14 of 14 Remote/Hybrid Penetration Testing Jobs in the South West

data, so that governments, nation states, armed forces and commercial businesses can unlock digital advantage in the most demanding environments. Job Title: Senior Security Penetration Testing Consultant Location: London, Gloucester, Guildford, Manchester, Leeds or Frimley (Occasional office work, with 25% International Travel) Salary: Competitive Who we are Join … space - there's no limit to where a career at BAE Systems could take you. Role Description Delivery of end-to-end security testing engagements, including scoping and client wash-up meetings. Performing application testing, web and mobile tests, infrastructure testing, objective based tests, and intelligence ...

Bank of Scotland and Scottish Widows. You’ll help design, build and enhance a world-class mobile security framework, leading threat modelling, security assessments, penetration testing capabilities and security tooling across Android and iOS platforms. Working within agile teams, you’ll drive continuous improvements to our mobile security … Experience of mobile platform security, threat modelling and mitigation techniquesStrong hands-on experience conducting reviews of mobile application security postureExperience developing and maintaining penetration testing tools, scripts, policies and proceduresIn-depth knowledge of Android and iOS application security standardsExperience driving security improvements across mobile platformsAbility to define ...

OWASP Top 10 mitigation. Promote a security-first mindset across development teams, acting as a supportive technical mentor. Integrate security assessments, code reviews, and penetration testing seamlessly into the SDLC. Evaluate, implement, and run modern security tooling (SAST, DAST, IAST) to streamline vulnerability checks. Research emerging … response investigations and help deliver engaging security training. Were looking for someone who is: Experienced in application security (5+ years) with strong hands-on penetration testing and security tooling skills. Deeply knowledgeable about web vulnerabilities, secure coding practices, and cloud environments (AWS, Azure, or GCP). Familiar with ...

best practice You will need: Strong knowledge of cloud security across modern environments Advanced knowledge and hands-on experience with attack methodologies and security testing Experience across penetration testing (application and network), AppSec, wireless security and vulnerability management Experience implementing and managing security controls (e.g. DLP, patching ...

Senior and Principal level Consultants. Working within a defence-focused environment, you will deliver threat-led security assessments, adversary emulation activities and advanced security testing for customers operating within complex and high-assurance environments. You will emulate realistic cyber threats, assess the effectiveness of security controls and provide actionable … also wanting to influence how a capability develops and matures over time. Core areas (must have): Experience delivering red team, adversary simulation or advanced penetration testing activities. Relevant certifications relating to red teaming. Strong technical skills in one or more of the following areas: initial access, cloud exploitation ...

privilege, contextual access control and segmentation of services, users and devices Defining and reviewing security assurance activities, including design assurance, verification, validation, vulnerability assessment, penetration testing inputs and interpretation of assurance evidence Developing and communicating corporate and domain information security policy, standards, guidelines and design guardrails Identifying ...

/IP, and secure communication designExperience with network security technologies, including firewalls, IDS/IPS, VPNs, and segmentation strategiesExperience in risk assessment methodologies, penetration testing, or vulnerability managementHave a permanent work permit in UKWork in a way that works for youWe recognize that everyone is different and that ...

Government environments. Strong understanding of risk management frameworks Working technical knowledge across areas such as network security, secure system architecture, vulnerability assessment/penetration testing concepts, and cloud or infrastructure security controls. Familiarity with government and defence security standards such as: HMG/NCSC IA Policies and Guidelines ...

voice for security in design, code and backlog decisions. Embed secure development practices across the software development lifecycle, including secure coding standards, code review, testing, CI/CD and related controls. Carry out threat modelling, secure design reviews and technical risk assessments for new and existing product capabilities … product roadmap, backlog and design decisions, working with product owners and engineering leadership. Work with our external security partners to arrange and act on penetration testing and security assessments of our products. Contribute to security standards, metrics and ways of working that improve product security maturity over time. ...

identifying vulnerabilities and prioritise avenues of research that will deliver the most value to our customers. Have a working knowledge of vulnerability assessment or penetration-testing techniques. What we are looking for Familiarity with a variety of tools (e.g. IDEs, debuggers, source control, Ghidra, FRIDA, Wireshark ...

identifying vulnerabilities and prioritise avenues of research that will deliver the most value to our customers. Have a working knowledge of vulnerability assessment or penetration-testing techniques. What we are looking for Familiarity with a variety of tools (e.g. IDEs, debuggers, source control, Ghidra, FRIDA, Wireshark ...

identifying vulnerabilities and prioritise avenues of research that will deliver the most value to our customers. Have a working knowledge of vulnerability assessment or penetration-testing techniques. What we are looking for Familiarity with a variety of tools (e.g. IDEs, debuggers, source control, Ghidra, FRIDA, Wireshark ...

development lifecycle, with a particular focus on software-controlled products, embedded controllers, connectivity and cybersecurity. Working closely with our software, electronics, controls, hardware, testing and manufacturing teams, your responsibilities will include: Identifying applicable legislation, standards and certification requirements and translating them into clear product, software and hardware requirements. Developing … firmware, controller, electronics and connected-product designs to identify compliance and cybersecurity risks early in development. Planning, coordinating and carrying out verification and compliance testing, both in-house and with external test laboratories. Coordinating safety, EMC, RF and cybersecurity assessments, ensuring that testing and supporting evidence meet ...

modelling and mitigation techniques Capable of conducting regular reviews of our mobile application security posture using your hands-on experience. Develop and maintain pen-testing security tools, scripts, policies and procedures In depth knowledge of mobile app security standards (Android/iOS) Desirable knowledge & experience • Familiarity with mobile development … DevSecOps tooling, testing and automation frameworks. • Have deep knowledge and experience using the mobile security tools. • Good understanding of authentication, authorization, encryption, and cryptography patterns. • Experience in proactive researching new technologies emerging in the security landscape. Benefits A supportive, diverse, and global team with a brilliant culture. Competitive compensation ...