18 of 18 Contract Penetration Testing Jobs

Lead Penetration Tester Contract: Initial 6 months Day Rate: £700–£800 per day IR35: Inside IR35 1 day per month on site, either Chesterfield or London. About the Role We are looking for an experienced Lead Penetration Tester to take ownership of the end-to-end penetration testing process across applications, infrastructure and wider technology environments. This is a hands-on role combining penetration testing expertise with the coordination and oversight of testing engagements, third-party suppliers, vulnerability remediation and security findings. You will be responsible for ensuring tests are appropriately scoped ...

RBAC, Privileged Identity Management, and compliance controls. Identifying security gaps and executing remediation activities in line with security standards. Leading preparation activities for upcoming penetration testing engagements. Reviewing penetration testing findings and translating them into actionable remediation plans. Supporting security assurance, risk assessments, and control validation … Intune, Entra ID (Azure AD), Microsoft 365 Security, Azure Security, and Microsoft Purview. A solid understanding of CIS-based security controls and experience remediating penetration testing findings. Knowledge in Identity & Access Management, least privilege principles, and RBAC. The ability to work independently with minimal supervision in greenfield ...

posture of mobile applications across Android and iOS platforms. The successful candidate will have strong hands-on experience in mobile application security, threat modelling, penetration testing, security assessments, and vulnerability mitigation . Key Responsibilities Conduct regular security reviews and assessments of mobile applications. Perform mobile application penetration testing across Android and iOS platforms. Apply threat modelling techniques to identify security risks and recommend effective mitigations. Develop and maintain penetration-testing tools, scripts, policies, and security procedures . Assess mobile applications against recognised mobile security standards and best practices. Identify vulnerabilities and provide practical ...

DevSecOps processes. Review and analyse SAST, DAST and Software Composition Analysis (SCA) findings. Work closely with development teams to prioritise vulnerability remediation. Define security testing requirements and support penetration testing activities. Produce security standards, technical guidance and best practice documentation. Act as the Application Security SME across … MITRE ATT&CK Security Architecture Risk Assessments DevSecOps CI/CD Security GitHub Actions GitLab Jenkins Azure DevOps Security Automation Shift Left Security Security Testing SAST DAST SCA Vulnerability Management Penetration Testing Cloud Security AWS, Azure or GCP Kubernetes Docker Container Security Cloud Security Best Practices Security ...

loss prevention and vulnerability management. Developing and operationalising threat intelligence capabilities, working with industry partners and external security communities. Defining and delivering cyber resilience testing strategies through penetration testing, red teaming and crisis simulation exercises. Building and maintaining cyber scenario libraries based on severe but plausible threat … senior cyber security leadership role within a large and complex organisation. Strong technical background covering cyber operations, SOC, SIEM, threat intelligence, incident response, penetration testing and red teaming. Extensive experience leading cyber incidents and crisis management activities across enterprise environments and supply chains. Strong understanding of cloud technologies ...

advanced search techniques and security telemetry to identify malicious activity that may have evaded automated detection. Support vulnerability assessment activities and contribute to security testing initiatives, including exposure to penetration testing and web application security assessments. Develop and maintain cyber security policies, standards, and technical documentation … management skills with the ability to work independently and manage multiple priorities. Desirable Experience performing vulnerability assessments using recognised vulnerability management tools. Exposure to penetration testing and web application security testing. Experience creating and maintaining cyber security policies, standards, and governance documentation. Professional cyber security certifications such ...

advanced search techniques and security telemetry to identify malicious activity that may have evaded automated detection. Support vulnerability assessment activities and contribute to security testing initiatives, including exposure to penetration testing and web application security assessments. Develop and maintain cyber security policies, standards, and technical documentation … management skills with the ability to work independently and manage multiple priorities. Desirable Experience performing vulnerability assessments using recognised vulnerability management tools. Exposure to penetration testing and web application security testing. Experience creating and maintaining cyber security policies, standards, and governance documentation. Professional cyber security certifications such ...

with relevant security frameworks. Work collaboratively with external security authorities, including the NCSC , where required to support security assurance. Manage security activities across development, testing and manufacturing environments. Advise engineering teams on platform lockdown, secure configuration and security hardening. Support penetration testing activities, analyse findings and develop … This will include: Security risk assessments. Risk mitigation planning. Security requirements definition. Security cases and assurance documentation. Mitigation gap analysis. Security verification and testing. Penetration testing support and remediation. Engagement with customer security authorities and risk owners. Demonstrating compliance against applicable UK, NATO and international security frameworks. Product ...

development and assurance. Define and derive product security requirements , working directly with engineering teams on their implementation. Provide security advice throughout product design, development, testing and manufacturing. Produce technical assurance artefacts including Security Cases, Security Operating Procedures, Testing Security Instructions and Key Management Plans . Liaise with internal … security authorities, including the NCSC, to support assurance of security solutions. Advise engineering teams on platform lockdown, configuration and appropriate product security controls. Support penetration testing, analyse findings and develop appropriate remediation plans. Manage through-life security activities including vulnerability management, patch management and obsolescence planning . Support ...

currently looking for an experienced Senior Application Security Engineer to work on a customer assignment, providing subject matter expertise across code review, penetration testing, and secure development lifecycle initiatives. As a Senior Application Security Engineer, you will combine hands-on technical delivery with cross-team guidance, serving … expert on application security for internal development teams. Key Responsibilities: Be an application security subject matter expert, guiding internal development teams Perform code reviews, penetration tests, and architectural reviews on existing and new applications Develop, implement, and communicate vulnerability mitigation strategies Handle externally reported vulnerabilities Drive the static ...

business banking channel . This is a hands-on banking technology delivery role, responsible for taking the implementation from design and build through integration, testing, security assurance, customer migration, staged rollout, full release and transition into BAU. The new digital banking channel will be based on Temenos Digital , integrated … critical path, dependencies, milestones and delivery risks through to go-live. Lead the project through all key stage gates, including: Design Build Integration testing SIT UAT Security testing Pilot Staged customer rollout Full production release Hypercare and BAU transition Own the end-to-end integration between the digital ...

Role Security testing programme analyst – SP Energy Networks Summary • Hybrid Role • Competitive rate umbrella or PAYE • Initial 12-month contract • Glasgow HQ SP Energy Networks (SPEN) has kicked off an ambitious security transformation programme to transparently reduce risk, achieve compliance with NIS regulations and deliver a cyber resilient business … Security Testing Programme Analyst will be essential in achieving our goals Expectations • Coordinate the annual OT security testing schedule, ensuring appropriate coverage of in-scope assets and systems and driving the schedule using a risk-based approach. • Engage with asset owners, engineers, project teams, and suppliers to define ...

Lead Penetration Tester Contract: Initial 6 months Day Rate: £700-£800 per day IR35: Inside IR35 1 day per month on site, either Chesterfield or London. About the Role We are looking for an experienced Lead Penetration Tester to take ownership of the end-to-end penetration testing process across applications, infrastructure and wider technology environments click apply for full job details ...

Sentinel, ArcSight) , or building alerting/observability for security events from across an enterprise. Experience setting up segregated and secured hypervisor environments for the testing of potentially malicious software or code. Broader Skills Desirable Certifications such as OSCP, AWS/Azure/GCP security specialty certifications, Experience with infrastructure … code (Terraform, CloudFormation, Pulumi) and policy-as-code enforcement (OPA, Sentinel, Checkov). Experience supporting penetration testing and vulnerability scanning, and working closely with teaming team members to mitigate or remediate findings. Working knowledge of container and Kubernetes security, image hardening, admission controls, runtime protection. Familiarity with ...

Entra ID/Azure AD) and device compliance tools (Microsoft Intune/MDM). Threat & Risk Management: Monitor, identify, and remediate environment vulnerabilities. Support penetration testing schedules, deploy Multi-Factor Authentication (MFA), and maintain device encryption policies. Data Protection Compliance: Ensure all localized retail systems and warehouse practices ...

NCSC, JSP and NIST security standards. Develop vulnerability management processes, security assurance activities, and accreditation documentation. Produce HLDs, LLDs, security documentation, SOPs, and penetration testing scope. Collaborate with infrastructure and security teams to deliver secure, compliant solutions. Skills & Experience Proven Security Architect or senior Security SME experience within ...

gapped systems. Define secure patching, vulnerability management, and data transfer mechanisms for disconnected networks. Produce formal technical documentation (HLDs, LLDs, SOPs) and Penetration Testing scopes. Ensure full compliance with UK security policies (including JSP 440, JSP 604, JSP 453), NCSC guidance, and the NIST framework. Requirements Clearance: Must ...

modelling and mitigation techniques Capable of conducting regular reviews of our mobile application security posture using your hands-on experience. Develop and maintain pen-testing security tools, scripts, policies and procedures In depth knowledge of mobile app security standards (Android/iOS) Desirable knowledge & experience Familiarity with mobile development … DevSecOps tooling, testing and automation frameworks. Have deep knowledge and experience using the mobile security tools. Good understanding of authentication, authorization, encryption, and cryptography patterns. Experience in proactive researching new technologies emerging in the security landscape. ...