326 to 350 of 592 Penetration Testing Jobs in the UK

expertise and risk-based recommendations to strengthen organizational resilience. Develop and maintain security policies, standards, procedures, and playbooks, support audits and certification activities, review penetration testing and vulnerability assessment results, and drive continuous improvement aligned with industry best practices. What You Will Need: Proven experience in cybersecurity operations ...

resilience, data protection, cloud security, supply chain security, and operational risk exposures. Assess supplier security capabilities through review of questionnaires, policies, certifications, audit reports, penetration testing results, independent assurance reports, and supporting evidence. Evaluate control effectiveness against recognised frameworks and standards including ISO 27001, NIST Cybersecurity Framework ...

application and cloud security experts. Their mission is to protect the products we build, covering everything from secure design reviews to threat modelling and penetration testing, ensuring security is embedded from the ground up.Threat Detection & Response (this role!) focuses on protecting the company by building a robust detection ...

highly regulated cloud environments (e.g. PCI-DSS, ISO 27001, NIST guidelines). Demonstrated background in a highly technical role (e.g. Security Engineering, Infrastructure Engineering, Penetration Testing). Experience in infrastructure, application, and AI security (e.g. container security, secure code reviews, secure integration of generative AI/ML). ...

application and cloud security experts. Their mission is to protect the products we build, covering everything from secure design reviews to threat modelling and penetration testing, ensuring security is embedded from the ground up. Threat Detection & Response (this role!) focuses on protecting the company by building a robust ...

cybersecurity and engineering teams. Experience & Qualifications 10+ years in cybersecurity, including 5+ years of hands-on coding, alongside deep expertise in threat modeling, pen testing, code reviews, and offensive security methodologies. Strong foundation in network protocols (IP, DNS, HTTP, SSL/TLS), cryptography (PKI, encryption at rest/ ...

potential with meaningful careers.ROLE SUMMARY:This opportunity within the Offensive Security Operations team is a crucial role for the management of vulnerability discovery, offensive testing and remediation activities across the group which protects the business from sophisticated cyber threats!The role holder will work with our 3rd party vendors … plan and facilitate our testing programmes ensuring they run efficiently. The programmes in scope for the role include:Regulatory Threat Intelligence Led Pen Testing (TLTP) and Red teamingBug BountyContinuous External Attack Surface ManagementActive Directory security posture managementAny programme launched in the future aimed at driving down cyber risk ...

boutique networks, including firewalls, VPNs, end-point protection, and cloud environments (AWS/SaaS). Vulnerability & Patch Management: Lead regular vulnerability scanning and penetration testing schedules; prioritise and oversee the remediation of technical weaknesses across all retail systems and POS terminals. Incident Response & Forensics: Act as the technical … monitoring and log analysis, to proactively hunt for emerging threats against the luxury retail sector. Disaster Recovery & Business Continuity: Lead the technical design and testing of IT disaster recovery plans, ensuring the business can remain operational and secure in the event of a system failure or cyber-attack. Technical ...

cyber security posture across on-premises infrastructure and Microsoft Azure cloud environments. The role focuses on owning and delivering remediation from security assessments, penetration testing, and vulnerability management, while acting as the technical subject matter expert for cyber security across the business. This position is suited to candidates … platform. Act as an escalation point for complex or high-risk security events. Vulnerability Management & Remediation Own end-to-end remediation of findings from penetration tests, vulnerability scanning, and internal assessments. Work hands-on with infrastructure and regional teams to remediate vulnerabilities across servers, endpoints, networks, and cloud platforms. ...

workflows Support SAST, SCA, secrets scanning, and other security controls Maintain SBOMs, dependency visibility, and remediation follow-up Support security assessments, vulnerability assessments, and penetration testing Maintain vulnerability handling playbooks, product security procedures, and incident response runbooks What we’re looking for 3+ years of experience in product … security expert Hands‐on experience with AWS security controls, best practices, and architecture patterns Hands‐on experience with C++ or JavaScript Experience with security testing and automation using scripting, APIs, CI/CD pipelines, or specialized tools Experience with threat modeling for SaaS, API, cloud, or on‐prem product ...

DAST/SCA tooling integrated into CI/CD pipelines and code review (manual and/or AI assisted) Coordinate external and execute internal penetration test engagements - scope, logistics, findings triage - and drive remediation to closure with engineering teams Maintain and evolve secure coding standards, and run a security … OWASP Top 10 and secure coding practices across at least one major language/framework used in a production environment Experience coordinating and running penetration testing programmes, including remediation tracking Comfortable communicating security risk clearly to engineering and product audiences and influencing senior leadership Demonstrable experience with adversarial ...

internal audits, control reviews, and risk assessments. Maintain and monitor the organisational risk register. Support business continuity and resilience planning activities. Coordinate vulnerability scanning, penetration testing, and remediation programmes. Assist with the investigation and resolution of information security incidents. Deliver security awareness initiatives, user training, and phishing simulations ...

internal audits, control reviews, and risk assessments. Maintain and monitor the organisational risk register. Support business continuity and resilience planning activities. Coordinate vulnerability scanning, penetration testing, and remediation programmes. Assist with the investigation and resolution of information security incidents. Deliver security awareness initiatives, user training, and phishing simulations ...

/CD and Jira. Strong Python skills, including FastAPI and Pytest. Experience within a regulated environment. Desirable Docker, Kubernetes, Helm, Serverless, GitOps and CDK. Penetration testing exposure. Snowflake, MongoDB, Databricks, GitHub and Terraform Cloud. Certifications Associate-level cloud certification (AWS, Azure, GCP or equivalent). Cyber security certification ...

Group IT Security Risk Register. Lead cyber security risk assessments and remediation planning activities. Manage incident response, cyber investigations, and escalation procedures. Oversee annual penetration testing programmes and security audits. Support compliance initiatives including Cyber Essentials, Cyber Essentials Plus, ISO 27001, and similar frameworks. Produce security reporting ...

Group IT Security Risk Register. Lead cyber security risk assessments and remediation planning activities. Manage incident response, cyber investigations, and escalation procedures. Oversee annual penetration testing programmes and security audits. Support compliance initiatives including Cyber Essentials, Cyber Essentials Plus, ISO 27001, and similar frameworks. Produce security reporting ...

with security policies Design and implement secure infrastructure solutions, embedding security requirements from the outset rather than retrofitting them Conduct regular vulnerability assessments and penetration testing exercises, prioritising and remediating findings in a timely manner Manage and continuously improve security tooling, including SIEM, EDR, firewalls, IDS/ ...

compliance with security policiesDesign and implement secure infrastructure solutions, embedding security requirements from the outset rather than retrofitting themConduct regular vulnerability assessments and penetration testing exercises, prioritising and remediating findings in a timely mannerManage and continuously improve security tooling, including SIEM, EDR, firewalls, IDS/IPS, and endpoint ...

/IP, and secure communication designExperience with network security technologies, including firewalls, IDS/IPS, VPNs, and segmentation strategiesExperience in risk assessment methodologies, penetration testing, or vulnerability managementHave a permanent work permit in UKWork in a way that works for youWe recognize that everyone is different and that ...

certification, accreditation, and compliance activities in coordination with the Office of the CISO, government customers, auditors, certification bodies, and third-party assessors.Coordinate and support penetration testing, security assessments, and related assurance activities.Assist in the management and coordination of regional regulatory compliance and data privacy initiatives.Collaborate with Security Operations ...

Kubernetes-based platform. Govern security controls across the full stack: Kafka, .NET/C#, Vue.js, Kong API Gateway, Auth0, and Salesforce. Lead threat modelling, penetration testing, and vulnerability management programmes. Own identity and access management strategy, including Entra ID, Auth0, and partner federation. Drive security engineering best practices ...

technology change. Ensure security requirements are embedded within project, change and delivery lifecycles through secure-by-design principles and threat-led risk assessments. Oversee penetration testing, technical security assessments and vulnerability assurance activities, ensuring identified risks are appropriately assessed and managed. Provide cyber security expertise and advice ...

material technology change.Ensure security requirements are embedded within project, change and delivery lifecycles through secure-by-design principles and threat-led risk assessments.Oversee penetration testing, technical security assessments and vulnerability assurance activities, ensuring identified risks are appropriately assessed and managed.Provide cyber security expertise and advice to technology teams ...

assessments.Cyber Security and Security MonitoringOversee cyber security measures including vulnerability management, access control, security monitoring and incident detection.Ensure regular vulnerability assessments, security reviews and penetration testing are conducted.Incident ManagementEstablish and maintain procedures for managing information security incidents.Coordinate investigation, response and reporting of cyber security incidents.Operational ResilienceSupport the Branch ...

Security and Security MonitoringOversee cyber security measures including vulnerability management, access control, security monitoring and incident detection. Ensure regular vulnerability assessments, security reviews and penetration testing are conducted. Incident ManagementEstablish and maintain procedures for managing information security incidents. Coordinate investigation, response and reporting of cyber security incidents. Operational ...