1 to 25 of 66 Remote/Hybrid Penetration Testing Jobs in London

technical solutions against security, regulatory and business requirements. Conduct and support threat modelling, risk assessments and vulnerability assessments . Provide technical oversight of security testing and penetration testing activities. Support vulnerability management and help teams prioritise and remediate security risks. Work closely with architects, engineers, testers … Looking For You'll have significant experience in one or more of the following: Security Architecture Security Engineering Cloud Security Network Security Application Security Penetration Testing You'll also have: Strong knowledge of modern cyber threats, attack techniques and security risks. Experience applying Secure by Design principles across ...

with security, regulatory and business requirements. Conduct and support threat modelling, cyber risk assessments and vulnerability assessments. Provide technical oversight and recommendations for security testing and penetration testing activities. Support vulnerability management, helping teams prioritise and remediate security risks effectively. Collaborate with architects, engineers, testers and assurance … ideal candidate will bring significant experience in one or more technical cybersecurity disciplines, including: Security Architecture Security Engineering Cloud Security Network Security Application Security Penetration Testing Candidates should also demonstrate: A strong understanding of modern cyber threats, attack techniques and security risks. Experience applying secure-by-design principles ...

join our team. Working alongside our experienced team of specialists, you’ll be delivering offensive security services including digital footprint reconnaissance, social engineering, penetration testing and vulnerability assessments and more to high profile clients across all industries. The purpose of this role is to deliver our offensive security … services including digital footprint reconnaissance, social engineering, vulnerability assessments, penetration testing, threat modelling, cyber-attack simulation exercises, and more to high profile clients across all industries. You’ll benefit from ongoing coaching, career mentoring, and be supported by our career pathway. You will have an opportunity to continue ...

Title: Cyber Security Penetration Testing Consultant Locations: UK wide (hybrid work- 1x a month in office) Salary: Competitive salary and package (Depending on level of experience) Please Note:Any offer of employment is subject to satisfactory BPSS and SC security clearance which requires 5 years continuous UK address … typically including no periods of 30 consecutive days or more spent outside of the UK) at the point of application. Role overview As a Penetration Tester, you will deliver hands-on security testing of client web applications, APIs and infrastructure. Working within a collaborative testing team ...

supporting: Secure software development practices across our client Security integration into CI/CD pipelines (GitLab) Reduction of vulnerabilities through automated scanning and testing Assurance of internet-facing applications through structured penetration testing activities What you will do Provide security architecture expertise for application security and DevSecOps … software development, aligned to our clients Secure by Design principles Support the integration of security controls into CI/CD pipelines (GitLab), including automated testing and policy enforcement Design and implement application security controls, including: Static Application Security Testing (SAST) Dynamic Application Security Testing (DAST) Software Composition ...

supporting: Secure software development practices across our client Security integration into CI/CD pipelines (GitLab) Reduction of vulnerabilities through automated scanning and testing Assurance of internet-facing applications through structured penetration testing activities What you will do Provide security architecture expertise for application security and DevSecOps … development, aligned to our client's Secure by Design principles Support the integration of security controls into CI/CD pipelines (GitLab), including automated testing and policy enforcement Design and implement application security controls, including: Static Application Security Testing (SAST) Dynamic Application Security Testing (DAST) Software Composition ...

supporting: Secure software development practices across our client Security integration into CI/CD pipelines (GitLab) Reduction of vulnerabilities through automated scanning and testing Assurance of internet-facing applications through structured penetration testing activities What you will do Provide security architecture expertise for application security and DevSecOps … development, aligned to our client's Secure by Design principles Support the integration of security controls into CI/CD pipelines (GitLab), including automated testing and policy enforcement Design and implement application security controls, including: Static Application Security Testing (SAST) Dynamic Application Security Testing (DAST) Software Composition ...

person. In Technology, we’re asking that you attend the office a minimum of 1 day per week. About the Role As an experienced Penetration Tester at Starling, you’ll be joining an established team, working with talented cyber security professionals to ensure our services are designed, developed … operated securely. This is a collaborative role - you’ll directly interact with multiple areas of the business to understand requirements, conduct research, perform security testing, and report issues aligned to our risk framework. Being an internal tester, you’ll gain a strong understanding of how technology works at Starling ...

towards achieving a defined set of objectives identified between yourself and your line manager, tailoring to your goals and completing a pentesting certification. Conduct penetration test engagements for both applications and complex infrastructure setups, as well as retests, to gain a deep understanding of how we conduct cyber security … scope projects and advise teams on remediation of identified vulnerabilities. Gain a good understanding of how to conduct advanced infrastructure and advanced web application penetration tests. Develop an understanding of modern security testing methodologies covering applications, infrastructure, mobile platforms and emerging technologies, including AI-enabled systems. Conduct research ...

will conduct security assessments, design security architectures, and help clients build security programs that meet regulatory requirements without creating operational friction. Responsibilities Lead penetration testing and vulnerability assessment engagements Design security architectures for cloud-native and hybrid environments Develop security compliance programs (SOC 2, ISO 27001, GDPR) Conduct … tabletop exercises Advise C-level executives on security strategy and risk management Requirements 8+ years in information security with consulting experience Deep expertise in penetration testing, vulnerability management, and threat modeling Knowledge of compliance frameworks: SOC 2, ISO 27001, GDPR, PCI-DSS Experience with cloud security (AWS Security ...

will focus on finding and responding to security vulnerabilities across the Brex platform. In this role, you will perform code reviews, design reviews, penetration testing, and vulnerability management. You will develop and maintain tooling to perform static and dynamic testing of the Brex platform and tooling which … with Security Operations, GRC, Product Security, Front End Platform, IT Infrastructure teams. We're looking for individuals with a strong background and interest in penetration testing. You should have a demonstrated ability to find vulnerabilities in complex systems and craft exploits to demonstrate business impact. This role is highly ...

hire a Cyber Security Consultant. What you’ll be doing: Working with customers to define the scope and objectives of security assessments Delivering infrastructure penetration testing Delivering Cyber Essentials and Cyber Essentials Plus assessments Carrying out vulnerability assessments Identifying security gaps and providing practical remediation guidance Communicating technical … with emerging threats, technologies and security best practice What they’re looking for: 3+ years’ experience within IT or Cyber Security Experience delivering infrastructure penetration testing OR Cyber Essentials Plus assessments An industry-recognised certification such as CREST CRT, OSCP, Cyber Scheme CTSM, VA+ or equivalent Strong customer ...

solution architects to define and deliver secure architectures across enterprise IT and operational technology environments. You'll also collaborate with information assurance and penetration testing teams to validate security controls and develop effective security solutions. This is a client-facing role requiring strong technical judgement, stakeholder management … frameworks and standards including NIST, ISO and CIS . Advise on protective monitoring, authentication and authorisation best practice. Work closely with information assurance and penetration testing teams. Build strong relationships with senior stakeholders, technical teams and delivery partners. Communicate complex technical solutions clearly through documentation, presentations and stakeholder ...

understand unfamiliar code and contribute to automation. The confidence to work independently, take ownership and remain open to learning and feedback. Highly Desirable Penetration testing or offensive security experience, particularly if you want to move into defensive Product Security. Experience using AI or agentic AI within security engineering … Engineer, DevSecOps Engineer, Product Security, Application Security, Vulnerability Analysis, Secure SDLC, Threat Modelling, SAST, DAST, SCA, CI/CD Security, AI Security, Security Automation, Penetration Testing, Cloud Security, Cyber Security. #J-18808-Ljbffr ...

accommodation during the first few weeks The fellowship you’ll be joining: Join a band of talented SE’s with diverse expertise in consulting, penetration testing, incident response, and security operation centers. You'll report to the Senior Director, Global Solutions Engineering, and collaborate extensively with various departments … detail and organizational skills Strong assets include: Past experience working with Channel Partners in the EMEA region. Past work experience in Technical Consulting, Penetration Testing, Red Teaming, DFIR, or a combination of these fields is a strong asset. Relevant certifications in cybersecurity (e.g., CJCA, CDSA, CPTS, CEH, OSCP ...

colleagues and challenge practices that don't meet our standards. Own IT and information security compliance: Drive Cyber Essentials and Cyber Essentials Plus certifications, penetration testing and security assurance. Work with Engineering and other teams to make sure vulnerabilities are addressed and staff consistently follow security best practices. … healthcare technology or an organisation handling sensitive personal data. Experience with regulatory submissions, technical documentation, post-market surveillance or medical device certification. Experience coordinating penetration testing, security assessments or remediation programmes. Experience working in a healthtech startup or scale-up where you've helped establish or significantly improved ...

DevOps, automation, data and machine learning... We’re hiring a Senior Offensive Security Analyst with deep expertise in API Security, OAuth, and web application penetration testing. The role will exclusively focus on identifying weaknesses in authentication and authorisation implementations across multiple teams, ensuring consistency and strong security practices within … services. Please note: This role is fully remote and open to candidates located anywhere within the UK. Required Experience: Strong background in web application penetration testing Deep, hands‐on expertise in API Security, OAuth, JWT , and token‐based authentication/authorisation Ability to evaluate systems both ...

ensure they meet security, regulatory and business requirements. Conduct and support threat modelling, risk assessments and vulnerability assessments. Provide technical oversight of security testing and penetration testing activities. Support vulnerability management, helping teams prioritise and remediate security risks. Collaborate with architects, engineers, testers and assurance teams … Essential Skills & Experience Significant experience in one or more of the following areas: security architecture, security engineering, cloud security, network security, application security or penetration testing. Strong understanding of modern cyber threats, attack techniques and security risks. Experience applying secure-by-design principles across enterprise environments. Strong knowledge ...

Computing, infrastructure, technical support or another security focused environment and be ready to specialise. We're interested in your understanding of vulnerabilities and security testing, your curiosity about how attackers exploit weaknesses and, importantly, your motivation to develop your expertise. Working across Cybersecurity, Infrastructure, Cloud, Applications, End User Computing … good understanding of cyber security vulnerabilities and the vulnerability management lifecycle, including identification, prioritisation, remediation and reporting An understanding of vulnerability and security testing concepts, such as CVEs, CVSS, exploitability, patching, compensating controls and risk acceptance The ability to analyse technical information or data, identify trends and priorities ...

Information Security Team. Key responsibilities The key tasks and responsibilities include, but are not limited to, the following: Conduct thorough Red Team offensive penetration testing on our IT (on prem and cloud) infrastructure to identify vulnerabilities and provide recommendations for remediation. Perform security assessments on cloud-based applications … ensuring they adhere to industry standards and best practices. Execute red team exercises to simulate real-world attack scenarios, testing the firm's detection and response capabilities both internal and external. Assess and test the security of internally deployed infrastructure IoT devices and sensors, identifying potential vulnerabilities and ensuring ...

optimise detection rules, correlation logic, security monitoring content, and custom indicators. Identify and address detection gaps uncovered during incident investigations. Support purple-team exercises, penetration testing activities, and security control validation exercises. Transform findings into actionable improvements to CyberOne's detection and response capabilities. Client-Focused Incident Response ...

privilege, contextual access control and segmentation of services, users and devices Defining and reviewing security assurance activities, including design assurance, verification, validation, vulnerability assessment, penetration testing inputs and interpretation of assurance evidence Developing and communicating corporate and domain information security policy, standards, guidelines and design guardrails Identifying ...

network and host-based artifacts. Experience with IR and Forensics tools, packet inspection tools Security Engagement & Best Practice: Work alongside the company’s independent penetration testing program. Work closely with other technical and business departments to mitigate security/cyber risk: Implement SOPs and refine processes. Identify potential ...

multi-factor authentication, conditional access and privileged access management. Security monitoring: Logging, SIEM tools and managed detection and response services. Vulnerability management: Vulnerability scanning, penetration testing and remediation planning. Security architecture: Assessing proposed designs and ensuring security is Embedded into technology changes and new projects. Desirable Experience Experience ...

want to work, collaboratively across teams, functions, and skillsets towards a shared goal. You advise, enable, and persuade. You do not gatekeep. Strongly preferred Penetration testing knowledge or experience. Application, infrastructure and cloud, red teaming, and beyond. We're interested in the perspective it gives … approach to application security is forwarding tool output to engineering teams with a due date attached, this is not the role. A pure offensive-testing career path. Offensive perspective is valuable here; full-time offensive work is coordinated separately. A GRC or auditor background. GRC is a separate function ...