25 of 25 Contract Penetration Testing Jobs

Principal Penetration Tester Location: Mainly remote, with occasional site visits (expenses paid) Duration: Initial 6-month contract, with a strong likelihood of extension IR35: Outside IR35 Role Overview We are seeking an experienced Principal Penetration Tester to lead and deliver complex penetration testing and security assessment … clients The successful candidate will provide hands-on technical expertise across infrastructure, cloud, applications, Kubernetes and hybrid environments, while also leading testing teams and mentoring junior consultants. Essential Requirements Cyber Scheme Team Leader (CSTL) or CREST Certified Tester (CCT) Principal UK Cyber Security Council Professional (PriCSP) Current Security Clearance ...

hands-on test automation, network validation and service assurance across complex deployment and migration activities. 3 days per week onsite taking ownership of automated testing and validation throughout the change lifecycle, helping ensure deployments are secure, stable and ready to progress into production. Key responsibilities include: Designing, developing … deployments only progress when defined validation criteria are met Developing and maintaining pyATS-based validation suites to verify network state, configuration and behaviour Conducting penetration testing and vulnerability assessments ahead of go-live Supporting Root Cause Analysis (RCA) across network, platform, performance and functional issues Producing structured test ...

Team) to join a client on a short-term contract basis. This is an excellent opportunity for a hands-on security professional with strong penetration testing experience to support a variety of security assessment activities across enterprise systems and applications. Key Responsibilities Conduct penetration testing … technical reports and remediation recommendations Work closely with technical and project teams to improve security posture Support risk assessments and security assurance activities Ensure testing activities align with industry standards and best practices Essential Skills & Experience Demonstrable experience delivering penetration testing engagements Strong understanding of infrastructure, network ...

storage, networks and virtualisation, helping to protect critical systems. It's a hands-on assurance role combining technically advanced security assessments, ethical hacking and penetration testing with risk management, remediation planning and senior stakeholder engagement. You will advise complex projects on security requirements, translate technical findings into clear … with project teams, senior management and stakeholders, providing security briefings, technical guidance and input into system requirements. Plan and lead technically advanced security assessments, testing and reporting within agreed governance and timescales. Perform ethical hacking and penetration testing against internal systems using tools such as Kali Linux ...

days on-site). The team is accountable for security within the mobile channel, providing a suite of mobile security components and associated services (penetration testing, obfuscation, consultancy). The mission is a scalable, proactive approach to securing the bank's mobile apps so engineers can operate with … design and delivery of a world-class security framework. Key Responsibilities: Design and deliver a security framework for the mobile platform and associated services (penetration testing, research, consultancy) Conduct regular hands-on reviews of mobile application security posture Apply threat modelling and mitigation techniques across the mobile channel ...

evolving environment. You'll play a key role in strengthening the organisation's cyber security capabilities while helping prepare the environment for an upcoming penetration test programme over the next 3-6 months. The team are looking for someone who can work autonomously, identify potential weaknesses before they become … Microsoft security ecosystem. Identify security gaps and drive remediation activities to improve overall security posture. Support the preparation, coordination and remediation of external penetration testing engagements. Implement and manage identity, access management and privileged access controls. Configure and maintain Conditional Access, RBAC and Privileged Identity Management controls. Improve ...

security design reviews. Identifying security risks and recommending effective mitigation strategies. Supporting cloud-first solutions across Azure and wider multi-cloud environments. Reviewing penetration testing and IT Health Check outcomes and developing remediation plans. Working closely with engineering, assurance and risk teams to validate security controls. Producing high … Identity & Access Management. Experience securing cloud-native and microservices-based architectures. Strong background in threat modelling, risk analysis and security assurance. Experience supporting penetration testing and control effectiveness reviews. Desirable Certifications CISSP CISM SABSA TOGAF Azure Solutions Architect Reasonable Adjustments: Respect and equality are core values to us. ...

Party Risk Management or Supplier Assurance. Proven experience performing supplier assurance reviews and third-party cyber security assessments. Experience reviewing supplier security evidence including penetration testing reports, certifications, audit findings and assurance documentation. Strong understanding of supplier risk management and third-party cyber security risk. Experience assessing technical … cyber security assessments of prospective and existing suppliers using publicly available information, supplier-provided evidence and specialist assurance tooling. Assess supplier security documentation including penetration testing reports, certifications, audit reports, SOC reports and other assurance evidence. Manage the cyber security supplier assurance process, including assessment tracking, reporting, governance ...

looking for an experienced Adversarial Tooling Engineer to join a major cybersecurity programme within a large, complex enterprise environment. This is not a traditional penetration testing role. We are looking for a strong software engineer with genuine offensive security experience who can design, build and maintain the internal … accelerate repeatable adversarial activities. Implement appropriate AI guardrails including action allow-lists, human approval gates, environment controls and audit trails. Develop evaluation and regression testing for AI and agentic capabilities. Build tooling capable of operating in constrained environments with intermittent connectivity, limited permissions and challenging operational conditions. Apply secure ...

services environment. You'll own end-to-end delivery of strategic security programmes, including privileged access management (CyberArk), Certificate Lifecycle Management (CLM) and a penetration testing programme, while keeping everything aligned to regulatory requirements, risk frameworks and information security standards. What you'll do: Lead cyber security projects … flag risks and issues early, and manage mitigation and escalation Maintain governance artefacts: RAID logs, status reports, budget forecasts and steering committee materials Oversee testing, validation, deployment and handover to support Report clearly to stakeholders and senior management What you'll bring: 5+ years' project management experience in financial ...

Systems (CIS) business, you will be responsible for providing cyber security leadership throughout the project lifecycle, from bid support and solution architecture through to testing, commissioning, and operational support. The role offers flexibility on location, with regular face-to-face collaboration required in either Chippenham or Ashby … party products and components against security requirements. Review and approve cyber security evidence and assurance documentation. Define security verification and validation strategies, including factory testing, site acceptance testing, and penetration testing activities. Support investigation and response activities relating to cyber vulnerabilities and incidents. Contribute to continuous ...

risk appetite. Support the deployment of cloud-based services, predominantly within Azure environments. Work with technical teams to validate security control effectiveness. Assist with penetration testing and IT Health Check scoping activities. Review security findings and provide practical remediation guidance. Contribute to security standards, patterns and architecture documentation. … Azure security services, identity management and cloud-native security controls. Exposure to threat modelling and risk assessment methodologies. Understanding of security assurance and controls testing activities. Excellent stakeholder engagement and communication skills. Desirable Skills & Certifications CISSP, CISM, SABSA or TOGAF Azure or AWS cloud certifications Knowledge of PKI, Encryption ...

What you'll do Carry out advanced manual penetration tests across web, mobile, infrastructure, cloud and Active Directory Run Red Team and assumed-breach engagements, as part of a team or on your own Review architecture and source code for security weaknesses Write clear technical reports and executive summaries … help build internal tools and methodologies Support pre-sales and occasionally work onsite with customers What you'll bring 5+ years of professional penetration testing experience, working independently Manual testing skills that go well beyond running automated tools Strong Windows, Unix and networking security knowledge Scripting ...

Assess and advise on risks relating to LLMs, Agentic AI, RAG architectures, prompt injection, data poisoning, model theft, and AI supply chain threats. Define penetration testing scope and collaborate closely with testing teams to validate security controls and remediation activities. Act as a trusted security advisor ...

Infrastructure as Code (Terraform or CloudFormation), Docker, Kubernetes (K8s), serverless and Helm. Strong programming capability, preferably Python including asynchronous programming and FastAPI, plus unit testing with Pytest. Experience applying security standards and SDLC controls to software platforms. Experience identifying vulnerabilities using CWE or OWASP, hardening operating systems, and designing … reviewing technical architectures. Working knowledge of agile/DevOps delivery, Jira, CDK/GitOps, penetration testing and technologies such as Snowflake, MongoDB, Terraform Cloud, GitHub or Databricks. Analytical and adversarial mindset, attention to detail, problem-solving ability and a commitment to continuous learning. Strong documentation, research, communication ...

manage the Dev, QA, Demo, Training and Production environments, including container configuration, environment variables and secrets. Build dedicated test environments for the testing team and maintain a performance testing environment. Restructure the Demo environment so testers can access the database. Maintain and test the disaster recovery model, including … failover, static fallback pages and Front Door routing during outages. Deliver outstanding platform hardening and act on penetration testing findings. Manage IAM, deployment permissions, DNS records and user offboarding within the subscription. Produce clear infrastructure documentation in line with governance controls. Essential Experience Strong hands-on Microsoft Azure ...

with minimal supervision while maintaining a consistently high standard of delivery. Collaborate with engineering, architecture, DevOps and Cyber Security teams. Support or participate in penetration testing activities where required. Design and review technical architectures from a security perspective. Essential Technical Skills & Experience You should have 6 + years … security and secure cloud architecture. Technical architecture design and review. Strong programming skills, particularly Python , including asynchronous programming. FastAPI - essential . Pytest/unit testing - essential . Experience developing and maintaining software in line with security standards and SDLC processes. Experience with technologies such as Snowflake, MongoDB, Terraform Cloud ...

ISNs) Knowledge of UK Government security standards, including: Government Security Policy Framework (SPF) NCSC Cloud Security Principles NCSC SaaS Security Principles Cyber Essentials CHECK Penetration Testing Scheme Familiarity with UK Government physical and personnel security requirements, including NPSA and UKSV. Experience conducting risk assessments using recognised methodologies such ...

Demo, Training and Production environments and have experience managing cloud infrastructure in secure or regulated environments. Experience of tenant migration, platform hardening, penetration testing remediation and Azure migration programmes would be particularly useful. Contract details Hybrid working Up to 2 days per week in London or Leeds Candidates ...

NCSC, JSP and NIST security standards. Develop vulnerability management processes, security assurance activities, and accreditation documentation. Produce HLDs, LLDs, security documentation, SOPs, and penetration testing scope. Collaborate with infrastructure and security teams to deliver secure, compliant solutions. Skills & Experience Proven Security Architect or senior Security SME experience within ...

Leading the introduction of a Certificate Life cycle Management (CLM) capability, currently in its early project phase Managing governance and delivery oversight for ongoing penetration testing remediation activities Supporting the organisation's wider cybersecurity roadmap, including foundational security initiatives and future cloud-related programmes Working alongside an established ...

coding. Please note: this is an engineering role, not a cyber security role. If your background is mainly vulnerability management, threat detection, SOC or penetration testing, this won't be the right fit. Deerfoot Recruitment Solutions Ltd is a leading independent tech recruitment consultancy in the UK. ...

enabled and agentic tooling where appropriate, with suitable guardrails, approval controls and auditability Improve the quality, reliability and maintainability of the wider toolset through testing, documentation, refactoring and automation Work closely with adversarial engineers, defensive security teams and wider technology functions We're looking for: Strong software engineering experience … building maintainable tools and services Practical offensive security experience across Red Teaming, penetration testing or adversary simulation Strong programming experience across languages such as Python, Go, C#, C++ or TypeScript Experience building operator-facing tooling, automation frameworks, APIs or agent/implant components Strong Linux experience, with ...

drive the cloud and data centre migration activities. This will include: Supporting migration of datacentre-hosted workloads into Azure, assisting with planning, build, testing and production cutover activities Support landing zone, networking and infrastructure configuration Assist with application and server migration activities Support supplier engagement and technical validation activities. … Review and remediation of high-priority vulnerabilities identified through pen testing activity Implement remediation activities across server and infrastructure platforms Validate controls through testing and evidence collection The successful Cloud Infrastructure Engineer will have the following skills: Azure Cloud (IaaS/PaaS, networking, identity, monitoring). Infrastructure ...

maintaining operational resilience within the Data Centre Services team. Key responsibilities: Support migration of datacentre-hosted workloads into Azure Assist with migration planning, build, testing, and production cutover activities Support landing zone, networking, and infrastructure configuration Review high-risk pen testing findings Define remediation plans and technical solutions ...