19 of 19 Contract Penetration Testing Jobs

RBAC, Privileged Identity Management, and compliance controls. Identifying security gaps and executing remediation activities in line with security standards. Leading preparation activities for upcoming penetration testing engagements. Reviewing penetration testing findings and translating them into actionable remediation plans. Supporting security assurance, risk assessments, and control validation … Intune, Entra ID (Azure AD), Microsoft 365 Security, Azure Security, and Microsoft Purview. A solid understanding of CIS-based security controls and experience remediating penetration testing findings. Knowledge in Identity & Access Management, least privilege principles, and RBAC. The ability to work independently with minimal supervision in greenfield ...

DevSecOps processes. Review and analyse SAST, DAST and Software Composition Analysis (SCA) findings. Work closely with development teams to prioritise vulnerability remediation. Define security testing requirements and support penetration testing activities. Produce security standards, technical guidance and best practice documentation. Act as the Application Security SME across … MITRE ATT&CK Security Architecture Risk Assessments DevSecOps CI/CD Security GitHub Actions GitLab Jenkins Azure DevOps Security Automation Shift Left Security Security Testing SAST DAST SCA Vulnerability Management Penetration Testing Cloud Security AWS, Azure or GCP Kubernetes Docker Container Security Cloud Security Best Practices Security ...

loss prevention and vulnerability management. Developing and operationalising threat intelligence capabilities, working with industry partners and external security communities. Defining and delivering cyber resilience testing strategies through penetration testing, red teaming and crisis simulation exercises. Building and maintaining cyber scenario libraries based on severe but plausible threat … senior cyber security leadership role within a large and complex organisation. Strong technical background covering cyber operations, SOC, SIEM, threat intelligence, incident response, penetration testing and red teaming. Extensive experience leading cyber incidents and crisis management activities across enterprise environments and supply chains. Strong understanding of cloud technologies ...

advanced search techniques and security telemetry to identify malicious activity that may have evaded automated detection. Support vulnerability assessment activities and contribute to security testing initiatives, including exposure to penetration testing and web application security assessments. Develop and maintain cyber security policies, standards, and technical documentation … management skills with the ability to work independently and manage multiple priorities. Desirable Experience performing vulnerability assessments using recognised vulnerability management tools. Exposure to penetration testing and web application security testing. Experience creating and maintaining cyber security policies, standards, and governance documentation. Professional cyber security certifications such ...

advanced search techniques and security telemetry to identify malicious activity that may have evaded automated detection. Support vulnerability assessment activities and contribute to security testing initiatives, including exposure to penetration testing and web application security assessments. Develop and maintain cyber security policies, standards, and technical documentation … management skills with the ability to work independently and manage multiple priorities. Desirable Experience performing vulnerability assessments using recognised vulnerability management tools. Exposure to penetration testing and web application security testing. Experience creating and maintaining cyber security policies, standards, and governance documentation. Professional cyber security certifications such ...

with relevant security frameworks. Work collaboratively with external security authorities, including the NCSC , where required to support security assurance. Manage security activities across development, testing and manufacturing environments. Advise engineering teams on platform lockdown, secure configuration and security hardening. Support penetration testing activities, analyse findings and develop … This will include: Security risk assessments. Risk mitigation planning. Security requirements definition. Security cases and assurance documentation. Mitigation gap analysis. Security verification and testing. Penetration testing support and remediation. Engagement with customer security authorities and risk owners. Demonstrating compliance against applicable UK, NATO and international security frameworks. Product ...

Contract Penetration Tester - Web Application Location: Brighton/UK-based Engagement: Contract Independent testers and specialist security firms welcome We're looking for an experienced penetration tester or specialist security testing firm to conduct an independent penetration test of a Laravel/PHP web application with … significant API component. Scope The engagement will cover: Web application penetration testing API security testing Authentication and authorisation Infrastructure and cloud configuration Identification and exploitation of relevant vulnerabilities Clear, actionable remediation recommendations Retesting following remediation Required Crest CRT/CCT or OSCP Crest CHECK status ...

business banking channel . This is a hands-on banking technology delivery role, responsible for taking the implementation from design and build through integration, testing, security assurance, customer migration, staged rollout, full release and transition into BAU. The new digital banking channel will be based on Temenos Digital , integrated … critical path, dependencies, milestones and delivery risks through to go-live. Lead the project through all key stage gates, including: Design Build Integration testing SIT UAT Security testing Pilot Staged customer rollout Full production release Hypercare and BAU transition Own the end-to-end integration between the digital ...

currently looking for an experienced Senior Application Security Engineer to work on a customer assignment, providing subject matter expertise across code review, penetration testing, and secure development lifecycle initiatives. As a Senior Application Security Engineer, you will combine hands-on technical delivery with cross-team guidance, serving … expert on application security for internal development teams. Key Responsibilities: Be an application security subject matter expert, guiding internal development teams Perform code reviews, penetration tests, and architectural reviews on existing and new applications Develop, implement, and communicate vulnerability mitigation strategies Handle externally reported vulnerabilities Drive the static ...

owners. Undertaking security design governance and updating design artefacts in response to review and assurance feedback. Developing scopes and test plans for functional security testing and penetration testing. Supporting internal and external security testing teams through the planning and delivery of assurance activities. Helping stakeholders reach informed … knowledge of cloud security architecture and principles across IaaS, PaaS and SaaS environments. Experience developing security test plans and working with internal or external penetration-testing teams. Strong knowledge of recognised security standards and frameworks, including CIS, ISO 27000, PCI DSS and NIST. Experience identifying security control gaps ...

Role Security testing programme analyst – SP Energy Networks Summary • Hybrid Role • Competitive rate umbrella or PAYE • Initial 12-month contract • Glasgow HQ SP Energy Networks (SPEN) has kicked off an ambitious security transformation programme to transparently reduce risk, achieve compliance with NIS regulations and deliver a cyber resilient business … Security Testing Programme Analyst will be essential in achieving our goals Expectations • Coordinate the annual OT security testing schedule, ensuring appropriate coverage of in-scope assets and systems and driving the schedule using a risk-based approach. • Engage with asset owners, engineers, project teams, and suppliers to define ...

Sentinel, ArcSight) , or building alerting/observability for security events from across an enterprise. Experience setting up segregated and secured hypervisor environments for the testing of potentially malicious software or code. Broader Skills Desirable Certifications such as OSCP, AWS/Azure/GCP security specialty certifications, Experience with infrastructure … code (Terraform, CloudFormation, Pulumi) and policy-as-code enforcement (OPA, Sentinel, Checkov). Experience supporting penetration testing and vulnerability scanning, and working closely with teaming team members to mitigate or remediate findings. Working knowledge of container and Kubernetes security, image hardening, admission controls, runtime protection. Familiarity with ...

concepts, such as: SIEM SOAR Identity and Access Management Threat Detection Incident Response Authentication and Authorization Experience with offensive security techniques, adversary emulation, or penetration testing is beneficial but not required. Desirable Experience Experience with one or more of the following is beneficial: Splunk Microsoft Sentinel CrowdStrike Microsoft ...

Entra ID/Azure AD) and device compliance tools (Microsoft Intune/MDM). Threat & Risk Management: Monitor, identify, and remediate environment vulnerabilities. Support penetration testing schedules, deploy Multi-Factor Authentication (MFA), and maintain device encryption policies. Data Protection Compliance: Ensure all localized retail systems and warehouse practices ...

audit-ready evidence and contribute to security governance forums. This is a governance and coordination role. You will not be responsible for vulnerability scanning, penetration testing, patch deployment or technical remediation. VULNERABILITY MANAGEMENT CONSULTANT ESSENTIAL SKILLS: Experience within cyber security, information security, service management or governance Good understanding ...

NCSC, JSP and NIST security standards. Develop vulnerability management processes, security assurance activities, and accreditation documentation. Produce HLDs, LLDs, security documentation, SOPs, and penetration testing scope. Collaborate with infrastructure and security teams to deliver secure, compliant solutions. Skills & Experience Proven Security Architect or senior Security SME experience within ...

gapped systems. Define secure patching, vulnerability management, and data transfer mechanisms for disconnected networks. Produce formal technical documentation (HLDs, LLDs, SOPs) and Penetration Testing scopes. Ensure full compliance with UK security policies (including JSP 440, JSP 604, JSP 453), NCSC guidance, and the NIST framework. Requirements Clearance: Must ...

Clearance process Our Client is hiring for a reputed client where you'll help deliver complex IT infrastructure activities end-to-end-building, configuring, testing and supporting changes that keep mission-critical environments secure and reliable. If you enjoy hands-on technical delivery and clear documentation, this could … monitoring with Splunk, including forwarder deployment and implementation support Design logging approaches, build assets/base servers and import/install required components Support penetration testing activities (prep, escort, cleanup) and produce a remediation plan Conduct user onboarding support and provide architectural/early capability assistance Update documentation ...

Azure Landing Zones, Entra, RBAC, Azure Policy & networking VM and subscription migrations across business services SaaS transformation, debt & EOL remediation DR, RTO/RPO, testing & Cyber Essentials Plus Migration planning, testing & service acceptance Experience of Business cases, operating models & FinOps/cost optimisation Service transition and BAU readiness … Managing internal SMEs, stakeholders, Service Managers & vendors Security and support of successful PEN testing You’ll need to be a strong communicator and stakeholder manager, able to navigate complex environments, identify migration risks, challenge assumptions and bring practical solutions to the table. A technically capable background is strongly preferred. ...