51 to 75 of 125 Penetration Testing Jobs in London

privilege, contextual access control and segmentation of services, users and devices Defining and reviewing security assurance activities, including design assurance, verification, validation, vulnerability assessment, penetration testing inputs and interpretation of assurance evidence Developing and communicating corporate and domain information security policy, standards, guidelines and design guardrails Identifying ...

incidents - Implement and manage SAST/SCA tooling across application repositories to identify source code risks - Scale automated DAST solutions across applications to maximise testing coverage - Carry out penetration testing on internally developed applications Required Skills/Experience: - Experienced in application security focussing on red, blue ...

travel. RESPONSIBILITIES: Own and evolve EU/UK financial services and digital operational resilience posture across DORA (including ICT risk management, incident reporting, resilience testing, and third‐party ICT provider oversight), and complementary expectations from EBA/ESMA/EIOPA guidance, PSD2/PSR where applicable … security measures) when collaborating with DPO/Legal/Privacy functions. Familiarity with DORA ICT third‐party risk, register of information, threat‐led penetration testing (TLPT) concepts, and major ICT‐related incident reporting expectations. Experience with AI governance under the EU AI Act or related national guidance, especially ...

Cyber Essentials)DesirableIndustry-recognised certifications such as ISO 27001 Lead Auditor/Implementer, CISSP, CISA, CISM, or similar. Exposure to penetration testing, or hands-on vulnerability assessment (even if not a primary role).Experience with public cloud platforms (e.g., AWS, Azure, GCP, MS365) and understanding of cloud security ...

/IPS), antivirus, anti-malware, SIEM (Security Information and Event Management), vulnerability scanners, and data encryption solutions. Manage vulnerability management programs, including regular scanning, penetration testing, and remediation of identified weaknesses. Lead and manage security incident response, including detection, analysis, containment, eradication, recovery, and post-incident review. Develop ...

colleagues can understandAppreciation of the wider roles of interconnecting Cyber Security teams and collaboration with each of those (i.e. Forensics/Threat Intelligence/Penetration Testing/Vulnerability Management/"Purple Teaming" etc)Management, Communication and Process Skills: Experience with communicating technical topics both in writing and verbally ...

roleJob Title: Application Security EngineerJob Summary: Designs, implements, and operates security controls to prevent and detect attacks against company systems, applications, and data. Conducts penetration testing and vulnerability assessments across applications, operating systems, and networks. Responds to cybersecurity incidents by identifying, isolating, and removing unauthorized access. Researches emerging … system disruption, or unauthorized access. People Manager: NoWhat you'll do Administer and enforce security policies governing system and application access. Perform application security testing and reviews to ensure secure configurations and compliance with standards. Conduct penetration tests and vulnerability assessments across applications, OS, and network layers. Lead ...

understand Appreciation of the wider roles of interconnecting Cyber Security teams and collaboration with each of those (i.e. Forensics/Threat Intelligence/Penetration Testing/Vulnerability Management/“Purple Teaming” etc) Management, Communication and Process Skills: Experience with communicating technical topics both in writing and verbally ...

while accelerating developer velocity and innovation. The role focuses on enabling secure-by-default development through secure design support, automated tooling, vulnerability management, offensive testing, and developer engagement. It also plays a critical role in integrating security into Miro's Discover, Define, Deliver product lifecycle and aligning with … phases of the product lifecycle—from early discovery and architecture threat modeling, to design reviews and secure delivery pipelines, and ongoing monitoring and testing post-release. Your team will also support Miro's AI-driven development tooling and guide secure adoption of Agentic AI workflows, which enable both developers ...

cyber security posture across on‐premises infrastructure and Microsoft Azure cloud environments. The role focuses on owning and delivering remediation from security assessments, penetration testing, and vulnerability management, while acting as the technical subject matter expert for cyber security across the business. This position is suited to candidates … platform. Act as an escalation point for complex or high-risk security events. Vulnerability Management & RemediationOwn end-to-end remediation of findings from penetration tests, vulnerability scanning, and internal assessments. Work hands-on with infrastructure and regional teams to remediate vulnerabilities across servers, endpoints, networks, and cloud platforms. Track ...

with security policies Design and implement secure infrastructure solutions, embedding security requirements from the outset rather than retrofitting them Conduct regular vulnerability assessments and penetration testing exercises, prioritising and remediating findings in a timely manner Manage and continuously improve security tooling, including SIEM, EDR, firewalls, IDS/ ...

Kubernetes-based platform. Govern security controls across the full stack: Kafka, .NET/C#, Vue.js, Kong API Gateway, Auth0, and Salesforce. Lead threat modelling, penetration testing, and vulnerability management programmes. Own identity and access management strategy, including Entra ID, Auth0, and partner federation. Drive security engineering best practices ...

Security and Security MonitoringOversee cyber security measures including vulnerability management, access control, security monitoring and incident detection. Ensure regular vulnerability assessments, security reviews and penetration testing are conducted. Incident ManagementEstablish and maintain procedures for managing information security incidents. Coordinate investigation, response and reporting of cyber security incidents. Operational ...

track record of influencing engineering culture and earning trust, not enforcing it. Experience managing external security partners, (e.g 24/7 Security Operations Centre, penetration testing 3rd parties) and raising their performance through clear accountability, not just contract reviews. Able to communicate risk in business terms to exec ...

with meaningful careers. ROLE SUMMARY:This opportunity within the Offensive Security Operations team is a crucial role for the management of vulnerability discovery, offensive testing and remediation activities across the group which protects the business from sophisticated cyber threats! The role holder will work with our 3rd party vendors … plan and facilitate our testing programmes ensuring they run efficiently. The programmes in scope for the role include: Regulatory Threat Intelligence Led Pen Testing (TLTP) and Red teamingBug BountyContinuous External Attack Surface ManagementActive Directory security posture managementAny programme launched in the future aimed at driving down cyber risk ...

seeking a skilled Offensive Security penetration tester to join our Consulting-Digital team. You will conduct sophisticated penetration testing and red team engagements across client systems and applications, gaining exposure to diverse industries and geographic scopes. You’ll stay at the forefront of the threat landscape, cyber ...

technology change. Ensure security requirements are embedded within project, change and delivery lifecycles through secure-by-design principles and threat-led risk assessments. Oversee penetration testing, technical security assessments and vulnerability assurance activities, ensuring identified risks are appropriately assessed and managed. Provide cyber security expertise and advice ...

standards, including audits, third-party risk, PCI-DSS, regulatory compliance and security reporting to senior leadership and governance forums. Overseeing security operations, vulnerability and penetration testing, third-party security partnerships and incident response, acting as the senior escalation point for material security incidents and strengthening cyber resilience. Partnering ...

building signal rather than noise. Comfort operating in a security and compliance-conscious environment: financial services, private markets, or another regulated industry, including audit, penetration testing, and data retention requirements. Excellent written and verbal communication, able to translate infrastructure risk and trade-offs for engineering peers, executives ...

following roles: Security Operations Center (SOC) Analyst/Manager (3 years minimum)Cybersecurity Incident CoordinatorCybersecurity Threat IntelligenceCybersecurity Detection EngineeringOther relevant Cyber Defense functionsAttack & Penetration Testing (Active Defense)eDiscovery or related role performing forensic functionsDeep understanding of security threats, vulnerabilities, and incident responseUnderstanding of electronic investigation, forensic tools ...

pull the plug" on a feature, application, or other business function if it represents a significant risk to the company. You will: Conduct penetration tests against web applications infrastructure Validate security on new hardware and software infrastructure Assist front-line company representatives with security questions Manage firewall rules … management system (Jira) Come to work, do great things, then go home! What You Need to Get the Job Done 3+ years experience performing penetration testing (against web applications) Experience securing cloud-based infrastructures and solutions Previous experience working on an information security team Advanced knowledge of common ...

DAST/SCA tooling integrated into CI/CD pipelines and code review (manual and/or AI assisted)Coordinate external and execute internal penetration test engagements — scope, logistics, findings triage — and drive remediation to closure with engineering teamsMaintain and evolve secure coding standards, and run a security champions … OWASP Top 10 and secure coding practices across at least one major language/framework used in a production environmentExperience coordinating and running penetration testing programmes, including remediation trackingComfortable communicating security risk clearly to engineering and product audiences and influencing senior leadershipDemonstrable experience with adversarial security testingDemonstrated experience ...

Geordie platform, with secure by design, threat modelling and security architecture review embedded throughout the SDLC, enabling rapid development safely. Drive vulnerability management, penetration testing, and remediation across the product. Act as the stakeholder for product security requirements for authn/authz, tenant isolation, and privileged access Immerse … help them navigate real-world agentic adoption and risk, it's probably not worth building. Build, Learn, Iterate We favour momentum over perfection; testing, learning, and evolving through action. It's how we move fast and get better, together. Kind, Not Comfortable We're honest, respectful, and unafraid ...

guidance on secure cloud adoption across Azure and AWS environmentsDrive IAM governance, including MFA, RBAC, PAM/PIM, Conditional Access, and Zero Trust controlsSupport penetration testing, vulnerability management, and remediation activitiesCollaborate with internal stakeholders, suppliers, and external partners to improve security postureContribute to security standards, policies, audits ...

guidance on secure cloud adoption across Azure and AWS environmentsDrive IAM governance, including MFA, RBAC, PAM/PIM, Conditional Access, and Zero Trust controlsSupport penetration testing, vulnerability management, and remediation activitiesCollaborate with internal stakeholders, suppliers, and external partners to improve security postureContribute to security standards, policies, audits ...