76 to 100 of 489 Penetration Testing Jobs in the UK

giving team members the chance to work on high-impact digital transformation projects and collaborate with experienced professionals. This role involves conducting security assessments, penetration testing, and red team exercises, including government-accredited CHECK engagements, to help clients strengthen their security posture. Ready to take your … house developed tools for security testing. Conduct manual reviews to identify issues within customer infrastructure and web applications. Perform various types of security testing, including network penetration, web application, mobile security assessments, and social engineering. Participate in red team engagements, employing creative strategies to outsmart defenders. Explore various ...

threat logs, KnowBe4 training programs, and Secret Server credential storage. Network Security: Implementfirewallcontrols and email security standards (SMTP, TLS) to safeguard business data. Compliance & Testing: Contributeto ISO 27001 compliance (policy/documentation); review penetration testing and vulnerability scans to proactively mitigate risk. Business Continuity,Operational Reliability Disaster … Recovery:Monitorbackup systems, conduct regular restore testing, and support annual external audits and DR testing initiatives. Proactive Monitoring: Manage system uptime, antivirus/EDR, and SIEM tools to quicklyidentifyand resolve performance anomalies. Network Admin: Support Azure VPN connectivity and applied IP routing and subnetting fundamentals to resolve complex ...

Skip to content Senior Penetration Tester About the Company ThreatSpike is the world’s first AI-managed platform to deliver fully managed IT and complete cybersecurity as a single, fixed price subscription. One platform replaces the fragmented model of MSPs, MSSPs and point-solution vendors with one platform … Every capability ThreatSpike delivers runs inside a single platform, under one team. Not split between an IT provider, a security vendor and a pen testing firm that have never spoken to each other. There are no gaps between the tools. There are no gaps between the teams. There ...

SBOM) and define release gates. Maintain security workflows and coach engineers on secure coding and threat‐driven design. Validation & Supplier Engagement Support V&V, penetration testing, and remediation, and manage security alignment with suppliers. Compliance & Documentation Own the security compliance dossier, including Cybersecurity Plans, Interface Agreements, Security Cases … Hardware Security Modules (HSM), secure element integration, and sensor-level protection. Skilled in cloud-native security practices, and zero-trust architecture. Experienced in advanced testing techniques, including penetration testing, fuzzing, and reverse engineering of embedded firmware. Knowledgeable in privacy engineering and compliance with regulatory frameworks like GDPR ...

compliance projects, cutting effort and cost while building a robust structure to meet ongoing information security challenges. This is a great opportunity for a Penetration Tester to strengthen clients' security postures in a remote-based role. The ideal candidate will help clients prioritise and mitigate security risks across their … enterprises, working in a supportive environment with the opportunity to develop towards CREST Registered Penetration Tester status. Responsibilities: Conduct penetration testing assessments to identify vulnerabilities and weaknesses in clients' systems. Support the delivery of web application, infrastructure and network testing engagements under the guidance of senior ...

using SIEM/EDR data and MITRE ATT&CK‐aligned techniques. Support vulnerability assessment and security scanning activities using relevant tools. Provide input into penetration testing activities and interpret findings for remediation. Deliver training, coaching, and knowledge transfer to enhance the existing cybersecurity team's skills in CrowdStrike … enterprise environments. Experience supporting or working alongside managed SOC providers. At least 2 years’ experience in vulnerability assessment tools (desirable). Exposure to penetration testing and web application security testing (desirable). Expert‐level experience with CrowdStrike Falcon (Prevent, Insight, Discover). Strong expertise in Splunk, including ...

that supports how our engineering teams build and operate complex systems at scale. Take the next step in your career. Role As a Penetration Tester, you will lead and conduct penetration tests and vulnerability assessments across a wide range of internal systems and security controls. Your work will … directly strengthen our overall security posture through continuous testing, actionable insights and collaboration on remediation strategies. Responsibilities Perform in-depth penetration testing across a variety of technologies, including Kubernetes, Jenkins and Windows Domain Services. Deliver practical, impactful remediation advice to Control Owners based on identified vulnerabilities. Support ...

Lead proactive threat hunting and translate threat intelligence into actionable security measures. Identify and address gaps in monitoring, logging and detection capabilities. Work with penetration testing and red‐team providers to strengthen defensive security controls. Vulnerability and Exposure Management Lead the end-to-end vulnerability management process, from … Monitor and report on critical and high‐risk vulnerabilities, remediation performance and overall attack‐surface exposure. Oversee external vulnerability scanning and coordinate remediation of penetration testing findings. Security Tooling and Automation Own and continuously improve the security tools used for threat detection, investigation, response and vulnerability management. Identify ...

assessments within agreed deadlines Produce written and verbal reports for clients to an excellent standard. Develop and share knowledge with the rest of the penetration testing team Work with teams across PA Consulting, providing technical knowledge and expertise where required Be self-motivated and client oriented, aiming … other industry recognised certifications such as the OSCP or CREST/CyberScheme qualifications Have developed their SME knowledge in one or more fields of penetration testing, such as mobile application testing, Cloud, Operational Technology, or a specific industry/environment such as telecoms, defence, or maritime Desire ...

security design assessments for new services. Carry out basic hands-on security assessments (e.g. SSL Labs configuration reviews or CSP evaluation, not including full penetration testing). Plan and coordinate independent penetration testing activities. Provide recommendations for stage-gating and go-live decisions. Own the completion … evidence. Provide recommendations for SecOps processes and automation for new systems. Technical Scope Security products (email filtering, AV, firewalls, WAFs, MS Defender). Security testing (SAST, DAST). Virtualisation platforms and operating systems, including Hyper-V and Windows Server. Enterprise systems (email, PKI, AD, GP, SCCM, Azure, M365). ...

will focus on finding and responding to security vulnerabilities across the Brex platform. In this role, you will perform code reviews, design reviews, penetration testing, and vulnerability management. You will develop and maintain tooling to perform static and dynamic testing of the Brex platform and tooling which … with Security Operations, GRC, Product Security, Front End Platform, IT Infrastructure teams. We're looking for individuals with a strong background and interest in penetration testing. You should have a demonstrated ability to find vulnerabilities in complex systems and craft exploits to demonstrate business impact. This role is highly ...

will conduct security assessments, design security architectures, and help clients build security programs that meet regulatory requirements without creating operational friction. Responsibilities Lead penetration testing and vulnerability assessment engagements Design security architectures for cloud-native and hybrid environments Develop security compliance programs (SOC 2, ISO 27001, GDPR) Conduct … tabletop exercises Advise C-level executives on security strategy and risk management Requirements 8+ years in information security with consulting experience Deep expertise in penetration testing, vulnerability management, and threat modeling Knowledge of compliance frameworks: SOC 2, ISO 27001, GDPR, PCI-DSS Experience with cloud security (AWS Security ...

assessments within agreed deadlines. Produce written and verbal reports for clients to an excellent standard. Develop and share knowledge with the rest of the penetration testing team. Work with teams across PA Consulting, providing technical knowledge and expertise where required. Be self‐motivated and client oriented, aiming … other industry recognized certifications such as the OSCP or CREST/CyberScheme qualifications. Have developed their SME knowledge in one or more fields of penetration testing, such as mobile application testing, Cloud, Operational Technology, or a specific industry/environment such as telecoms, defence, or maritime. Desire ...

deployed, configured correctly and effective against relevant threats. Alongside this, you'll lead security design reviews, protective control standards, project security assurance and penetration testing, while shaping security architecture across areas including AI, zero trust identity and multi-cloud environments. What you'll be doing Developing and running … identity, email, network, cloud, data and backup environments. Using techniques including breach and attack simulation, purple teaming, posture monitoring, attack surface management and detection testing to assess whether controls are deployed, configured correctly and operating effectively. Defining security control metrics and risk indicators, using evidence from control validation ...

threat-led security assessments and adversary simulation activities in complex government and defence environments. Key Responsibilities: Deliver red team operations, adversary emulation and advanced penetration testing activities. Conduct threat-led security assessments to evaluate the effectiveness of people, processes and technology against realistic cyber threats. Support the design … replay activities. Work closely with customers, project teams and security stakeholders while sharing knowledge and mentoring colleagues. Job Requirements: Significant experience as a Senior Penetration Tester or in a comparable red team, adversary simulation or offensive security role. Active DV clearance. Strong technical capability in one or more areas ...

policies, procedures, and playbooks Monitors, investigates and responds to security incidents Performs root cause analysis on identified vulnerabilities and incidents Conducts security reviews and penetration testing across company products and services Conducts vulnerability scanning and triages vulnerabilities across company products Monitor changes in the network and network activity … Demonstrated knowledge of information security concepts and best practices Has a deep understanding of InfoSec concepts such as: cloud infrastructure, application security, vulnerability scanning, penetration testing Experience with SIEM tools, log observability, Azure or AWS and other infosec related apps and tools preferred Bachelor’s degree in information ...

Guideposts Trust Limited is seeking a skilled Penetration Tester to join our expanding team in the United Kingdom. The role focuses on manual penetration testing across multiple disciplines, with reporting to a high standard and clear communication to non-technical audiences. We require a minimum … years’ experience in penetration testing, along with a relevant degree in cyber security or related field. Some travel to client sites will be necessary. #J-18808-Ljbffr ...

Leonardo UK Ltd seeks an experienced CHECK Team Leader to lead penetration testing engagements across defence and government environments, delivering infrastructure, web, API, cloud, OT testing and actionable remediation advice. You will plan, scope, and report, ensuring CHECK compliance and high-quality outcomes. You will mentor junior … staff, develop testing methodologies, and contribute to service offerings while engaging with customers and stakeholders throughout the project lifecycle. #J-18808-Ljbffr ...

platforms you may be working with include: Cisco Firewalls Cisco Routers Cisco Switches Juniper Platforms SIEM Solutions IDS/IPS Vulnerability Management Tools Penetration Testing Tools Computer Forensic Tools ISO27001 Compliance ITIL GDPR Qualifications and requirements for the Cyber Security Engineer: Minimum 5 years' experience designing and managing … Routers and Switches Experience with Juniper networking platforms Hands-on knowledge of SIEM, IDS/IPS and vulnerability management Experience carrying out or supporting penetration testing activities Understanding of ISO27001, GDPR and ITIL best practices Ability to communicate technical cyber security concepts to both technical and non-technical ...

stage or mid-career professional looking to develop their career in a fast-scaling start-up. What you will do: Conduct vulnerability assessments and penetration testing on IT systems, IC Perform risk assessments for new projects, system integrations, and vendor connections that touch both IT and OT environments … concept exploits, detection signatures, and defensive countermeasures for identified vulnerabilities Build and maintain a research lab environment with representative IT and OT equipment for testing and experimentation Publish research findings through internal reports, whitepapers, and external conference presentations (as appropriate) Stay current on emerging OT threats, vulnerabilities, and industry ...

Since being acquired by Nomios in late 2024, Dionach by Nomios has continued its dynamic growth as a leading information security company. Specializing in penetration testing and information assurance services, we offer an incredible opportunity to be part of an experienced team, build your skills, and grow professionally. … required. Candidates must be eligible to work in the UK and willing to undergo the necessary vetting processes. What You'll Do Conduct penetration tests across various environments, including web applications, APIs, Cloud, and network infrastructure. Issue detailed reports outlining findings, risks, and recommendations for remediation. Translate complex technical ...

evidenced across technology services and suppliers. Own the technology risk register, facilitate risk assessments and track risk treatment plans. Oversee vulnerability management, coordinate penetration testing and monitor remediation. Support security incident management and post-incident reviews. Coordinate responses to audits, assurance reviews and regulatory requests. Support compliance with … Experience of risk management, audit support and regulatory compliance. An understanding of cloud security, identity management and third-party risk. Experience supporting vulnerability management, penetration testing and incident response. The ability to influence colleagues and suppliers and communicate security requirements clearly. A practical approach to balancing security, commercial ...

enterprise technologies.Participate in incident-response exercises and post-incident reviews.Vulnerability, Risk & Security InitiativesDrive regional vulnerability prioritization, remediation, and validation with Technology teams.Support vulnerability assessments, penetration testing, risk assessments, and remediation activities.Participate in security reviews of new technologies, SaaS platforms, cloud services, AI capabilities, and integrations.Help ensure regional technology …/XDR, identity security, vulnerability management, email security, and cloud security.Experience investigating identity, endpoint, email, SaaS, and cloud security events.Understanding of vulnerability management, penetration testing, risk assessment, and remediation practices.Familiarity with frameworks such as ISO/IEC 27001, NIST CSF, and CIS Controls.Experience within a multinational or geographically ...

incident‐response exercises and post‐incident reviews. Vulnerability, Risk & Security Initiatives Drive regional vulnerability prioritization, remediation, and validation with Technology teams. Support vulnerability assessments, penetration testing, risk assessments, and remediation activities. Participate in security reviews of new technologies, SaaS platforms, cloud services, AI capabilities, and integrations. Help ensure … identity security, vulnerability management, email security, and cloud security. Experience investigating identity, endpoint, email, SaaS, and cloud security events. Understanding of vulnerability management, penetration testing, risk assessment, and remediation practices. Familiarity with frameworks such as ISO/IEC 27001, NIST CSF, and CIS Controls. Experience within a multinational ...

Barclay Simpson is seeking an experienced Penetration Tester with people management to lead offensive security strategy across a cloud-first environment. You will head Penetration Testing, red and purple team activities, and partner with engineering to embed security into product delivery while directly managing a small team ...