251 to 275 of 516 Permanent Penetration Testing Jobs

another area of Cyber Security. Our industry-renowned and awarded training program will teach you to perform web application security assessment, network and infrastructure testing, applied research, consultancy skills, and more. You will propel your career and be on the fast track to becoming a full fledge Penetration … writing You’ll work through real-world scenarios using tools like Burp Suite, Kali Linux, and custom NCC Group platforms. Expect to learn manual testing techniques alongside automated approaches You’ll observe live client engagements, gaining exposure to different industries, threat models, and testing methodologies Midway through ...

Hardening - Proactive and risk-based vulnerability management, including attack surface reduction, system hardening, remediation support, and cloud security posture improvement. You will also coordinate penetration testing and security assessments, and drive the findings through to remediation. Automation and Continuous Improvement - Reduce manual effort across security operations through automation … Defender alerts. Microsoft Sentinel, including writing and tuning your own KQL queries, analytic rules, and workbooks. Microsoft Entra ID and Conditional Access policy design, testing, and troubleshooting. Microsoft Purview, Intune security controls, email security, and endpoint detection and response. Automation. Practical experience of removing manual effort from security operations ...

resolved within agreed SLAs. Coordinate vulnerability management activities, driving remediation across infrastructure, applications and cloud services. Conduct security assessments, technical reviews and support penetration testing programmes. Support and maintain the Information Security Management System (ISMS), including ISO 27001 and Cyber Essentials Plus compliance activities. Perform risk assessments ...

Threat Management Owning the end-to-end vulnerability management lifecycle, from scanning and validation through to prioritisation, remediation and reporting. Managing internal and external penetration testing and working with Engineering teams to resolve findings. Identity, Cloud & Technical Security Assuring Identity and Access Management controls including MFA, privileged access ...

privilege, contextual access control and segmentation of services, users and devices Defining and reviewing security assurance activities, including design assurance, verification, validation, vulnerability assessment, penetration testing inputs and interpretation of assurance evidence Developing and communicating corporate and domain information security policy, standards, guidelines and design guardrails Identifying ...

privilege, contextual access control and segmentation of services, users and devices Defining and reviewing security assurance activities, including design assurance, verification, validation, vulnerability assessment, penetration testing inputs and interpretation of assurance evidence Developing and communicating corporate and domain information security policy, standards, guidelines and design guardrails Identifying ...

solutions Experience of threat intelligence Leadership and mentoring experience and skills Understanding of low-level concepts including operating systems and networking Commercial experience in Penetration Testing and/or Security Monitoring Understanding of networking and infrastructure design Knowledge/experience of one or more System administration (Linux, Windows ...

before moving into security. Credibility with engineers and the ability to ship fixes, not just file tickets.Offensive security background (web/API or cloud penetration testing, exploit development, CTFs) used to inform defensive design.Experience securing multi-tenant SaaS at scale, including tenant isolation and EU data residency requirements.Experience ...

infrastructure. You’ll lead the implementation and management of SIEM systems, Fortinet security tools, and endpoint detection & response (EDR) while conducting vulnerability assessments and penetration testing to stay ahead of cyber threats. You’ll enhance identity and access management (IAM) by maintaining Active Directory, Entra ...

DAST platforms, ensuring coverage, configuration, and outputs are maintained to a defined standard Managing the vulnerability management programme, including coordination of internal and external penetration testing Conducting internal security audits and risk assessments, producing findings reports and tracking remediation Supporting ISO 27001 compliance activity, including contributing to control ...

scale and bespoke to the organisation.Oversee security within network architecture, encryption protocols, and identity/access management for restricted environments.Direct cyber security audits and penetration testing across defence platforms and supply chains.Provide cyber security training and awareness programs tailored to defence staff and contractors.Collaborate with engineering ...

endpoint protection, email security, firewalls) and respond to alerts Investigate and respond to security incidents, including root-cause analysis and remediation Manage vulnerability scanning, penetration testing follow-ups, and patching coordination Support and review access and access control policies, including privileged access controls. Monitor Threat Intelligence to ensure ...

network, cloud, memory, and email forensics, incident response including the technical management of high‐profile security incidents, threat hunting and analysis, web application security, penetration testing, leading red and/or blue teaming exercises, and open‐source intelligence (OSINT). This role requires a logical, pragmatic, meticulous, analytical ...

complex multi-supplier or multi-team environment, as an architect rather than an assessor. Experience conducting or coordinating technical security reviews and penetration testing in UK public sector contexts, including remediating findings and briefing senior technical stakeholders. Working knowledge of exposure management beyond CVE-only approaches — incorporating misconfiguration ...

Senior and Principal level Consultants. Working within a defence-focused environment, you will deliver threat-led security assessments, adversary emulation activities and advanced security testing for customers operating within complex and high-assurance environments. You will emulate realistic cyber threats, assess the effectiveness of security controls and provide actionable … also wanting to influence how a capability develops and matures over time. Core areas (must have): Experience delivering red team, adversary simulation or advanced penetration testing activities. Relevantcertifications relating tored teaming. Strong technical skills in one or more of the following areas: initial access, cloud exploitation, malware development ...

Senior and Principal level Consultants. Working within a defence-focused environment, you will deliver threat-led security assessments, adversary emulation activities and advanced security testing for customers operating within complex and high-assurance environments. You will emulate realistic cyber threats, assess the effectiveness of security controls and provide actionable … also wanting to influence how a capability develops and matures over time. Core areas (must have) Experience delivering red team, adversary simulation or advanced penetration testing activities. Relevant certifications relating to red teaming. Strong technical skills in one or more of the following areas: initial access, cloud exploitation ...

readiness. Provide insights and triage signals from security tooling (SAST, DAST, dependency scanning, SIEM). Work hands-on to perform internal security assessments or penetration testing. Manage relationships with external pentest providers, auditors, and assessors. Secure Development Lifecycle (SDLC) Partner with engineering teams to embed security in the SDLC … security standards and frameworks (ISO 27001, SOC 2, CIS, NIST, GDPR, EU AI Act). Hands-on technical skills in areas such as penetration testing, application security, or infrastructure hardening. Familiarity with modern software development practices, DevSecOps, and cloud-native architectures (preferably Python eco-system, Kubernetes and Azure ...

architectures, cloud services and system integrations. Drive the implementation and continual improvement of security controls across applications, infrastructure and cloud environments. Assess vulnerabilities, review penetration testing results and support remediation activities. Monitor emerging threats and security trends, helping the business respond proactively. Contribute to the development and enhancement ...

Responsibilities Maintain and improve the Information Security Management System (ISMS), policies, procedures and controls. Lead cybersecurity risk assessments, threat modelling and security reviews. Oversee penetration testing, vulnerability management and remediation activities. Advise on secure design, cloud security, mobile security, authentication, encryption and access control. Embed cybersecurity requirements within ...

rota. Desirable skills and experience Threat hunting, detection-rule development, alert tuning, malware analysis or digital forensics experience. Knowledge of vulnerability and exposure management, penetration-testing remediation and security-control assurance. Knowledge of ISO 27001/27002, Cyber Essentials Plus, MITRE ATT&CK or comparable security frameworks. Relevant ...

enthusiastic security consultant to join our team. Working alongside some of the best hacking minds in the country, you will be delivering pen testing services to a diverse range of clients, from presales through to delivery and debriefs. We are looking for a consultant with a minimum … years’ experience in pen testing who can deliver the following: Web application testing API testing External & Internal Infrastructure testing (including build reviews) Mobile application testing (including knowledge of standards such as OWASP MASVS) Experience testing in any of the following areas is also desirable ...

load for engineering teams, and improve release velocity. What You’ll Do Design, develop, and maintain CI/CD pipelines to automate software builds, testing, and releases. Build and maintain internal tooling to support the software development lifecycle (e.g., code quality analysis, dependency management, automated testing). Collaborate … maintain infrastructure as code (IaC) for internal development environments. Work closely with development teams to troubleshoot and resolve issues related to build processes, testing, and deployments. Coordinate penetration testing, code/virus scanning, and disseminate findings to the engineering team for resolution. Measure performance and environment ...

incidents - Implement and manage SAST/SCA tooling across application repositories to identify source code risks - Scale automated DAST solutions across applications to maximise testing coverage - Carry out penetration testing on internally developed applications Required Skills/Experience: - Experienced in application security focussing on red, blue ...

Assess and advise on risks relating to LLMs, Agentic AI, RAG architectures, prompt injection, data poisoning, model theft, and AI supply chain threats. Define penetration testing scope and collaborate closely with testing teams to validate security controls and remediation activities. Act as a trusted security advisor ...

proactive threat hunting to catch what existing controls miss Build and refine detection use cases, playbooks, and operational procedures Support vulnerability management, security testing, and control validation (including penetration testing coordination and phishing simulations) Produce clear technical reports and root-cause analysis following incidents and investigations ...