51 to 75 of 313 Permanent Penetration Testing Jobs

using SIEM/EDR data and MITRE ATT&CK‐aligned techniques. Support vulnerability assessment and security scanning activities using relevant tools. Provide input into penetration testing activities and interpret findings for remediation. Deliver training, coaching, and knowledge transfer to enhance the existing cybersecurity team's skills in CrowdStrike … enterprise environments. Experience supporting or working alongside managed SOC providers. At least 2 years’ experience in vulnerability assessment tools (desirable). Exposure to penetration testing and web application security testing (desirable). Expert‐level experience with CrowdStrike Falcon (Prevent, Insight, Discover). Strong expertise in Splunk, including ...

organization.ResponsibilitiesPlay a critical role in building and maintaining a global security compliance program based on NIST CSF.Scale application security by developing automated security testing utilizing enterprise SAST, DAST, and code-review tools.Champion SDLC to promote secure application development and infrastructure deployment and facilitate secure coding remediation activities.Automate security testing … risks early in the SDLC.Coordinate with stakeholders to develop and implement a vulnerability management program and to perform threat-hunting activities.Own and conduct internal penetration testing and vulnerability assessments of applications and infrastructure, and validate findings from third-party pentest engagements.Monitor and respond to application-layer security threats ...

pipelines. Ability to oversee the delivery and operation of application and container security services, including SAST, DAST, SCA, RASP, perimeter scanning, and associated security testing capabilities. Experience of supporting Red Team and penetration testing activities, including test planning, scheduling, execution oversight, and integration of findings into … risk-based prioritisation of security findings. Ability to develop and maintain a deep understanding of TSB's technology estate and customer journeys, ensuring security testing and assurance activities are focused on critical business services, key applications, and supporting infrastructure. Experience of leadership, governance, and reporting to senior stakeholders, delivering ...

quality security assessments within agreed deadlinesProduce written and verbal reports for clients to an excellent standard.Develop and share knowledge with the rest of the penetration testing teamWork with teams across PA Consulting, providing technical knowledge and expertise where requiredBe self-motivated and client oriented, aiming to exceed expectations … other industry recognised certifications such as the OSCP or CREST/CyberScheme qualificationsHave developed their SME knowledge in one or more fields of penetration testing, such as mobile application testing, Cloud, Operational Technology, or a specific industry/environment such as telecoms, defence, or maritimeDesire to help ...

will conduct security assessments, design security architectures, and help clients build security programs that meet regulatory requirements without creating operational friction. Responsibilities Lead penetration testing and vulnerability assessment engagements Design security architectures for cloud-native and hybrid environments Develop security compliance programs (SOC 2, ISO 27001, GDPR) Conduct … tabletop exercises Advise C-level executives on security strategy and risk management Requirements 8+ years in information security with consulting experience Deep expertise in penetration testing, vulnerability management, and threat modeling Knowledge of compliance frameworks: SOC 2, ISO 27001, GDPR, PCI-DSS Experience with cloud security (AWS Security ...

constructive challenge to business, technology, and cyber teams on cyber security matters.Review complex cyber issues and support solution design, including findings from offensive security testing, vulnerability management, incident lessons learned, and architecture reviews.Translate security insights into practical risk based remediation plans that reduce risk exposure for the organization.Lead … credibility to engage senior engineers, architects, offensive security specialists, risk teams, and senior business stakeholders.Practical offensive security awareness, including attack paths, common enterprise weaknesses, penetration testing outputs, red/purple team findings, exploitability, and risk-based remediation.Security solution architecture knowledge across cloud, identity and access management, network security ...

collaborative Test Manager to join the Trust Payments Retail team. You will own and shape the overall test strategy across both manual and automated testing disciplines, with automation being the primary area of growth and strategic focus.Working closely with Development Managers and wider technical stakeholders, you will help transition … hybrid arrangement may be considered.What We Expect of You, Day To Day:Own the end-to-end test strategy across manual and automated testing, ensuring it is understood and adopted across all relevant teamsDefine and lead the automation testing vision, identifying opportunities to automate across functional, regression ...

ability to present effectively to C-Suite leaders Strong understanding of the end-to-end vulnerability-scanning lifecycle and the effective management of penetration testing activities. Excellent security awareness with a proactive approach to continuous improvement Eligible and willing to undergo security clearance vetting Responsibilities for Security Analyst … Conditional Access, MFA, PIM and Identity Protection Implement and maintain Microsoft Sentinel, Purview and the Defender suite Manage the vulnerability-scanning lifecycle and coordinate penetration-testing activities Maintain security and sharing controls across email, SharePoint, OneDrive and Teams, including DLP, sensitivity labels, encryption and removable-media controls Manage ...

with infrastructure, application and business stakeholders to drive timely remediation of security weaknesses.* Validate remediation actions and help maintain accurate vulnerability reporting.* Support external penetration testing activities and track remediation actions through to completion.### ## Cloud, Microsoft 365 & Infrastructure* Support Azure administration and cloud security improvement initiatives.* Assist … routing and secure remote access.* PowerShell scripting or automation experience.* Exposure to ISO 27001, SOC 2, Cyber Essentials, NIST or similar security frameworks.* Penetration testing, vulnerability assessment or remediation experience.* Experience supporting audits, evidence collection, access reviews or security questionnaires.* Relevant certifications such as Security+ ...

full application stacks from the OS up through custom applications, or experience working with REST API based services and experience with threat modeling and penetration testing 5+ years of work in identifying security issues and risks, and developing mitigation plans experience 4+ years of (non-internship) scripting, programming … architectures/microservices and web services Experience in one or more of the following: application security frameworks, security code reviews, incident response, security infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls Experience developing, deploying and managing AI products at scaleExperience in security ...

primary architect for global cyber solution design across managed services, advisory offerings, and large scale transformation deals. This includes solutioning for MDR, penetration testing, vulnerability management, attack surface management, and cyber risk management.How will you make your mark The architect will translate client requirements into scalable and repeatable … expected to guide and mentor regional solution architects.This is the job for you if you have• Extensive experience designing cyber managed services including MDR, penetration testing, vulnerability scanning, attack surface management, and threat exposure management.• Experience leading or architecting large scale, multi region cyber programs across enterprises ...

exercises, communication protocols and post‐incident reviews. Manage the relationship and operational effectiveness of external cybersecurity partners/vendors, including SOC/MDR providers, penetration testing providers, security assessors and awareness/training providers. Lead vulnerability and exposure management across endpoints, servers, cloud, SaaS, identity, network and externally … through targeted awareness, phishing resilience, executive briefings and role‐specific guidance for higher‐risk groups. Drive continuous improvement through lessons learned from incidents, audits, penetration tests, risk assessments and technology changes. Required qualifications and experience Bachelor’s or Master’s degree in Computer Science, Information Security, Life Sciences ...

Service (SaaS) platforms. Implement and maintain Microsoft Defender , Microsoft Sentinel , Microsoft Purview , and other security technologies . Lead vulnerability management and coordinate penetration testing activities. Secure Microsoft 365 services, including Exchange Online , SharePoint Online , OneDrive , and Microsoft Teams . Implement data protection controls, including Data Loss Prevention … security role. Strong technical expertise in Microsoft Entra ID , Microsoft Defender Suite , Microsoft Sentinel , and Microsoft Purview . Proven experience managing vulnerability scanning and penetration testing programmes. Experience supporting ISO 27001 compliance and coordinating Cyber Essentials and Cyber Essentials Plus certifications. Strong analytical, problem-solving, and risk assessment ...

standards, regulations, and frameworks. Oversee the deployment and operation of security tools and technologies (e.g., firewalls, SIEM, endpoint protection, zero-trust technologies). Manage penetration testing and other assurance activities, including remediation of findings. Lead incident response planning and investigation of security breaches, ensuring timely resolution and reporting. … such as firewalls, SIEM, endpoint protection, and vulnerability management tools. Skilled in conducting risk assessments, managing IT risk registers, and overseeing assurance activities including penetration testing and incident response. Familiarity with relevant standards and frameworks (e.g. ISO 27001, NIST, COBIT, GDPR, DORA). Strong stakeholder engagement skills, with ...

standards, regulations, and frameworks. Oversee the deployment and operation of security tools and technologies (e.g., firewalls, SIEM, endpoint protection, zero-trust technologies). Manage penetration testing and other assurance activities, including remediation of findings. Lead incident response planning and investigation of security breaches, ensuring timely resolution and reporting. … such as firewalls, SIEM, endpoint protection, and vulnerability management tools. Skilled in conducting risk assessments, managing IT risk registers, and overseeing assurance activities including penetration testing and incident response. Familiarity with relevant standards and frameworks (e.g., ISO 27001, NIST, COBIT, GDPR, DORA). Strong stakeholder engagement skills, with ...

NIST, CIS Controls, and Cyber Essentials/Cyber Essentials Plus Support clients with governance, risk, and compliance (GRC) initiatives Review vulnerability assessment and penetration testing findings, providing remediation guidance Advise clients on security strategy, governance, policies, and best practices Assist organisations in improving their cloud security posture Prepare … Maturity Reviews Vulnerability Management Governance, Risk & Compliance (GRC) Cyber Essentials & Cyber Essentials Plus ISO 27001 NIST Framework CIS Controls Cloud Security Security Improvement Programmes Penetration Testing Remediation Desirable Skills Knowledge of Microsoft Security technologies and cloud-native security solutions Experience supporting security strategy development Commercial awareness and ability ...

degree in computer science or equivalent- Experience in any combination of the following: application security frameworks, security code reviews, incident response, secure infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls, threat modeling, cryptography, threat intelligence, or secure software development- Knowledge of system security … vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent- Experience in scripting, programming, or security code reviewing in a common language, such as Python, Java, or C++- Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such ...

development team to keep security central to web-based applications Focus on offensive web security as a bridge between Security and Engineering Perform penetration testing, reverse engineering and vulnerability assessments Identify security risks and work with developers to build secure, resilient web applications Provide expert guidance on secure … design decisions Embed security throughout the software development lifecycle Write and review production code. Требования Strong experience in web application security and offensive security testing Hands-on expertise in penetration testing and reverse engineering Deep understanding of modern web security vulnerabilities and mitigation techniques Commercial JavaScript experience ...

Graduate Security Consultant/Penetration Tester - Bristol - £28,000-34,000 We're looking for a motivated graduate to join a cyber consultancy team in Bristol and begin building a career in security consulting and penetration testing, with structured mentorship and training from day one. This … offensive security. What you'll be doing: Carrying out security assessments and vulnerability scans across client systems, networks and applications Taking part in penetration testing engagements under guidance and supervision, helping identify and exploit vulnerabilities in client environments Analysing security risks and contributing to recommendations that help clients ...

operational velocity and enable rapid response to millisecond attack speeds generated by autonomous adversary AI.Execute regular offensive security operations, including AI Red Teaming and penetration testing of generative and agentic systems.Lead the defense against Shadow AI by developing and deploying AI access governance tools and enforcing strict adherence … principles.Enforce secure-by-design principles and integrate security checks into the continuous AI development lifecycle (CI/CD), ensuring coverage for all AI system testing pre and post-deployment.Present complex security concepts (e.g., prompt injection, model drift) to non-technical audiences to drive security awareness and culture across ...

velocity and enable rapid response to millisecond attack speeds generated by autonomous adversary AI. Execute regular offensive security operations, including AI Red Teaming and penetration testing of generative and agentic systems. Lead the defense against Shadow AI by developing and deploying AI access governance tools and enforcing strict … Enforce secure-by-design principles and integrate security checks into the continuous AI development lifecycle (CI/CD), ensuring coverage for all AI system testing pre and post-deployment. Present complex security concepts (e.g., prompt injection, model drift) to non-technical audiences to drive security awareness and culture across ...

platforms you may be working with include: Cisco Firewalls Cisco Routers Cisco Switches Juniper Platforms SIEM Solutions IDS/IPS Vulnerability Management Tools Penetration Testing Tools Computer Forensic Tools ISO27001 Compliance ITIL Qualifications and requirements for the Cyber Security Engineer: Strong experience with Cisco Firewalls, Routers and Switches … Experience with Juniper networking platforms Hands-on knowledge of SIEM, IDS/IPS and vulnerability management Experience carrying out or supporting penetration testing activities Understanding of ISO27001, GDPR and ITIL best practices Ability to communicate technical cyber security concepts to both technical and non-technical stakeholders Eligible ...

implement and maintain robust security systems and protocols across the IT infrastructure. You will conduct risk assessments and vulnerability scans, mitigate vulnerabilities identified in penetration testing, and implement preventative measures to protect against cyber threats. You will monitor the security infrastructure and detect and respond to potential threats. … SSO.* Manage MDM\MAM and Conditional Access* Manage security certificates and keys.* Deliver Cyber Security Awareness Training* Remediate vulnerabilities and weaknesses identified during penetration testing.Experience - EssentialThe successful candidate will have a good working knowledge and experience in managing the majority of the following technology stack * CrowdStrike EDR* Mimecast Mail ...

implement and maintain robust security systems and protocols across the IT infrastructure. You will conduct risk assessments and vulnerability scans, mitigate vulnerabilities identified in penetration testing, and implement preventative measures to protect against cyber threats. You will monitor the security infrastructure and detect and respond to potential threats. … SSO. * Manage MDM\MAM and Conditional Access * Manage security certificates and keys. * Deliver Cyber Security Awareness Training * Remediate vulnerabilities and weaknesses identified during penetration testing. Experience - Essential The successful candidate will have a good working knowledge and experience in managing the majority of the following technology stack * CrowdStrike ...

applications. Joining a specialist security team, you'll focus on offensive web security, acting as the bridge between Security and Engineering. You'll perform penetration testing, reverse engineering and vulnerability assessments, identifying security risks and working closely with developers to build secure, resilient web applications from the ground … London office approximately twice a month for innovation sessions and team meetings.About you:You have strong experience in web application security and offensive security testing You have hands-on expertise in penetration testing and reverse engineering You have a deep understanding of modern web security vulnerabilities ...