1 to 25 of 122 Permanent Penetration Testing Jobs in London

Lead Penetration Tester Contract: Initial 6 months Day Rate: £700–£800 per day IR35: Inside IR35 1 day per month on site, either Chesterfield or London. About the Role We are looking for an experienced Lead Penetration Tester to take ownership of the end-to-end penetration testing process across applications, infrastructure and wider technology environments. This is a hands-on role combining penetration testing expertise with the coordination and oversight of testing engagements, third-party suppliers, vulnerability remediation and security findings. You will be responsible for ensuring tests are appropriately scoped ...

Moore Kingston Smith is seeking an experienced Cyber Security Consultant specialising in penetration testing to join our client-facing advisory team. You will join an NCSC-recognised cyber security team within our Risk Advisory practice, supporting a diverse portfolio of clients across multiple sectors. This is a hands … role focused on delivering penetration tests across web applications, APIs, and internal and external network infrastructure. You will also support Cyber Essentials Plus assessments and wider technical security reviews, including vulnerability assessments, configuration reviews against recognised benchmarks, and cloud security reviews. You will identify and safely validate security weaknesses ...

Senior Penetration Tester Remote - Client Travel Required £60,000 - £65,000 VIQU are partnered with a leading Cyber Security Consultancy is looking for an experienced Senior Penetration Tester to join its team. You'll deliver end-to-end penetration testing engagements, work directly with clients … contribute to the development of technical capabilities. Key Responsibilities: Deliver penetration tests from scoping through to reporting and client debrief. Conduct testing across web applications, APIs, infrastructure, networks, cloud and mobile environments. Produce high-quality technical reports and present findings to clients. Support engagement scoping, proposals and client ...

teams build and operate complex systems at scale. Take the next step in your career. The roleWe are looking for an Offensive Security Manager (Penetration Testing) to establish and grow our offensive security capability. You will lead a team responsible for testing the firm's highest-priority … demonstrate whether our security controls can withstand a capable attacker. The team is being established and expanded with a focus on hands-on penetration testing and offensive engineering. AI and automation will play a central role in closing the gaps left by point-in-time testing. This ...

person. In Technology, we’re asking that you attend the office a minimum of 1 day per week. About the Role As an experienced Penetration Tester at Starling, you’ll be joining an established team, working with talented cyber security professionals to ensure our services are designed, developed … operated securely. This is a collaborative role - you’ll directly interact with multiple areas of the business to understand requirements, conduct research, perform security testing, and report issues aligned to our risk framework. Being an internal tester, you’ll gain a strong understanding of how technology works at Starling ...

person. In Technology, we're asking that you attend the office a minimum of 1 day per week. About the RoleAs an experienced Penetration Tester at Starling, you'll be joining an established team, working with talented cyber security professionals to ensure our services are designed, developed and operated … securely. This is a collaborative role - you'll directly interact with multiple areas of the business to understand requirements, conduct research, perform security testing, and report issues aligned to our risk framework. Being an internal tester, you'll gain a strong understanding of how technology works at Starling ...

draw attention to opportunities for enhancing our delivery and providing additional services to organisations we work with. We are seeking a skilled Offensive Security penetration tester to join our dynamic team. This role involves conducting sophisticated penetration testing and red team engagements across various client systems … knowledge of the threat landscape, cyber defence best practices and regulatory expectations. There will be opportunities to gain experience with web applications and API testing, Wireless assessments, Internal infrastructure tests, Mobile App security, Red and Purple team operations, Physical intrusion testing, hardware analysis, and more. ...

with Customers and security researchers Basic qualifications- Experience in any combination of the following: application security frameworks, security code reviews, incident response, secure infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls, threat modeling, cryptography, threat intelligence, or secure software development- Knowledge of system … security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent- Experience in scripting, programming, or security code reviewing in a common language, such as Python, Java, or C++- Experience with AWS products and services- Experience working with device technologies under development, familiarity with ...

client, a leading technology business specialising in cybersecurity and penetration testing, is seeking an AI Software Engineer to join its permanent, fully remote team in the UK. This senior-level role focuses on building intelligent AI agents that can plan, reason, operate security tooling and identify exploitable vulnerabilities … within controlled environments. Key Responsibilities: Design, build and deploy AI agents that automate penetration testing, including planning, tool use and reasoning over security findings Develop sandboxed cyber-lab and range infrastructure using containers and Kubernetes Deliver AI features from initial design through to production, including evaluations, guardrails ...

operational technology (OT), embedded systems, relevant international cyber security standards and regulations (including ISO/SAE 21434, UNECE R155, UNECE R156, and ISO 26262), penetration testing methodologies, and the broader transport ecosystem. In addition to technical delivery, the individual will play a key role in supporting business development … Road Vehicle Cybersecurity Engineering) UNECE R155 (Cyber Security Management System) UNECE R156 (Software Update Management System) ISO 26262 (Functional Safety) Conduct or support penetration testing, vulnerability assessments, architecture reviews, risk assessments, and Threat Analysis and Risk Assessments (TARA) for automotive clients. Provide expert interpretation of cyber security requirements ...

leading Financial Services client in the City of London is looking for a Senior Cyber Threat & Vulnerability Manager to lead its cyber threat, vulnerability, penetration testing and exposure management capabilities. This is a senior, hands-on role within the CISO function, focused on identifying and responding to emerging … Threat, Vulnerability and Exposure Management function. Drive the prioritisation and remediation of high and critical vulnerabilities, including zero-day and actively exploited threats. Own penetration testing programmes, including scoping, delivery, findings and remediation. Develop and improve vulnerability governance, SLAs, processes and reporting. Work closely with Technology, Cloud, Security ...

Contribute to leading-edge security and resilience efforts, advancing protective strategies and propelling continuous improvement. As an Assessments & Exercises Vice President in the Penetration Testing team, you will contribute significantly to enhancing the firm's cybersecurity or resiliency posture by using industry-standard assessment methodologies and techniques … proactively identify risks and vulnerabilities in people, processes, and technology. As part of the team, your primary responsibility will be performing hands on penetration testing of some of JPMC's most critical applications, platforms, and the perimeter. You will work with application developers to not only understand root ...

Contribute to leading-edge security and resilience efforts, advancing protective strategies and propelling continuous improvement. As an Assessments & Exercises Vice President in the Penetration Testing team, you will contribute significantly to enhancing the firm's cybersecurity or resiliency posture by using industry-standard assessment methodologies and techniques … proactively identify risks and vulnerabilities in people, processes, and technology. As part of the team, your primary responsibility will be performing hands on penetration testing of some of JPMC's most critical applications, platforms, and the perimeter. You will work with application developers to not only understand root ...

important business services, test severe but plausible cyber scenarios, track vulnerabilities and support recovery within agreed RTOs Vulnerability Management & Assurance: Own vulnerability scanning, penetration testing, security testing and remediation governance. Prioritise issues based on exploitability, exposure and business impact. Report progress clearly and challenge overdue remediation Identity … diligence, onboarding, renewal, exit planning and ongoing assurance. Support the management of material outsourcing and critical technology dependencies, including evidence of controls, resilience testing and incident notification requirements Policy, Standards & Control Framework: Maintain cyber security policies, standards and control baselines. Align controls to recognised frameworks such ...

data, so that governments, nation states, armed forces and commercial businesses can unlock digital advantage in the most demanding environments. Job Title: Senior Security Penetration Testing Consultant Location: London, Gloucester, Guildford, Manchester, Leeds or Frimley (Occasional office work, with 25% International Travel) Salary: Competitive Who we are Join … space - there's no limit to where a career at BAE Systems could take you. Role Description Delivery of end-to-end security testing engagements, including scoping and client wash-up meetings. Performing application testing, web and mobile tests, infrastructure testing, objective based tests, and intelligence ...

data, so that governments, nation states, armed forces and commercial businesses can unlock digital advantage in the most demanding environments. Job Title: Senior Security Penetration Testing Consultant Location: London, Gloucester, Guildford, Manchester, Leeds or Frimley (Occasional office work, with 25% International Travel) Salary: Competitive Who we are Join … space – there’s no limit to where a career at BAE Systems could take you. Role Description Delivery of end-to-end security testing engagements, including scoping and client wash-up meetings. Performing application testing, web and mobile tests, infrastructure testing, objective based tests, and intelligence ...

that supports how our engineering teams build and operate complex systems at scale. Take the next step in your career. Role As a Penetration Tester, you will lead and conduct penetration tests and vulnerability assessments across a wide range of internal systems and security controls. Your work will … directly strengthen our overall security posture through continuous testing, actionable insights and collaboration on remediation strategies. Responsibilities Perform in-depth penetration testing across a variety of technologies, including Kubernetes, Jenkins and Windows Domain Services. Deliver practical, impactful remediation advice to Control Owners based on identified vulnerabilities. Support ...

that supports how our engineering teams build and operate complex systems at scale. Take the next step in your career. The roleAs a Penetration Tester, you will lead and conduct penetration tests and vulnerability assessments across a wide range of internal systems and security controls. Your work will … directly strengthen our overall security posture through continuous testing, actionable insights and collaboration on remediation strategies. Key responsibilities of the role include: Performing in-depth penetration testing across a variety of technologies, including Kubernetes, Jenkins and Windows Domain ServicesDelivering practical, impactful remediation advice to Control Owners based ...

using SIEM/EDR data and MITRE ATT&CK‐aligned techniques. Support vulnerability assessment and security scanning activities using relevant tools. Provide input into penetration testing activities and interpret findings for remediation. Deliver training, coaching, and knowledge transfer to enhance the existing cybersecurity team's skills in CrowdStrike … enterprise environments. Experience supporting or working alongside managed SOC providers. At least 2 years’ experience in vulnerability assessment tools (desirable). Exposure to penetration testing and web application security testing (desirable). Expert‐level experience with CrowdStrike Falcon (Prevent, Insight, Discover). Strong expertise in Splunk, including ...

will conduct security assessments, design security architectures, and help clients build security programs that meet regulatory requirements without creating operational friction. Responsibilities Lead penetration testing and vulnerability assessment engagements Design security architectures for cloud-native and hybrid environments Develop security compliance programs (SOC 2, ISO 27001, GDPR) Conduct … tabletop exercises Advise C-level executives on security strategy and risk management Requirements 8+ years in information security with consulting experience Deep expertise in penetration testing, vulnerability management, and threat modeling Knowledge of compliance frameworks: SOC 2, ISO 27001, GDPR, PCI-DSS Experience with cloud security (AWS Security ...

security assessments within agreed deadlinesProduce written and verbal reports for clients to an excellent standard. Develop and share knowledge with the rest of the penetration testing teamWork with teams across PA Consulting, providing technical knowledge and expertise where requiredBe self-motivated and client oriented, aiming to exceed expectations … other industry recognised certifications such as the OSCP or CREST/CyberScheme qualificationsHave developed their SME knowledge in one or more fields of penetration testing, such as mobile application testing, Cloud, Operational Technology, or a specific industry/environment such as telecoms, defence, or maritimeDesire to help ...

challenge to business, technology, and cyber teams on cyber security matters. Review complex cyber issues and support solution design, including findings from offensive security testing, vulnerability management, incident lessons learned, and architecture reviews. Translate security insights into practical risk based remediation plans that reduce risk exposure for the organization. … engage senior engineers, architects, offensive security specialists, risk teams, and senior business stakeholders. Practical offensive security awareness, including attack paths, common enterprise weaknesses, penetration testing outputs, red/purple team findings, exploitability, and risk-based remediation. Security solution architecture knowledge across cloud, identity and access management, network security ...

help ensure security is considered by design. Assessing cloud security controls and supporting alignment with industry good practice and regulatory expectations. Supporting vulnerability management, penetration testing and remediation activities. Working alongside developers and engineers to embed security throughout the software development lifecycle. Conducting root cause analysis and helping … ensure lessons learned drive continual improvement. Producing reporting and insights into cyber threats, incidents and control effectiveness. Supporting cyber resilience, disaster recovery testing and business continuity planning. Delivering cyber exercises and incident simulations that strengthen organisational preparedness. What You Will Bring You’ll be successful in this role ...

exercises, communication protocols and post‐incident reviews. Manage the relationship and operational effectiveness of external cybersecurity partners/vendors, including SOC/MDR providers, penetration testing providers, security assessors and awareness/training providers. Lead vulnerability and exposure management across endpoints, servers, cloud, SaaS, identity, network and externally … through targeted awareness, phishing resilience, executive briefings and role‐specific guidance for higher‐risk groups. Drive continuous improvement through lessons learned from incidents, audits, penetration tests, risk assessments and technology changes. Required qualifications and experience Bachelor’s or Master’s degree in Computer Science, Information Security, Life Sciences ...

J.P. Morgan is seeking an Assessments & Exercises Vice President for the Penetration Testing team to enhance cybersecurity posture through hands-on testing of critical applications, platforms, and perimeter defenses. You will work with developers to root cause issues and embed security improvements early in the SDLC. Candidates … should demonstrate strong security knowledge, hands-on testing skills across web, mobile and cloud, and the ability to communicate findings clearly to stakeholders to #J-18808-Ljbffr ...