1 to 25 of 81 Penetration Testing Jobs in the UK excluding London

Penetration Testing Team Lead Technology Banking AVP Level Hybrid (London (Moorgate) 3 days per week) Salary & Package TBC Opportunity for a skilled Cyber Security Professional with penetration testing and red team expertise to join a global financial services organisation. This is a hands-on role where you'll simulate advanced cyber attacks, test defences, and influence … enterprise-level security strategy. Key Responsibilities Lead red team operations , penetration testing, and ethical hacking engagements Plan and deliver cyber attack simulations, vulnerability assessments, and social engineering tests Work with SOC teams on purple team exercises to enhance detection and response Produce executive reporting on cyber threats, risks, and remediation progress Collaborate with security and infrastructure teams to … strengthen overall cyber resilience Skills & Experience 3+ years in penetration testing/ethical hacking/red teaming Strong understanding of cyber threats, APTs, threat actor tactics, and exploit development Familiar with SIEM, defensive security monitoring, incident response, and detection engineering Deep knowledge of network, web application, and enterprise architecture security Excellent communication skills to present cyber risk insights More ❯

Penetration Testing Program Manager PMO Pen Manager 3 months Wokingham - 50% on site £450 MUST HAVE ACTIVE SC Summary A dynamic and detail-oriented PMO to oversee and coordinate a Penetration Testing (PEN Testing) program. This role is pivotal in ensuring that testing activities are well-managed, results are clearly communicated, and remediation efforts … are tracked across the organisation. While deep technical expertise in cybersecurity is not required, the ideal candidate will possess a strong understanding of PEN Testing concepts and be able to translate technical findings into actionable insights for senior stakeholders. Key Responsibilities Manage the end-to-end lifecycle of PEN Testing engagements across multiple teams and vendors Coordinate scheduling … resource allocation, and reporting timelines for all PEN Testing activities Review and consolidate PEN Test results, ensuring clarity and consistency in reporting Communicate findings, risks, and remediation progress to senior leadership and relevant business units Track and escalate unresolved issues or critical vulnerabilities Maintain documentation, dashboards, and audit trails for compliance and governance Collaborate with cybersecurity teams to ensure More ❯

Senior Penetration Tester Location: Fully Remote (UK-Based) Salary Range: £50,000 - £75,000 (dependent on experience) Position: Permanent, Full-Time My client is a dynamic and growing cybersecurity consultancy dedicated to providing top-tier security services to a diverse range of clients. They believe in empowering the team with the flexibility of remote work while tackling challenging and … engaging projects that make a real difference to their clients' security posture. The Role We are seeking a highly skilled and motivated Senior Penetration Tester to join our remote team. You will be responsible for leading and executing complex penetration tests against a variety of systems, networks, and applications. The ideal candidate is not just a proficient tester … but a critical thinker who can articulate risks clearly and provide pragmatic remediation advice to clients. Key Responsibilities Plan, lead, and execute sophisticated penetration tests across infrastructure, web applications, APIs, and internal networks. Conduct advanced Red Team exercises to simulate real-world adversary attacks and test organisational defences. Produce high-quality, clear, and concise reports for both technical and More ❯

Job Title: CREST Accredited Security Tester 6 Month Contract Hybrid (Central London based) £670 Per Day Inside IR35 Overview: Seeking a CREST-accredited Security Tester with strong penetration testing and vulnerability management expertise. Skilled in Tenable Nessus and experienced in managing third-party testing engagements , you'll deliver high-impact security assurance across complex environments. Key Responsibilities … Conduct internal penetration testing and security assessments across cloud and on-premise systems. Scope, execute, and report on tests using CREST standards and Nessus . Produce clear, high-quality scopes, proposals, and technical reports . Provide SME guidance on threats, risks, and testing methodologies. Manage and coordinate third-party CHECK/CREST testers . Lead vulnerability management … activities, validating remediation. Contribute to testing frameworks, playbooks, and secure-by-design practices . Research and assess emerging threats to enhance testing capability. Skills & Experience: CREST certification (CRT or equivalent). Proven penetration testing and security assurance expertise. Strong hands-on experience with Tenable Nessus . Track record of managing third-party pen testing engagements More ❯

are looking for a technically exceptional and visionary Senior Manager to lead our Offensive Security function. This role is both strategic and hands-on, responsible for delivering high-impact penetration testing, attack surface management, and a mature bug bounty program. The ideal candidate will be a transformation leader with deep technical expertise in offensive security and a passion … Security will serve as both a strategic leader and hands-on technical expert, driving the evolution of our offensive security capabilities. This role is accountable for delivering high-impact penetration testing, managing our attack surface, and overseeing a global bug bounty program. With a strong focus on identifying control gaps and advancing purple team maturity, the ideal candidate … a transformation mindset, and a proven ability to lead and inspire high-performing teams in a dynamic, threat-informed environment. RESPONSIBILITIES Technical Leadership & Execution - Personally lead and execute advanced penetration tests, red/purple team exercises, and adversary emulation campaigns across cloud, application, and infrastructure layers. - Identify and exploit vulnerabilities to simulate real-world attack scenarios, validate detection and More ❯

Cyber Security Consultant (Penetration Tester) Milton Keynes, Buckinghamshire, United Kingdom We are seeking an experienced Cyber Security Consultant (Penetration Tester) . Make an Impact at RSM UK At RSM, our consulting team brings together diverse advisory experts to deliver our six core solutions: business transformation, forensic, deal services, restructuring, finance function support, and risk and governance. Our solutions … seeking an enthusiastic Cyber Security Consultant to join our team. Working alongside our experienced team of specialists, you'll deliver offensive security services including digital footprint reconnaissance, social engineering, penetration testing, vulnerability assessments, and more to high-profile clients across all industries. The purpose of this role is to deliver offensive security services such as digital footprint reconnaissance … social engineering, vulnerability assessments, penetration testing, threat modeling, cyber-attack simulation exercises, and more. You'll benefit from ongoing coaching, career mentoring, and support through our career pathway. You will have opportunities to develop market-leading skills across different capabilities and advance your professional development. You will make an impact by: Supporting technical scoping activities for client assignments. More ❯

required software. Maintaining project documentation throughout the software development lifestyle. Working with the team to implement industry best practice code, ensure vulnerabilities are patched and ensure good QA. Responsibilities Penetration testing, functional testing, regression testing and further testing based on DDM's internal testing policies. Project manages his/her own tasks using internal … software, overseen by CTO. Daily meetings to allocate tasks and benchmark progress with individual reporting available through internal software. Listening to feedback meetings, requirements meetings and testing sessions to determine technical requirements. Assessing non-functional requirement data sources and converting into useful feedback. Working with the team to collect logs, feedback, customer support etc and determine any support/ More ❯

modelling, and secure coding practices across agile and DevOps teams, ensuring alignment with regulatory requirements (FCA, GDPR, etc). Oversee the secure development lifecycle, from requirements and design to testing, deployment, and ongoing operation, ensuring risk mitigation at every stage. Lead, mentor, and develop a team of application and product security professionals, fostering a culture of continuous improvement and … accelerate digital transformation. Develop and maintain application security architecture, reference models, and automation in line with cloud-first and hybrid environments (AWS, Azure, etc). Commission and manage security testing (SAST, DAST, pen testing, Interactive testing, Mobile testing, bug bounties), triage vulnerabilities, and drive remediation efforts with development teams. Report to executive leadership and the board … across the wider business. Engage with external partners, vendors, and industry groups to benchmark best practice and represent the firm's interests. Lead the offensive security function looking after penetration testing, red/purple team exercises and bug bounty programme. About you Extensive leadership experience in application and/or product security, ideally within the wealth management, financial More ❯

Penetration Tester 6 months Wokingham - 50% on site £450 Summary A dynamic and detail-oriented PMO to oversee and coordinate a Penetration Testing (PEN Testing) program. This role is pivotal in ensuring that testing activities are well-managed, results are clearly communicated, and remediation efforts are tracked across the organisation. While deep technical expertise in … cybersecurity is not required, the ideal candidate will possess a strong understanding of PEN Testing concepts and be able to translate technical findings into actionable insights for senior stakeholders. Key Responsibilities Manage the end-to-end lifecycle of PEN Testing engagements across multiple teams and vendors Coordinate scheduling, resource allocation, and reporting timelines for all PEN Testing … Facilitate post-test reviews and lessons learned sessions Required Skills & Experience Proven experience in a PMO, project management, or program coordination role Familiarity with cybersecurity principles, especially around PEN Testing and vulnerability management Strong communication skills with the ability to translate technical content for non-technical audiences Excellent organisational and stakeholder management abilities Experience working in regulated environments or More ❯

reports and alerts. Security Audits: Perform regular audits to ensure that systems and networks are operating securely. Security Tools Implementation: Implement security tools to enhance network and system security. Penetration Testing: Work with 3rd Parties to conduct penetration testing to identify vulnerabilities in the system. Stay Updated: Stay updated on the latest intelligence, including hackers’ methodologies … prospects available. The recruitment process. Adverts will close on Sunday 12th October (we will extend should this be required) Candidates who are shortlisted will be invited to complete online testing from 13th October to be completed by 15th October. Video interviews will be completed by our Talent Acquisition Partner on 17th October. Face to face interviews will take place More ❯

apps that sync with the client's hardware devices Drive DevOps best practices across CI/CD pipelines, monitoring, and deployment Design and maintain a cybersecurity-first architecture, including penetration testing Optimise an Azure-based infrastructure for high availability and cost efficiency Collaborate with cross-functional teams to deliver impactful new features Shape the design of future products … Tech Stack Web: ASP.NET Core, C#, JavaScript, HTML/CSS PC: C#, XAML, USB-MTP Mobile: Cordova (iOS & Android) Cloud: Microsoft Azure, CI/CD pipelines, version control, automated testing Security: Secure coding, authentication, penetration testing Hardware: Industry-leading devices, digitally integrated What They are Looking For KO2's client is seeking a creative, forward-thinking developer More ❯

apps that sync with the client's hardware devices Drive DevOps best practices across CI/CD pipelines, monitoring, and deployment Design and maintain a cybersecurity-first architecture, including penetration testing Optimise an Azure-based infrastructure for high availability and cost efficiency Collaborate with cross-functional teams to deliver impactful new features Shape the design of future products … Tech Stack Web: ASP.NET Core, C#, JavaScript, HTML/CSS PC: C#, XAML, USB-MTP Mobile: Cordova (iOS & Android) Cloud: Microsoft Azure, CI/CD pipelines, version control, automated testing Security: Secure coding, authentication, penetration testing Hardware: Industry-leading devices, digitally integrated What They are Looking For KO2's client is seeking a creative, forward-thinking developer More ❯

apps that sync with the client's hardware devices Drive DevOps best practices across CI/CD pipelines, monitoring, and deployment Design and maintain a cybersecurity-first architecture, including penetration testing Optimise an Azure-based infrastructure for high availability and cost efficiency Collaborate with cross-functional teams to deliver impactful new features Shape the design of future products … Tech Stack Web: ASP.NET Core, C#, JavaScript, HTML/CSS PC: C#, XAML, USB-MTP Mobile: Cordova (iOS & Android) Cloud: Microsoft Azure, CI/CD pipelines, version control, automated testing Security: Secure coding, authentication, penetration testing Hardware: Industry-leading devices, digitally integrated What They are Looking For KO2's client is seeking a creative, forward-thinking developer More ❯

Why join Dionach by Nomios? Since being acquired by Nomios in late 2024, Dionach by Nomios has continued its dynamic growth as a leading information security company. Specializing in penetration testing and information assurance services, we offer an incredible opportunity to be part of an experienced team, build your skills, and grow professionally. Dionach by Nomios holds impressive … environment for all our employees. If you require accommodations during the application process, let us know, and we'll work to meet your needs. What You'll Do • Conduct penetration tests across various environments, including web applications, APIs, Cloud, and network infrastructure. • Issue detailed reports outlining findings, risks, and recommendations for remediation. • Translate complex technical findings into actionable insights … engagements, as needed. What We're Looking For • Certifications: Relevant certifications such as CREST CRT, CREST CCT, OSCP, OSWE, OSCE, or equivalent level. • Experience: At least two years in penetration testing, covering network, web, and internal tests and customer engagements. • Tools: Proficiency with tools like Burpsuite Pro, Nessus, and other industry standards. • Communication: Strong verbal and written skills More ❯

Why join Dionach by Nomios? Since being acquired by Nomios in late 2024, Dionach by Nomios has continued its dynamic growth as a leading information security company. Specializing in penetration testing and information assurance services, we offer an incredible opportunity to be part of an experienced team, build your skills, and grow professionally. Dionach by Nomios holds impressive … environment for all our employees. If you require accommodations during the application process, let us know, and we'll work to meet your needs. What You'll Do • Conduct penetration tests across various environments, including web applications, APIs, Cloud, and network infrastructure. • Issue detailed reports outlining findings, risks, and recommendations for remediation. • Translate complex technical findings into actionable insights … engagements, as needed. What We're Looking For • Certifications: Relevant certifications such as CREST CRT, CREST CCT, OSCP, OSWE, OSCE, or equivalent level. • Experience: At least two years in penetration testing, covering network, web, and internal tests and customer engagements. • Tools: Proficiency with tools like Burpsuite Pro, Nessus, and other industry standards. • Communication: Strong verbal and written skills More ❯

Penetration Tester (SC Cleared) Location: Wokingham - Hybrid working (50/50 split) Contract Duration: Until 26/12/2025 initially - with a view to extend Daily Rate: £525/day Inside IR35 - Candidates will need to work through an Umbrella Company Clearance Required: Active SC Clearance We are looking for an experienced Penetration Tester to join a … team. This role offers the opportunity to work on a hybrid basis, engaging in high-impact security assessments across various platforms and environments. Key Responsibilities: Conduct manual and automated penetration tests on web applications, networks, APIs, and mobile platforms Identify, exploit, and document vulnerabilities, delivering detailed risk assessments Design and execute red team exercises and threat simulations Work closely … on emerging threats, tools, and techniques Support internal security awareness training and initiatives Contribute to the development of security policies and best practices Required Skills & Experience: Strong background in penetration testing, ethical hacking, or red teaming Deep knowledge of OWASP Top 10, MITRE ATT&CK, and CVSS scoring systems Proficiency with tools such as Burp Suite, Metasploit, Nmap More ❯

Penetration Tester - Hybrid (Wokingham) - Circa 400 per day inside ir35 - 2/3 months+ All applicants must hold an active SC clearance. My client is a global leading IT consultancy. They are on the hunt for an SC cleared PEN Tester to join them on an assigment until the end of the year. Key Responsibilities Conduct manual and automated … penetration tests on web applications, networks, APIs, and mobile platforms Identify, exploit, and document security vulnerabilities with detailed risk assessment Develop and execute red team exercises and threat simulations Collaborate with development and infrastructure teams to remediate findings Prepare comprehensive reports outlining findings, impact, and mitigation strategies Stay current with latest attack vectors, tools, and security trends Assist in … security awareness training and internal education efforts Contribute to security policies and best practices development Required Skills & Qualifications Proven experience in penetration testing, ethical hacking, or red teaming Strong understanding of OWASP Top 10, MITRE ATT&CK, and CVSS scoring Proficiency with tools like Burp Suite, Metasploit, Nmap, Wireshark, Kali Linux Familiarity with scripting languages (Python, Bash, PowerShell More ❯

Penetration Tester - Hybrid (Wokingham) - Circa £400 per day inside ir35 - 2/3 months+ All applicants must hold an active SC clearance. My client is a global leading IT consultancy. They are on the hunt for an SC cleared PEN Tester to join them on an assigment until the end of the year. Key Responsibilities Conduct manual and automated … penetration tests on web applications, networks, APIs, and mobile platforms Identify, exploit, and document security vulnerabilities with detailed risk assessment Develop and execute red team exercises and threat simulations Collaborate with development and infrastructure teams to remediate findings Prepare comprehensive reports outlining findings, impact, and mitigation strategies Stay current with latest attack vectors, tools, and security trends Assist in … security awareness training and internal education efforts Contribute to security policies and best practices development Required Skills & Qualifications Proven experience in penetration testing, ethical hacking, or red teaming Strong understanding of OWASP Top 10, MITRE ATT&CK, and CVSS scoring Proficiency with tools like Burp Suite, Metasploit, Nmap, Wireshark, Kali Linux Familiarity with scripting languages (Python, Bash, PowerShell More ❯

Penetration Tester - Hybrid (Wokingham) - Circa £400 per day inside ir35 - 2/3 months+ All applicants must hold an active SC clearance. My client is a global leading IT consultancy. They are on the hunt for an SC cleared PEN Tester to join them on an assigment until the end of the year. Key Responsibilities Conduct manual and automated … penetration tests on web applications, networks, APIs, and mobile platforms Identify, exploit, and document security vulnerabilities with detailed risk assessment Develop and execute red team exercises and threat simulations Collaborate with development and infrastructure teams to remediate findings Prepare comprehensive reports outlining findings, impact, and mitigation strategies Stay current with latest attack vectors, tools, and security trends Assist in … security awareness training and internal education efforts Contribute to security policies and best practices development Required Skills & Qualifications Proven experience in penetration testing, ethical hacking, or red teaming Strong understanding of OWASP Top 10, MITRE ATT&CK, and CVSS scoring Proficiency with tools like Burp Suite, Metasploit, Nmap, Wireshark, Kali Linux Familiarity with scripting languages (Python, Bash, PowerShell More ❯

the cyber kill chain. Familiarity with frameworks including MITRE ATT&CK, NIST, and CIS. Strong communication, analytical, and presentation skills. Solid understanding of network traffic flows, vulnerability management, and penetration testing principles. Knowledge of ITIL processes (Incident, Problem, Change Management). Ability to work independently and thrive in a 24/7 on-call environment. Education & Experience More ❯

detection, incident response, and cyber kill chain Familiarity with MITRE ATT&CK, NIST, and CIS frameworks Understanding of network traffic flows and vulnerability management Exposure to ethical hacking and penetration testing Knowledge of ITIL disciplines (Incident, Problem, Change Management) Experience with ServiceNow Security Suite Cloud experience (AWS and/or Azure) Excellent communication, presentation, and analytical skills Ability More ❯

Liaise with the Security Architects and wider team to provide technical requirements to ensure projects deliver secure solutions Work with the Security Business Partners to scope, arrange and support penetration testing and vulnerability testing and track remediation to a close Articulate risk in technical and non-technical terminology so that it can be interpreted by Information Technology More ❯

Position: Penetration Tester Location: London (with potential travel to client sites) Contract Role - [6-12 months, extendable] A deliverables-focused role, working on defined OT penetration testing engagements. What You'll Do: Conduct thorough penetration tests on client systems, applications, and networks - specifically OT/ICS systems - to identify security weaknesses. Perform threat modelling and adversarial … simulations. Collaborate with clients to understand their security needs and provide tailored recommendations. Develop and execute test plans, ensuring all testing is carried out ethically and professionally. Document and present findings in clear, concise reports, highlighting vulnerabilities and their potential impacts. Advise on remediation steps aligned with OT security best practices and relevant standards (e.g. IEC 62443, NIS2, NERC More ❯

management etc. Respond to security events and incidents. Perform regular security audits and risk assessments. Maintain security controls, identify risks and propose treatment plans. Conduct regular vulnerability scans and penetration tests. Liaise with global IT and Cloud teams to maintain company systems and their security. Liaise with global Security Operations Centre colleagues to resolve any issues. Ensure compliance with … Bachelor's degree in Computer Science, IT or Information Security. Compliance exposure with relevant security frameworks and standards (PCI, ISO, NIST, CIS). Experience with audits and compliance enforcement. Penetration testing experience. Strong understanding of networking protocols and systems architecture. Creating PCI digital keys or security access modules. Threat intelligence exposure. Proficient in programming or scripting languages. IaC More ❯

and compliance with MOD and HMG security standards (JSP, Def Stan 05-138/139). Proficiency in security threat modeling and risk assessments. Knowledge of secure development practices, penetration testing, and vulnerability assessments. Ability to communicate security risks and strategies to technical and non-technical stakeholders. Experience in incident response and remediation. Strong analytical and problem-solving More ❯