201 to 225 of 594 Penetration Testing Jobs in the UK

JPMorgan Chase & Co. is seeking a governance-focused vendor management lead for the Penetration Testing program in Greater London. The role coordinates delivery across vendors, aligns with strategic governance, and shapes QA strategy without hands-on testing. The ideal candidate has deep experience in vendor management within financial ...

DevOps, automation, data and machine learning... We’re hiring a Senior Offensive Security Analyst with deep expertise in API Security, OAuth, and web application penetration testing. The role will exclusively focus on identifying weaknesses in authentication and authorisation implementations across multiple teams, ensuring consistency and strong security practices within … services. Please note: This role is fully remote and open to candidates located anywhere within the UK. Required Experience: Strong background in web application penetration testing Deep, hands‐on expertise in API Security, OAuth, JWT , and token‐based authentication/authorisation Ability to evaluate systems both ...

recommending appropriate controls. Review and assess technical designs to identify security vulnerabilities, weaknesses, and compliance gaps. Provide expert guidance on Aviva security processes, including penetration testing, business impact assessments, and security assurance activities. Deliver consultancy and advice on security governance frameworks, including Security Fundamentals, TPISA processes, and related … Strong understanding of security governance, security assurance, and risk management frameworks. Experience reviewing technical solutions, architectures, and designs from a security perspective. Knowledge of penetration testing processes, vulnerability management, and security assessment methodologies. Experience supporting projects and change initiatives by providing pragmatic security advice and risk-based recommendations. ...

identity flows Strengthen the company’s security posture through offensive security assessments including the identification and exploitation of vulnerabilities across the web platform Perform penetration testing and realistic security exercises to simulate various attack scenarios, to test and improve our detection and response capabilities, and to identify weaknesses … legal/regulatory requirements. What we would like to see from you 5+ years of experience in ethical hacking, vulnerability research, exploit development, penetration testing or being a member of a red team, with significant focus on web application security. Strong hands-on experience attacking and defending modern ...

enterprises, provides research-fueled security services across all industries. Our cutting‐edge cybersecurity teams provide highly specialized technical and programmatic services including full‐stack penetration testing, program efficacy assessments, and hardware hacking. IOActive brings a unique attacker’s perspective to every engagement to maximize cybersecurity investments and improve … side ARM 32‐ and 64‐bit assembly Wi‐Fi/Bluetooth Reverse engineering, specifically firmware Hardware/embedded system hacking Vulnerability assessment and penetration testing Knowledge of security‐related topics, such as authentication, entitlements, identity management, data protection, data leakage prevention, validation checking, encryption, hashing, principle of least ...

seeking a Senior Offensive Security Engineer to assess and strengthen security across IT infrastructure, applications, and networks. You will identify vulnerabilities, perform hands-on penetration testing, and collaborate with cross-functional teams to implement robust security controls. The role requires the ability to conduct detailed assessments, prepare actionable ...

Citation Cyber in the United Kingdom is seeking a Security Consultant to join a hybrid team delivering penetration testing across client environments. You’ll identify vulnerabilities, report findings and advise on remediation while collaborating with clients and colleagues. The role emphasizes strong technical reporting, offshore and on-site ...

experienced Red Team/Offensive Security professional to join a growing capability within a major UK Defence organisation. This is not just a traditional penetration testing role . You’ll be involved in Red Team operations, adversary simulation and threat-led security assessments , helping to replicate realistic attacks … across Defence & Government environments What I’m looking for: Strong hands-on Red Team/Offensive Security experience Experience with adversary simulation or advanced penetration testing Experience across areas such as AD, cloud exploitation, C2, detection evasion or exploit development Relevant offensive security certifications are advantageous — OSCP, OSEP ...

enterprises, provides research-fueled security services across all industries. Our cutting-edge cybersecurity teams provide highly specialized technical and programmatic services including full-stack penetration testing, program efficacy assessments, and hardware hacking. IOActive brings a unique attacker’s perspective to every engagement to maximize cybersecurity investments and improve … side ARM 32- and 64-bit assembly Wi‐Fi/Bluetooth Reverse engineering, specifically firmware Hardware/embedded system hacking Vulnerability assessment and penetration testing Knowledge of security‐related topics, such as authentication, entitlements, identity management, data protection, data leakage prevention, validation checking, encryption, hashing, principle of least ...

applications. Joining a specialist security team, you'll focus on offensive web security, acting as the bridge between Security and Engineering. You'll perform penetration testing, reverse engineering and vulnerability assessments, identifying security risks and working closely with developers to build secure, resilient web applications from the ground … innovation sessions and team meetings.About you:You have strong experience in web application security and offensive security testingYou have hands-on expertise in penetration testing and reverse engineeringYou have a deep understanding of modern web security vulnerabilities and mitigation techniquesYou have commercial JavaScript experience, with TypeScript knowledge highly ...

Vulnerability Management (OSVM) team is hiring practitioners who can run security assessments against AI systems and use AI-powered tools to make security testing faster and more effective. The AI Offensive Security Analyst is an operational role on a team that runs penetration tests, vulnerability assessments … vulnerabilities faster than traditional detection can keep up. Behavioral analytics for AI agents. Playbooks for AI-originated attack scenarios. What You'll Work On Testing AI applications and agents . GenAI applications, agentic systems, and LLM-backed products require testing that goes beyond standard web app methodology. Prompt ...

collaborate and learn from each other, completely free of barriers.Job PurposeThe Senior Application Security Specialist is a senior technical role leading advanced application security testing, complex vulnerability analysis and threat modelling across the Application & Product Security function. You will provide technical leadership, mentor analysts and specialists … security point of contact for engineering, and contribute to security strategy and standards.Scope & AutonomyLeads testing workstreams and sets the technical approach for complex assessments; acts as an escalation point for L1/L2 and a security partner to engineering.Duties and ResponsibilitiesLead advanced security testing of critical applications ...

learn from each other, completely free of barriers. Job PurposeThe Senior Application Security Specialist is a senior technical role leading advanced application security testing, complex vulnerability analysis and threat modelling across the Application & Product Security function. You will provide technical leadership, mentor analysts and specialists, act as a security … point of contact for engineering, and contribute to security strategy and standards. Scope & AutonomyLeads testing workstreams and sets the technical approach for complex assessments; acts as an escalation point for L1/L2 and a security partner to engineering. Duties and ResponsibilitiesLead advanced security testing of critical applications ...

alerts, CVE, etc. · To have responsibility for the through life security of both internal and customer networks/systems as required by the company testing for vulnerabilities and recommending improvements. · To participate and support all internal IT & Engineering teams including providing advice and expertise on the design and management … knowledge & experience of o Cisco Firewalls, Routers& Switches, o Compliance standards (ISO27001 and ITIL) o Security tools sets (SIEM, IDS/IPS) o Pen Testing tools o Vulnerability Management · Design, build, test, commission and troubleshoot security solutions (IDS/IPS, SIEM) on internal and customer networks Experience developing ...

alerts, CVE, etc. To have responsibility for the through life security of both internal and customer networks/systems as required by the company testing for vulnerabilities and recommending improvements. To participate and support all internal IT & Engineering teams including providing advice and expertise on the design and management … networks; Good working knowledge & experience of Cisco Firewalls, Routers& Switches Compliance standards (ISO27001 and ITIL) Security tools sets (SIEM, IDS/IPS) Pen Testing tools Vulnerability Management Design, build, test, commission and troubleshoot security solutions (IDS/IPS, SIEM) on internal and customer networks Experience developing and maintaining policies ...

SBOM tooling into how we ship.Own vulnerability management end to end: find issues, triage findings, and drive engineering teams to closure.Design our security testing, from penetration testing to fuzzing, and build tools other engineers can run without you.Ship network and server-side and data protection: API security ...

scale security assurance programme within a highly regulated environment. This is an excellent opportunity for a contractor with a strong background in security controls testing, assurance and risk management, particularly within central government or wider public sector environments. Working remotely alongside security architects, risk teams and technical stakeholders … identified environment to ensure they meet the standards defined within supporting documentation, including High-Level Designs (HLDs), Low-Level Designs (LLDs) and Controls Catalogues. Testing controls against recognised security frameworks and standards, including ISO 27001, NIST CSF and NIST 800-53. Reviewing policies, procedures, network configurations, firewall rules ...

best practice You will need: Strong knowledge of cloud security across modern environments Advanced knowledge and hands-on experience with attack methodologies and security testing Experience across penetration testing (application and network), AppSec, wireless security and vulnerability management Experience implementing and managing security controls (e.g. DLP, patching ...

Penetration Tester - CHECK Team Member Salary: Up to £80,000 Location: UK-wide Working pattern: Hybrid, predominantly home-based with UK client-site travel when required Security requirements: Current SC clearance and sole UK nationality Are you a hands-on Penetration Tester who enjoys finding the weaknesses others … investigate findings, demonstrate their real-world impact and provide practical recommendations that help clients strengthen their security. What you'll be doing Delivering penetration tests, security assessments and IT Health Checks Testing web applications, networks and wider IT infrastructure Using manual and automated techniques to simulate real-world ...

teams adopt secure practices without unnecessary friction.Vulnerability management experience: experience triaging and tracking application vulnerabilities from sources such as SAST, dependency scanning, secret scanning, penetration tests, bug bounty reports or third-party advisories.CI/CD and code security awareness: familiarity with security tooling in development workflows, such as SAST … working.DesirableExposure to AWS security, cloud security or infrastructure-as-code security.Experience with Terraform or CloudFormation.Experience with container or Kubernetes security.Experience with bug bounty, penetration testing or security testing programmes.Experience with Splunk or similar logging/SIEM platforms.Exposure to AI security, such as LLM-enabled applications, AI-assisted ...

intelligence activities Develop and refine security monitoring, detection rules and use cases Carry out vulnerability scanning and support remediation and patch management Contribute to penetration testing and application security testing Secure and maintain Microsoft Azure cloud environments Implement and maintain Identity and Access Management (IAM) solutions Support ...

Team capability with a Senior Consultant/L3 Red Team Operator. Our expertise in red team operations, purple team engagements, assumed-breach testing, adversary emulation, and threat intelligence-led penetration testing is in high demand. Our collaborative ties to our forensic and incident response team, detection engineering ...

ROLE & RESPONSIBILITIES IN THE BUSINESS:As a Lead Security Engineer (Consultant) in Kainos, you will be responsible for leading our security engineering and security testing efforts across Kainos Platforms and Services. They will set direction on our security testing methodology, engagement scoping, outputs and tool/technology selections … REQUIREMENTS• Expertise in securing Web Applications and Cloud Platforms (e.g. AWS/Azure).• Experience in Defence Sector• Current, Active Security Clearance• Expertise of testing software and infrastructure security using existing manual or automated security tools, e.g. perform and document penetration tests on web-based applications, networks ...

ROLE & RESPONSIBILITIES IN THE BUSINESS: As a Lead Security Engineer (Consultant) in Kainos, you will be responsible for leading our security engineering and security testing efforts across Kainos Platforms and Services. They will set direction on our security testing methodology, engagement scoping, outputs and tool/technology selections … REQUIREMENTS Expertise in securing Web Applications and Cloud Platforms (e.g. AWS/Azure). Experience in Defence Sector Current, Active Security Clearance Expertise of testing software and infrastructure security using existing manual or automated security tools, e.g. perform and document penetration tests on web-based applications, networks ...

Morson Human Resources Limited in the United Kingdom is seeking a Lead Penetration Tester to own the end-to-end penetration testing lifecycle across applications, infrastructure and technology environments. This hands-on role combines technical testing with coordination of testing engagements, third-party providers ...