301 to 325 of 592 Penetration Testing Jobs in the UK

Senior and Principal level Consultants. Working within a defence-focused environment, you will deliver threat-led security assessments, adversary emulation activities and advanced security testing for customers operating within complex and high-assurance environments. You will emulate realistic cyber threats, assess the effectiveness of security controls and provide actionable … also wanting to influence how a capability develops and matures over time. Core areas (must have) Experience delivering red team, adversary simulation or advanced penetration testing activities. Relevant certifications relating to red teaming. Strong technical skills in one or more of the following areas: initial access, cloud exploitation ...

vulnerabilities, aligned with criticality-based policy enforcement.* Prioritise weaknesses in IT infrastructure and applications using manual and automated methods, including results from Static Application Testing (SAST) and Software Composition Analysis (SCA) tooling (in conjunction with the Service Transition team).* Influence stakeholders to prioritise and drive remediation of process … Risk to ensure controls are met and vulnerabilities are addressed across infrastructure and applications.* Engage and support Cyber Security for remediation of penetration test findings.* Engage with Internal and External Auditors as the SME on all matters relating to VM.**Stakeholder Engagement & Culture*** Act as the primary Service Matter ...

good understanding of relevant data protection legislation (e.g., UK GDPR). ISO 27001, SOC 2, NIST CSF, CAF, HIPAA, DSPT Gap analysis, auditing, or penetration testing Process and procedure development Software or AI development/testing Client-facing roles Relevant certifications (CISSP, CISM, CREST, etc. ...

maintain secure network and application architectures; oversee secure software development lifecycle (SDLC) practices; ensure encryption, authentication, and authorisation controls are robust. Develop Automated Security Testing/Continuous Evaluation: Develop, implement, and continuously refine preferably automated tooling and reporting to perform some level of dynamic penetration testing ...

have experience in several of the following areas: Cisco Firewalls, Routers and Switches Juniper technologies SIEM platforms IDS/IPS solutions Vulnerability management Penetration testing Computer forensic tools Secure network design and administration ISO27001 and GDPR compliance You'll also possess: Strong troubleshooting and analytical skills Excellent communication ...

security strategy and maturity roadmap • Own and continuously improve security operations and the outsourced SOC • Lead cyber incident investigation and response • Oversee vulnerability management, penetration testing and remediation programmes • Maintain ownership of ISO 27001 and Cyber Essentials Plus • Establish security architecture principles across infrastructure, cloud, SaaS, data ...

/IPS), antivirus, anti-malware, SIEM (Security Information and Event Management), vulnerability scanners, and data encryption solutions. Manage vulnerability management programs, including regular scanning, penetration testing, and remediation of identified weaknesses. Lead and manage security incident response, including detection, analysis, containment, eradication, recovery, and post-incident review. Develop ...

Familiarity with Dagger-based pipelines and workflow orchestration (e.g., Argo Workflows) Experience creating and maintaining Helm charts for Kubernetes deployments Background in application security, penetration testing, or compliance frameworks (e.g., ISO 27001, SOC 2) Experience with secrets management tooling such as HashiCorp Vault or Azure Key Vault Soft ...

solutions• Experience of threat intelligence• Leadership and mentoring experience and skills• Understanding of low-level concepts including operating systems and networking• Commercial experience in Penetration Testing and/or Security Monitoring• Understanding of networking and infrastructure design• Knowledge/experience of one or more System administration (Linux, Windows ...

highly regulated cloud environments (e.g. PCI-DSS, ISO 27001, NIST guidelines).Demonstrated background in a highly technical role (e.g. Security Engineering, Infrastructure Engineering, Penetration Testing).Experience in infrastructure,application, and AI security (e.g. container security, secure code reviews, secure integration of generative AI/ML).Practical experience leveraging ...

help improve how vulnerability handling works as the volume grows. Your responsibilities Review incoming reports from external researchers, bug bounty and vulnerability disclosure programmes, penetration tests, AI-assisted testing platforms, and internal security assessments Validate findings: check the affected asset, reproduce the issue where safe and appropriate … impacting detail, internal infrastructure information, credentials, screenshots, logs, and exploit chains Your key competencies 5+ years of previous experience in vulnerability triage, application security, penetration testing, security operations, or a closely related security role Ability to understand and validate technical vulnerability reports, including incomplete, unclear, automated, or poorly ...

Assess and advise on risks relating to LLMs, Agentic AI, RAG architectures, prompt injection, data poisoning, model theft, and AI supply chain threats. Define penetration testing scope and collaborate closely with testing teams to validate security controls and remediation activities. Act as a trusted security advisor ...

roleJob Title: Application Security EngineerJob Summary: Designs, implements, and operates security controls to prevent and detect attacks against company systems, applications, and data. Conducts penetration testing and vulnerability assessments across applications, operating systems, and networks. Responds to cybersecurity incidents by identifying, isolating, and removing unauthorized access. Researches emerging … loss, system disruption, or unauthorized access. People Manager: NoWhat you’ll do Administer and enforce security policies governing system and application access.Perform application security testing and reviews to ensure secure configurations and compliance with standards.Conduct penetration tests and vulnerability assessments across applications, OS, and network layers.Lead threat modeling ...

roleJob Title: Application Security EngineerJob Summary: Designs, implements, and operates security controls to prevent and detect attacks against company systems, applications, and data. Conducts penetration testing and vulnerability assessments across applications, operating systems, and networks. Responds to cybersecurity incidents by identifying, isolating, and removing unauthorized access. Researches emerging … system disruption, or unauthorized access. People Manager: NoWhat you'll do Administer and enforce security policies governing system and application access. Perform application security testing and reviews to ensure secure configurations and compliance with standards. Conduct penetration tests and vulnerability assessments across applications, OS, and network layers. Lead ...

systems, networking, cloud infrastructure, and attacker tactics, techniques, and procedures (TTPs). Responsibilities of this position include vulnerability management, reporting, remediation and continuous assessment, penetration testing and red teaming. This position will work remote from home office located in the UK or India only. Must be able … third-party assets.Conduct continuous discovery and vulnerability assessment of enterprise-wide assets.Support auditors in their duties that focus on compliance and risk reduction.Perform penetration tests against company owned assets, including internal and cloud-based assets, as well as web applications and APIs.Perform other duties as assigned.QUALIFICATIONS:Education: Bachelor ...

systems, networking, cloud infrastructure, and attacker tactics, techniques, and procedures (TTPs). Responsibilities of this position include vulnerability management, reporting, remediation and continuous assessment, penetration testing and red teaming. This position will work remote from home office located in the UK or India only. Must be able … third-party assets.Conduct continuous discovery and vulnerability assessment of enterprise-wide assets.Support auditors in their duties that focus on compliance and risk reduction.Perform penetration tests against company owned assets, including internal and cloud-based assets, as well as web applications and APIs.Perform other duties as assigned.QUALIFICATIONS:Education: Bachelor ...

systems, networking, cloud infrastructure, and attacker tactics, techniques, and procedures (TTPs). Responsibilities of this position include vulnerability management, reporting, remediation and continuous assessment, penetration testing and red teaming. This position will work remote from home office located in the UK or India only. Must be able … third-party assets.Conduct continuous discovery and vulnerability assessment of enterprise-wide assets.Support auditors in their duties that focus on compliance and risk reduction.Perform penetration tests against company owned assets, including internal and cloud-based assets, as well as web applications and APIs.Perform other duties as assigned.QUALIFICATIONS:Education: Bachelor ...

governance documentation. Drive maturity of assurance processes, tooling, reporting, and governance across multiple programmes. Lead incident response capability development, including response plans, playbooks, testing, exercising, and Tabletop Exercises (TTXs). Manage vulnerability, risk, audit, control assessment, and compliance activities, ensuring findings are prioritised and driven through to resolution. Engage … protection, IDS/IPS, SIEM, identity and access management, PKI, LDAP, Active Directory, SAML, encryption, and key management. Experience interpreting outputs from vulnerability assessments, penetration testing, IT Health Checks (ITHCs), and security monitoring activities to support remediation planning and risk-based prioritisation. Ability to assess technical security controls ...

governance documentation. Drive maturity of assurance processes, tooling, reporting, and governance across multiple programmes. Lead incident response capability development, including response plans, playbooks, testing, exercising, and Tabletop Exercises (TTXs). Manage vulnerability, risk, audit, control assessment, and compliance activities, ensuring findings are prioritised and driven through to resolution. Engage … protection, IDS/IPS, SIEM, identity and access management, PKI, LDAP, Active Directory, SAML, encryption, and key management. Experience interpreting outputs from vulnerability assessments, penetration testing, IT Health Checks (ITHCs), and security monitoring activities to support remediation planning and risk-based prioritisation. Ability to assess technical security controls ...

GDPR, SOC2, SOX MS in Cyber Security, Information Security, MIS or equivalent Industry security certifications such as CISSP or others Experience in Application penetration testing, CTF competitions, CVE research and/or Bug Bounty recognition Experience in Web and Mobile (Android/iOS) based application/service assessment ...

structures. Self-starter and capable of independent working Team player and adept at working in multi-disciplinary and diverse teams Desirable Software engineering experience Penetration testing skills Life at BAE Systems Digital Intelligence We are embracing Hybrid Working. This means you and your colleagues may be working ...

structures. Self-starter and capable of independent working Team player and adept at working in multi-disciplinary and diverse teams Desirable Software engineering experience Penetration testing skills Life at BAE Systems Digital Intelligence We are embracing Hybrid Working. This means you and your colleagues may be working ...

cybersecurity, resilience, data protection, cloud security, supply chain security, and operational risk exposures.Assess supplier security capabilities through review of questionnaires, policies, certifications, audit reports, penetration testing results, independent assurance reports, and supporting evidence.Evaluate control effectiveness against recognised frameworks and standards including ISO 27001, NIST Cybersecurity Framework, SOC reports ...

resilience, data protection, cloud security, supply chain security, and operational risk exposures. Assess supplier security capabilities through review of questionnaires, policies, certifications, audit reports, penetration testing results, independent assurance reports, and supporting evidence. Evaluate control effectiveness against recognised frameworks and standards including ISO 27001, NIST Cybersecurity Framework ...

meet the highest standards. Run a strategic vulnerability management program to enhance internal IT. Vulnerability Management: Serve as the primary point of contact for penetration testing, vulnerability and patch management. You'll coordinate with technical teams to ensure vulnerabilities are identified, negotiated, and remediated swiftly. Strategic Partnership: Work ...