51 to 75 of 295 Penetration Testing Jobs in the UK

that supports how our engineering teams build and operate complex systems at scale. Take the next step in your career. Role As a Penetration Tester, you will lead and conduct penetration tests and vulnerability assessments across a wide range of internal systems and security controls. Your work will … directly strengthen our overall security posture through continuous testing, actionable insights and collaboration on remediation strategies. Responsibilities Perform in-depth penetration testing across a variety of technologies, including Kubernetes, Jenkins and Windows Domain Services. Deliver practical, impactful remediation advice to Control Owners based on identified vulnerabilities. Support ...

pipelines. Ability to oversee the delivery and operation of application and container security services, including SAST, DAST, SCA, RASP, perimeter scanning, and associated security testing capabilities. Experience of supporting Red Team and penetration testing activities, including test planning, scheduling, execution oversight, and integration of findings into … risk-based prioritisation of security findings. Ability to develop and maintain a deep understanding of TSB's technology estate and customer journeys, ensuring security testing and assurance activities are focused on critical business services, key applications, and supporting infrastructure. Experience of leadership, governance, and reporting to senior stakeholders, delivering ...

security posture. As an experienced Cloud Security Engineer, your working day will include but not be limited to: DevSecOps & SDLC Champion integration of security testing into CI/CD pipelines across all development teams and usage of automated security gates: SAST, DAST, dependency scanning, secrets detection Enable self-serve … mitigation plans Track and remediate vulnerabilities across infrastructure Manage customer initiatives related to due diligence when required to Support and develop annual programme of Penetration Testing and associated remediations Stakeholder Engagement Partner with internal and stakeholder management to support any requirements from the security function - particularly governance ...

Responsibilities: Serve as an application security subject matter expert who provides guidance to internal teams Work closely with development teams, perform code reviews, penetration tests, and architectural reviews on existing codes and new features. Develop, implement, and communicate vulnerability mitigation strategies to development teams Handle externally reported vulnerabilities … member of Corporate Information Security Responsible Disclosure Program committee. Drive Fortinet static and dynamic application security testing program. Develop strategies, evaluate solutions, design and implement tools, processes and controls to ensure that security and privacy are designed in Fortinet applications Advise development teams on SDLC best practices. Proactively research ...

will conduct security assessments, design security architectures, and help clients build security programs that meet regulatory requirements without creating operational friction. Responsibilities Lead penetration testing and vulnerability assessment engagements Design security architectures for cloud-native and hybrid environments Develop security compliance programs (SOC 2, ISO 27001, GDPR) Conduct … tabletop exercises Advise C-level executives on security strategy and risk management Requirements 8+ years in information security with consulting experience Deep expertise in penetration testing, vulnerability management, and threat modeling Knowledge of compliance frameworks: SOC 2, ISO 27001, GDPR, PCI-DSS Experience with cloud security (AWS Security ...

ability to present effectively to C-Suite leaders Strong understanding of the end-to-end vulnerability-scanning lifecycle and the effective management of penetration testing activities. Excellent security awareness with a proactive approach to continuous improvement Eligible and willing to undergo security clearance vetting Responsibilities for Security Analyst … Conditional Access, MFA, PIM and Identity Protection Implement and maintain Microsoft Sentinel, Purview and the Defender suite Manage the vulnerability-scanning lifecycle and coordinate penetration-testing activities Maintain security and sharing controls across email, SharePoint, OneDrive and Teams, including DLP, sensitivity labels, encryption and removable-media controls Manage ...

with infrastructure, application and business stakeholders to drive timely remediation of security weaknesses.* Validate remediation actions and help maintain accurate vulnerability reporting.* Support external penetration testing activities and track remediation actions through to completion.### ## Cloud, Microsoft 365 & Infrastructure* Support Azure administration and cloud security improvement initiatives.* Assist … routing and secure remote access.* PowerShell scripting or automation experience.* Exposure to ISO 27001, SOC 2, Cyber Essentials, NIST or similar security frameworks.* Penetration testing, vulnerability assessment or remediation experience.* Experience supporting audits, evidence collection, access reviews or security questionnaires.* Relevant certifications such as Security+ ...

full application stacks from the OS up through custom applications, or experience working with REST API based services and experience with threat modeling and penetration testing 5+ years of work in identifying security issues and risks, and developing mitigation plans experience 4+ years of (non-internship) scripting, programming … architectures/microservices and web services Experience in one or more of the following: application security frameworks, security code reviews, incident response, security infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls Experience developing, deploying and managing AI products at scaleExperience in security ...

organisation. Contribute to the continuous improvement of the organisation's cyber security maturity framework. Security Governance & Compliance Coordinate security assessments, including vulnerability assessments, penetration testing, ethical hacking exercises, and cyber security reviews. Support internal audits, external audits, regulatory reviews, and security assurance activities. Prepare risk assessment reports, management … services, or another regulated environment. Familiarity with industry standards and frameworks such as ISO 27001, NIST, COBIT, or CIS Controls. Exposure to vulnerability management, penetration testing, incident management, or third-party risk assessments. Relevant security certifications such as Security+, ISO 27001, CISM, CRISC, CISSP, or equivalent. Personal Attributes ...

exercises, communication protocols and post‐incident reviews. Manage the relationship and operational effectiveness of external cybersecurity partners/vendors, including SOC/MDR providers, penetration testing providers, security assessors and awareness/training providers. Lead vulnerability and exposure management across endpoints, servers, cloud, SaaS, identity, network and externally … through targeted awareness, phishing resilience, executive briefings and role‐specific guidance for higher‐risk groups. Drive continuous improvement through lessons learned from incidents, audits, penetration tests, risk assessments and technology changes. Required qualifications and experience Bachelor’s or Master’s degree in Computer Science, Information Security, Life Sciences ...

Service (SaaS) platforms. Implement and maintain Microsoft Defender , Microsoft Sentinel , Microsoft Purview , and other security technologies . Lead vulnerability management and coordinate penetration testing activities. Secure Microsoft 365 services, including Exchange Online , SharePoint Online , OneDrive , and Microsoft Teams . Implement data protection controls, including Data Loss Prevention … security role. Strong technical expertise in Microsoft Entra ID , Microsoft Defender Suite , Microsoft Sentinel , and Microsoft Purview . Proven experience managing vulnerability scanning and penetration testing programmes. Experience supporting ISO 27001 compliance and coordinating Cyber Essentials and Cyber Essentials Plus certifications. Strong analytical, problem-solving, and risk assessment ...

standards, regulations, and frameworks. Oversee the deployment and operation of security tools and technologies (e.g., firewalls, SIEM, endpoint protection, zero-trust technologies). Manage penetration testing and other assurance activities, including remediation of findings. Lead incident response planning and investigation of security breaches, ensuring timely resolution and reporting. … such as firewalls, SIEM, endpoint protection, and vulnerability management tools. Skilled in conducting risk assessments, managing IT risk registers, and overseeing assurance activities including penetration testing and incident response. Familiarity with relevant standards and frameworks (e.g. ISO 27001, NIST, COBIT, GDPR, DORA). Strong stakeholder engagement skills, with ...

Graduate Security Consultant/Penetration Tester - Bristol - £28,000-34,000 We're looking for a motivated graduate to join a cyber consultancy team in Bristol and begin building a career in security consulting and penetration testing, with structured mentorship and training from day one. This … offensive security. What you'll be doing: Carrying out security assessments and vulnerability scans across client systems, networks and applications Taking part in penetration testing engagements under guidance and supervision, helping identify and exploit vulnerabilities in client environments Analysing security risks and contributing to recommendations that help clients ...

velocity and enable rapid response to millisecond attack speeds generated by autonomous adversary AI. Execute regular offensive security operations, including AI Red Teaming and penetration testing of generative and agentic systems. Lead the defense against Shadow AI by developing and deploying AI access governance tools and enforcing strict … Enforce secure-by-design principles and integrate security checks into the continuous AI development lifecycle (CI/CD), ensuring coverage for all AI system testing pre and post-deployment. Present complex security concepts (e.g., prompt injection, model drift) to non-technical audiences to drive security awareness and culture across ...

implement and maintain robust security systems and protocols across the IT infrastructure. You will conduct risk assessments and vulnerability scans, mitigate vulnerabilities identified in penetration testing, and implement preventative measures to protect against cyber threats. You will monitor the security infrastructure and detect and respond to potential threats. … SSO.* Manage MDM\MAM and Conditional Access* Manage security certificates and keys.* Deliver Cyber Security Awareness Training* Remediate vulnerabilities and weaknesses identified during penetration testing.Experience - EssentialThe successful candidate will have a good working knowledge and experience in managing the majority of the following technology stack * CrowdStrike EDR* Mimecast Mail ...

implement and maintain robust security systems and protocols across the IT infrastructure. You will conduct risk assessments and vulnerability scans, mitigate vulnerabilities identified in penetration testing, and implement preventative measures to protect against cyber threats. You will monitor the security infrastructure and detect and respond to potential threats. … SSO. * Manage MDM\MAM and Conditional Access * Manage security certificates and keys. * Deliver Cyber Security Awareness Training * Remediate vulnerabilities and weaknesses identified during penetration testing. Experience - Essential The successful candidate will have a good working knowledge and experience in managing the majority of the following technology stack * CrowdStrike ...

mobile channel. We provide a suite of mobile security components, that provides an all-round security posture in mobile apps including associated services (penetration testing, obfuscation, consultancy etc.). Our mission is to build a scalable, adaptable, and proactive approach to securing client's mobile apps, enabling mobile … mobile platform. The key aspect of this role is the design and delivery of a world-class security framework, including associated services (penetration testing, research, consultancy etc.). Role Overview Experience of Mobile platform security, threat modelling and mitigation techniques Capable of conducting regular reviews of our mobile ...

Essential Roles & Responsibilities As a Penetration Tester at Claranet, you will able to deliver you own web application tests and through training and partnering, you will be involved in a full range of testing work from mobile app and infrastructure testing to social engineering and Red Team … exercises. Key Responsibilities: Undertaking web and mobile application testing and infrastructure testing engagements Using the opportunities provided by the business to improve skills and capabilities into all areas of testing Working with key clients providing bespoke consultancy, analysis and expertise Collaborating with other Claranet Business Units ...

banks, and crypto exchanges to investigate financial crime — secure by design. We partner directly with product and platform engineering on threat modeling, design reviews, penetration testing, and remediation of findings across our AWS and Kubernetes estate. As a Staff Product Security Engineer, you'll be the technical lead … platform engineering teams on design, code, and remediation Own Unified Security Review process for new product launches, vendor evaluations, and AI tooling — including custom penetration tests scoped to each review Drive Security Engineering Risk Management Framework, for consistent risk classification and remediation tracking across product Lead the Vulnerability Disclosure ...

secure connectivity Lead network upgrades across multiple sites with minimal business disruption Deliver infrastructure integration and migration projects Strengthen cyber security through vulnerability management, penetration testing remediation and security best practice Provide 2nd/3rd line technical expertise for complex infrastructure issues Work closely with senior stakeholders, technical … experience including LAN, WAN, VLANs, VPNs and Wi-Fi Experience with firewalls and network security technologies Solid understanding of cyber security, vulnerability management and penetration testing principles Experience delivering infrastructure or networking projects Excellent communication and stakeholder management skills Exposure to Azure infrastructure or cloud networking is desirable ...

Synack, a security tech company, seeks a Senior Software Engineer (AI) in the UK to design and ship autonomous AI agents for penetration testing within sandboxed environments. You will own end-to-end systems, improve prompts, tool integration and cost optimization while collaborating with security researchers. This remote ...

real impact. Responsibilities: Lead threat modelling across a portfolio of AI native products. Build, enhance and maintain security tooling and DevSecOps automation. Coordinate penetration testing activities and ensure remediation is delivered. Validate vulnerabilities, separating genuine security risks from false positives. Work closely with engineering teams to embed security … threat modelling and secure software development. Experience building security tooling and automation. Hands on experience with vulnerability management, validation and remediation. Knowledge of penetration testing methodologies and security scanning. Experience working within modern CI/CD environments. Exposure to AI assisted development tools such as Cursor, Codex, Claude ...

real impact. Responsibilities: Lead threat modelling across a portfolio of AI native products. Build, enhance and maintain security tooling and DevSecOps automation. Coordinate penetration testing activities and ensure remediation is delivered. Validate vulnerabilities, separating genuine security risks from false positives. Work closely with engineering teams to embed security … threat modelling and secure software development. Experience building security tooling and automation. Hands on experience with vulnerability management, validation and remediation. Knowledge of penetration testing methodologies and security scanning. Experience working within modern CI/CD environments. Exposure to AI assisted development tools such as Cursor, Codex, Claude ...

role that will combine technical breadth with practical influence. You’ll assess solutions across areas such as cyber security, networking, hardware, cryptography and penetration testing, using a structured, analytical approach to identify risks. You’ll provide decision makers and risk owners with advice on the technical aspects … with the organisation. About you You’ll bring a strong technical background, with experience in cyber security or related disciplines such as network engineering, penetration testing, vulnerability research, systems architecture or technical capability development. Crucially, this experience must have been gained within a national security or intelligence environment ...

role that will combine technical breadth with practical influence. You’ll assess solutions across areas such as cyber security, networking, hardware, cryptography and penetration testing, using a structured, analytical approach to identify risks. You’ll provide decision makers and risk owners with advice on the technical aspects … with the organisation. About you You’ll bring a strong technical background, with experience in cyber security or related disciplines such as network engineering, penetration testing, vulnerability research, systems architecture or technical capability development. Crucially, this experience must have been gained within a national security or intelligence environment ...