures, and incident response runbooks What we’re looking for 3+ years of experience in product … security expert Hands‐on experience with AWS security controls, best practices, and architecture patterns Hands‐on experience with C++ or JavaScript Experience with security testing and automation using scripting, APIs, CI/CD pipelines, or specialized tools Experience with threat modeling for SaaS, API, cloud, or on‐prem product ...

internal audits, control reviews, and risk assessments. Maintain and monitor the organisational risk register. Support business continuity and resilience planning activities. Coordinate vulnerability scanning, penetration testing, and remediation programmes. Assist with the investigation and resolution of information security incidents. Deliver security awareness initiatives, user training, and phishing simulations ...