76 to 100 of 158 Penetration Testing Jobs in London

underwriters. Security Operations & Vulnerability Management Design and implement Security Operations Centre (SOC) operating models. Conduct vulnerability management programmes, gap analyses, and remediation tracking. Lead penetration testing and application security assessments (OWASP Top 10). Oversee DLP and DDA monitoring strategies. Compliance & Regulatory Alignment Support ISMS implementation aligned with … operations. Proven experience delivering cyber maturity assessments and risk advisory engagements. Experience designing SOC or security operating models. Strong understanding of vulnerability management and penetration testing. Experience aligning organisations to NIST CSF, ISO 27001, and related frameworks. Executive report writing and board‐level presentation capability. Experience leading client engagements ...

driven prioritization and automation to scale assessment coverage and improve remediation processes Produce clear vulnerability metrics and reporting for technology and security leadership Support penetration testing and red team engagements, coordinating remediation follow-up Continuously improve discovery coverage and reduce time to remediate across the environment What ...

OIDC and SAML Detection engineering, SIEM or cloud security monitoring, incident response or digital forensics SOC 2, ISO 27001 or enterprise customer security reviews Penetration testing or working with external security researchers What We Offer Competitive salary with regular appraisals Competitive equity package at an early stage company ...

such as 007/SPF, NCSC Cloud Security Principles, NCSC Principles for Using Software as a Service (SaaS) securely, Cyber Essentials, and the CHECK penetration testing scheme. Broad familiarity with UK Government physical and personnel security such as NPSA and UKSV. Risk assessment using recognised standards such ...

production. Experience producing operational metrics, control reporting, and audit evidence for identity - PAM, Secrets Management controls. Knowledge of security processes such as vulnerability management, penetration testing, incident response, and security control assurance. Knowledge of security standards and frameworks such as CIS and NIST. Experience supporting or improving security ...

management information. Support the operational effectiveness of cyber security tooling and services, ensuring incidents, alerts and service performance are appropriately monitored and reported. Coordinate penetration testing activities, remediation tracking and assurance reporting. Support supplier security reviews and third-party assurance activities, including evidence collection, action tracking and reporting. … Assist with cyber incident exercises, tabletop simulations and operational resilience testing activities. Maintain cyber operational procedures, playbooks, runbooks and supporting documentation. Produce cyber operational dashboards, management information, Key Risk Indicators (KRIs) and performance metrics. Monitor service performance against agreed cyber security service levels, KPIs and contractual obligations. Support attack ...

Limited is seeking a cybersecurity professional to perform penetration testing across applications and infrastructure, with scope for AI-assisted security testing and ongoing learning. You will work in a hybrid setup, collaborating with teams to identify vulnerabilities and deliver actionable remediation guidance. Strong practical pentesting experience ...

application architecture, software development and/or infrastructure architecture.• Clear communication with technical and non-technical audiences• Experience mentoring engineers and architects • Experience testing the security of software and infrastructure using appropriate security tools. • Experience with Continuous Security, Continuous Integration and Continuous Delivery techniques. • Experience of network security (e.g. … Defence/Healthcare Sector(s) • End-to-end security involvement, including governance, risk and compliance, operational security, supply chain security and secure user management. • Penetration testing qualifications (e.g. OSCP, CREST, TIGER or equivalent) • Experience leading security engineers and other junior members of staff• Involvement across the full security ...

will conduct technical assessments, develop security strategies, and work with clients to build resilient security postures against evolving threats. Responsibilities Conduct vulnerability assessments and penetration testing Perform security architecture reviews Develop security strategies and roadmaps Create incident response and disaster recovery plans Advise on security tool selection ...

experience supporting vulnerability management, threat hunting and security monitoring activities. Strong knowledge of PAM, network segmentation and secure configuration Conducting security reviews, audits and penetration testing exercises. Providing expert security advice on projects and new technologies including AI. Supporting compliance with CIS and Cyber Essentials Plus and recognised ...

experience supporting vulnerability management, threat hunting and security monitoring activities. Strong knowledge of PAM, network segmentation and secure configuration Conducting security reviews, audits and penetration testing exercises. Providing expert security advice on projects and new technologies including AI. Supporting compliance with CIS and Cyber Essentials Plus and recognised ...

Windows, Linux, networking, cloud, Docker, Active Directory, and troubleshooting.* Strong knowledge of IT infrastructure, network security, cybersecurity methodologies, and Microsoft network protocols.* Familiarity with penetration testing; practical experience is a strong advantage.* CEH, CISSP, or equivalent certification is preferred.* Strong interpersonal and organizational skills, with a knack ...

reduce false positives. Assess detection gaps identified during incidents and recommend enhancements to logging, telemetry, processes and security controls. Contribute to purple-team, penetration-testing and control-validation activities and ensure relevant findings are converted into actionable detection or response improvements. Incident Response Capability and Governance: Develop, maintain ...

engage senior engineers, architects, offensive security specialists, risk teams, and senior business stakeholders. Practical offensive security awareness, including attack paths, common enterprise weaknesses, penetration testing outputs, red/purple team findings, exploitability, and risk‐based remediation. Security solution architecture knowledge across cloud, identity and access management, network security ...

CISA KEV), threat intelligence, compensating controls and business context. Establish exposure validation capabilities, including attack path analysis, breach and attack simulation, and coordination with penetration testing and red team functions, to confirm real-world exploitability. Define and maintain risk-tiered remediation SLAs that differentiate by exposure, asset type ...

application and cloud security experts. Their mission is to protect the products we build, covering everything from secure design reviews to threat modelling and penetration testing, ensuring security is embedded from the ground up. Threat Detection & Response focuses on protecting the company by building a robust detection ...

Azure or AWS environment. Oversee, direct and quality-assure AI-assisted development and deployment (Claude Code and agent workflows), including code review, testing and release sign-off. Lead technical conversations with client CTOs, IT and information security teams: architecture, data residency, identity and access, security questionnaires, penetration testing … Node.js and PostgreSQL. Understanding of security and data protection requirements in regulated firms: audit trails, access control, UK GDPR, DPIAs, vendor due diligence and penetration testing. Experience with, or a strong interest in, directing and reviewing AI-assisted software development. Confident and credible with client CTOs and senior stakeholders ...

know access to them isn't equal What You Won't Be Doing This is not a SOC analyst role, a pen-testing role, or a pure software engineering role. You won't be writing production code from day one or responding to live incidents. You'll be researching ...

/or Microsoft Azure) Understanding of modern security concepts, common attack vectors, malware, security analytics and threat intelligence. A understanding of security testing and vulnerability management is important (including pen testing/ITHC, CVSS/CVE) Some experience working with security standards such ...

pull the plug\" on a feature, application, or other business function if it represents a significant risk to the company. You will: Conduct penetration tests against web applications infrastructure Validate security on new hardware and software infrastructure Assist front-line company representatives with security questions Manage firewall rules … management system (Jira) Come to work, do great things, then go home! What You Need to Get the Job Done 3+ years experience performing penetration testing (against web applications) Experience securing cloud-based infrastructures and solutions Previous experience working on an information security team Advanced knowledge of common ...

Brex is seeking a Senior Application Security Engineer to identify and remediate vulnerabilities across the Brex platform. You will perform code reviews, penetration testing, and tooling development to support secure developer workflows. You will collaborate across Security Operations, GRC, Product Security, Front End Platform, and IT Infrastructure, applying ...

security team and the overarching engineering org to ensure that we are proactive in minimizing risk while we build products Lead security assessments and penetration testing of WRITER’s applications, AI services, and APIs, identifying vulnerabilities across our tech stack and working collaboratively with teams to remediate issues … explain why something matters and motivate teams to actionKnowledge of security tools and methodologies including SAST/DAST solutions, vulnerability management platforms, security testing frameworks, and DevSecOps practices—you know which tools to use and when automation beats manual reviewAlignment with WRITER’s values of Connect (building strong relationships ...

Entra ID/Azure AD) and device compliance tools (Microsoft Intune/MDM). Threat & Risk Management: Monitor, identify, and remediate environment vulnerabilities. Support penetration testing schedules, deploy Multi-Factor Authentication (MFA), and maintain device encryption policies. Data Protection Compliance: Ensure all localized retail systems and warehouse practices ...

ISNs) Knowledge of UK Government security standards, including: Government Security Policy Framework (SPF) NCSC Cloud Security Principles NCSC SaaS Security Principles Cyber Essentials CHECK Penetration Testing Scheme Familiarity with UK Government physical and personnel security requirements, including NPSA and UKSV. Experience conducting risk assessments using recognised methodologies such ...

Support the delivery and coordination of additional professional services engagements, including security assessments, and manage the coordination and oversight of technical services; such as penetration testing projects. Skills, Knowledge & Expertise You will be a collaborative and client-focused cybersecurity professional with the ability to build trusted relationships, communicate ...