23 of 23 Permanent Penetration Testing Jobs in Scotland

Security Consultant (Penetration Testing) Location: Hybrid (UK) Salary: Competitive + Benefits Security Clearance: Current SC preferred About Citation Cyber Citation Cyber is one of the UK's leading cyber security consultancies, delivering penetration testing, Cyber Essentials certification, consultancy, training and managed cyber security services to organisations … across both the public and private sectors. As an NCSC CHECK provider and CREST member company , we're continuing to grow our penetration testing team and are looking for a talented Security Consultant to join us. Whether you're already a CHECK Team Member ...

Since being acquired by Nomios in late 2024, Dionach by Nomios has continued its dynamic growth as a leading information security company. Specializing in penetration testing and information assurance services, we offer an incredible opportunity to be part of an experienced team, build your skills, and grow professionally. … application process, let us know, and we'll work to meet your needs. What You'll Do Lead and mentor a team of Penetration testers, fostering a collaborative and high-performance work environment. Lead and oversee complex infrastructure penetration tests ensuring that they are conducted thoroughly ...

Citation Cyber is a leading UK cyber security consultancy delivering penetration testing, certification, consultancy, training and managed cyber security services across public and private sectors. As a CHECK provider and CREST member, Citation Cyber is growing its penetration testing team and seeks a Security Consultant ...

leadership, innovative thinking, curiosity, and existing deep technical expertise to help Quorum Cyber close the distance between AI speed and efficiency, and human insight. Penetration testing, API and web application testing, and red teaming are delivered the traditional way: a skilled human, a scope document, a fixed … agent-building are both non-negotiable. Offensive security depth Around 7 years hands-on, including at least 4 delivering client-facing engagements. Network testing: external and internal, Active Directory attack paths, privilege escalation, lateral movement, post-exploitation. Web and API testing: the OWASP Top 10 and, more importantly ...

Citation Cyber seeks a Security Consultant (Penetration Testing) to join our hybrid UK team, delivering a range of security assessments across client environments and producing clear reports with remediation recommendations. Essential experience includes consultancy pentest work, strong reporting, Windows/Linux/AD knowledge, cloud security testing ...

Citation Cyber is seeking a Security Consultant (Penetration Testing) to join our expanding team. You'll deliver a range of security assessments across client environments, identifying vulnerabilities and helping strengthen cyber resilience in hybrid UK engagements. The role requires experience in infrastructure and web app testing, reporting ...

engineering practices and reduce manual effortLead threat modelling across product domains and help teams identify and address risks at key trust boundariesEstablish repeatable security testing practices using automation and targeted manual assessmentCoordinate penetration testing and targeted security assessments across relevant product domainsSupport vulnerability intake, triage, remediation, coordinated … security practices and tooling into CI/CD pipelines Experience using AI tools to automate security practices and previously manual activitiesExperience scoping or coordinating penetration testing engagements#li-hybridYour profile will be reviewed and you'll hear from us once we have an update. At Sonos we take ...

Since being acquired by Nomios in late 2024, Dionach by Nomios has continued its dynamic growth as a leading information security company. Specializing in penetration testing and information assurance services, we offer an incredible opportunity to be part of an experienced team, build your skills, and grow professionally. … required. Candidates must be eligible to work in the UK and willing to undergo the necessary vetting processes. What You'll Do Conduct penetration tests across various environments, including web applications, APIs, Cloud, and network infrastructure. Issue detailed reports outlining findings, risks, and recommendations for remediation. Translate complex technical ...

Penetration Tester Programme - No Experience Required This is a self-funded career programme with a guaranteed job on completion or 100% of your course fees back Train. Certify. Get Hired. Are you looking to start a career in Penetration Testing but don't know where to begin ...

Penetration Tester Programme - No Experience Required This is a self-funded career programme with a guaranteed job on completion or 100% of your course fees back Train. Certify. Get Hired. Are you looking to start a career in Penetration Testing but don't know where to begin ...

Penetration Tester Programme - No Experience Required This is a self-funded career programme with a guaranteed job on completion or 100% of your course fees back Train. Certify. Get Hired. Are you looking to start a career in Penetration Testing but don't know where to begin ...

Penetration Tester Programme - No Experience Required This is a self-funded career programme with a guaranteed job on completion or 100% of your course fees back Train. Certify. Get Hired. Are you looking to start a career in Penetration Testing but don't know where to begin ...

with frameworks including MITRE ATT&CK, NIST, and CIS. Strong communication, analytical, and presentation skills. Solid understanding of network traffic flows, vulnerability management, and penetration testing principles. Knowledge of ITIL processes (Incident, Problem, Change Management). Ability to work independently and thrive in a 24/ ...

Hardening - Proactive and risk-based vulnerability management, including attack surface reduction, system hardening, remediation support, and cloud security posture improvement. You will also coordinate penetration testing and security assessments, and drive the findings through to remediation. Automation and Continuous Improvement - Reduce manual effort across security operations through automation … Defender alerts. Microsoft Sentinel, including writing and tuning your own KQL queries, analytic rules, and workbooks. Microsoft Entra ID and Conditional Access policy design, testing, and troubleshooting. Microsoft Purview, Intune security controls, email security, and endpoint detection and response. Automation. Practical experience of removing manual effort from security operations ...

Excellent communication skills with the ability to work closely with developers and technical stakeholders Desirable Experience with: Vulnerability research/exploit development Manual penetration testing Cloud, web, embedded or mobile security Splunk/OSQuery AI/ML security Distributed systems AWS Security Specialty, OSCP, CISSP, CCSP, CCAK ...

with business priorities. Our commitment to security and quality is reinforced by our ISO27001 and ISO9001 certifications (UKAS), as well as our CREST approved penetration testing and SOC capabilities. Additionally, we are an IASME Cyber Essentials Certification Body and Cyber Essentials Plus certified. Find out more about ...

Assess and advise on risks relating to LLMs, Agentic AI, RAG architectures, prompt injection, data poisoning, model theft, and AI supply chain threats. Define penetration testing scope and collaborate closely with testing teams to validate security controls and remediation activities. Act as a trusted security advisor ...

organisation’s policies, protocols and guidance in relation to Information and Cyber Security. - Assist in the design, scoping and review of cyber security testing of the organisation’s infrastructure, services and products e.g. penetration testing of networks by a third party. - Carry out any other duties ...

with business priorities. Our commitment to security and quality is reinforced by our ISO27001 and ISO9001 certifications (UKAS), as well as our CREST approved penetration testing and SOC capabilities. Additionally, we are an IASME Cyber Essentials Certification Body and Cyber Essentials Plus certified. Find out more about ...

Dionach by Nomios is seeking an experienced Lead Penetration Tester to guide a skilled team across web, mobile, internal and infrastructure tests. You will lead on-site engagements and act as the CHECK authority, delivering detailed reports and remediation guidance. Applicants should have extensive pen-testing experience, strong ...

What you’ll bring to the role: 3-5 years of experience directly in Cybersecurity related fields (Hunt, Intelligence, Detection Engineering, Blue Teaming, Pen testing, Incident Response, SOC Operations, Cyber Risk) or relevant educational experience. Ability to work with customers, gather requirements and distil them into complete solutions. Detailed ...

meet compliance standards and industry best practices. Perform security code reviews and act as a technical SME for engineering and compliance teams. Security Testing & DevSecOpsDeploy and manage automated security tools (SCA/SBOM, SAST, DAST, Secret Scanning) within CI/CD pipelines. Apply manual network/application testing … pipelines. Software Engineering: Hands-on development experience, specifically in Go and C#.Standards & Frameworks: Knowledge of NIST, ISO 27001, CIS, and OWASP (ASVS/Testing Guides). Desirable QualificationsAdvanced Technical Skills: Deep vulnerability research, exploit R&D, manual pentesting (cloud/web/embedded/mobile), SIEM/logging platforms ...

Cyber Resilience Act (CRA).* Secure Development Lifecycle (SDL) practices.* Security certification frameworks such as PSA Certified, SESIP, or Common Criteria.* Vulnerability management, penetration testing, or security assessments.* Hardware/software security co-design.* Artificial Intelligence and AI security.**Creating Secure Connections and Infrastructure for a Smarter World ...