126 to 150 of 234 Remote/Hybrid Penetration Testing Jobs

privilege, contextual access control and segmentation of services, users and devices Defining and reviewing security assurance activities, including design assurance, verification, validation, vulnerability assessment, penetration testing inputs and interpretation of assurance evidence Developing and communicating corporate and domain information security policy, standards, guidelines and design guardrails Identifying ...

load for engineering teams, and improve release velocity. What You’ll Do Design, develop, and maintain CI/CD pipelines to automate software builds, testing, and releases. Build and maintain internal tooling to support the software development lifecycle (e.g., code quality analysis, dependency management, automated testing). Collaborate … maintain infrastructure as code (IaC) for internal development environments. Work closely with development teams to troubleshoot and resolve issues related to build processes, testing, and deployments. Coordinate penetration testing, code/virus scanning, and disseminate findings to the engineering team for resolution. Measure performance and environment ...

Senior and Principal level Consultants. Working within a defence-focused environment, you will deliver threat-led security assessments, adversary emulation activities and advanced security testing for customers operating within complex and high-assurance environments. You will emulate realistic cyber threats, assess the effectiveness of security controls and provide actionable … also wanting to influence how a capability develops and matures over time. Core areas (must have): Experience delivering red team, adversary simulation or advanced penetration testing activities. Relevantcertifications relating tored teaming. Strong technical skills in one or more of the following areas: initial access, cloud exploitation, malware development ...

Senior and Principal level Consultants. Working within a defence-focused environment, you will deliver threat-led security assessments, adversary emulation activities and advanced security testing for customers operating within complex and high-assurance environments. You will emulate realistic cyber threats, assess the effectiveness of security controls and provide actionable … also wanting to influence how a capability develops and matures over time. Core areas (must have) Experience delivering red team, adversary simulation or advanced penetration testing activities. Relevant certifications relating to red teaming. Strong technical skills in one or more of the following areas: initial access, cloud exploitation ...

Senior and Principal level Consultants. Working within a defence-focused environment, you will deliver threat-led security assessments, adversary emulation activities and advanced security testing for customers operating within complex and high-assurance environments. You will emulate realistic cyber threats, assess the effectiveness of security controls and provide actionable … also wanting to influence how a capability develops and matures over time. Core areas (must have):Experience delivering red team, adversary simulation or advanced penetration testing activities. Relevant certifications relating to red teaming. Strong technical skills in one or more of the following areas: initial access, cloud exploitation ...

good understanding of relevant data protection legislation (e.g., UK GDPR). ISO 27001, SOC 2, NIST CSF, CAF, HIPAA, DSPT Gap analysis, auditing, or penetration testing Process and procedure development Software or AI development/testing Client-facing roles Relevant certifications (CISSP, CISM, CREST, etc. ...

security strategy and maturity roadmap • Own and continuously improve security operations and the outsourced SOC • Lead cyber incident investigation and response • Oversee vulnerability management, penetration testing and remediation programmes • Maintain ownership of ISO 27001 and Cyber Essentials Plus • Establish security architecture principles across infrastructure, cloud, SaaS, data ...

Familiarity with Dagger-based pipelines and workflow orchestration (e.g., Argo Workflows) Experience creating and maintaining Helm charts for Kubernetes deployments Background in application security, penetration testing, or compliance frameworks (e.g., ISO 27001, SOC 2) Experience with secrets management tooling such as HashiCorp Vault or Azure Key Vault Soft ...

help improve how vulnerability handling works as the volume grows. Your responsibilities Review incoming reports from external researchers, bug bounty and vulnerability disclosure programmes, penetration tests, AI-assisted testing platforms, and internal security assessments Validate findings: check the affected asset, reproduce the issue where safe and appropriate … impacting detail, internal infrastructure information, credentials, screenshots, logs, and exploit chains Your key competencies 5+ years of previous experience in vulnerability triage, application security, penetration testing, security operations, or a closely related security role Ability to understand and validate technical vulnerability reports, including incomplete, unclear, automated, or poorly ...

roleJob Title: Application Security EngineerJob Summary: Designs, implements, and operates security controls to prevent and detect attacks against company systems, applications, and data. Conducts penetration testing and vulnerability assessments across applications, operating systems, and networks. Responds to cybersecurity incidents by identifying, isolating, and removing unauthorized access. Researches emerging … system disruption, or unauthorized access. People Manager: NoWhat you'll do Administer and enforce security policies governing system and application access. Perform application security testing and reviews to ensure secure configurations and compliance with standards. Conduct penetration tests and vulnerability assessments across applications, OS, and network layers. Lead ...

governance documentation. Drive maturity of assurance processes, tooling, reporting, and governance across multiple programmes. Lead incident response capability development, including response plans, playbooks, testing, exercising, and Tabletop Exercises (TTXs). Manage vulnerability, risk, audit, control assessment, and compliance activities, ensuring findings are prioritised and driven through to resolution. Engage … protection, IDS/IPS, SIEM, identity and access management, PKI, LDAP, Active Directory, SAML, encryption, and key management. Experience interpreting outputs from vulnerability assessments, penetration testing, IT Health Checks (ITHCs), and security monitoring activities to support remediation planning and risk-based prioritisation. Ability to assess technical security controls ...

governance documentation. Drive maturity of assurance processes, tooling, reporting, and governance across multiple programmes. Lead incident response capability development, including response plans, playbooks, testing, exercising, and Tabletop Exercises (TTXs). Manage vulnerability, risk, audit, control assessment, and compliance activities, ensuring findings are prioritised and driven through to resolution. Engage … protection, IDS/IPS, SIEM, identity and access management, PKI, LDAP, Active Directory, SAML, encryption, and key management. Experience interpreting outputs from vulnerability assessments, penetration testing, IT Health Checks (ITHCs), and security monitoring activities to support remediation planning and risk-based prioritisation. Ability to assess technical security controls ...

measures that are "secure-by-design" and "secure-by-default." This engineering excellence has driven ControlPlane deeper into cybersecurity providing services like threat modelling, penetration testing, and supply chain security to ensure robust protection against cyberattacks in containerised and cloud-native environments. We are acclaimed for our contributions ...

structures. Self-starter and capable of independent working Team player and adept at working in multi-disciplinary and diverse teams Desirable Software engineering experience Penetration testing skills Life at BAE Systems Digital Intelligence We are embracing Hybrid Working. This means you and your colleagues may be working ...

structures. Self-starter and capable of independent working Team player and adept at working in multi-disciplinary and diverse teams Desirable Software engineering experience Penetration testing skills Life at BAE Systems Digital Intelligence We are embracing Hybrid Working. This means you and your colleagues may be working ...

meet the highest standards. Run a strategic vulnerability management program to enhance internal IT. Vulnerability Management: Serve as the primary point of contact for penetration testing, vulnerability and patch management. You'll coordinate with technical teams to ensure vulnerabilities are identified, negotiated, and remediated swiftly. Strategic Partnership: Work ...

application and cloud security experts. Their mission is to protect the products we build, covering everything from secure design reviews to threat modelling and penetration testing, ensuring security is embedded from the ground up. Threat Detection & Response (this role!) focuses on protecting the company by building a robust ...

with meaningful careers. ROLE SUMMARY:This opportunity within the Offensive Security Operations team is a crucial role for the management of vulnerability discovery, offensive testing and remediation activities across the group which protects the business from sophisticated cyber threats! The role holder will work with our 3rd party vendors … plan and facilitate our testing programmes ensuring they run efficiently. The programmes in scope for the role include: Regulatory Threat Intelligence Led Pen Testing (TLTP) and Red teamingBug BountyContinuous External Attack Surface ManagementActive Directory security posture managementAny programme launched in the future aimed at driving down cyber risk ...

boutique networks, including firewalls, VPNs, end-point protection, and cloud environments (AWS/SaaS). Vulnerability & Patch Management: Lead regular vulnerability scanning and penetration testing schedules; prioritise and oversee the remediation of technical weaknesses across all retail systems and POS terminals. Incident Response & Forensics: Act as the technical … monitoring and log analysis, to proactively hunt for emerging threats against the luxury retail sector. Disaster Recovery & Business Continuity: Lead the technical design and testing of IT disaster recovery plans, ensuring the business can remain operational and secure in the event of a system failure or cyber-attack. Technical ...

workflows Support SAST, SCA, secrets scanning, and other security controls Maintain SBOMs, dependency visibility, and remediation follow-up Support security assessments, vulnerability assessments, and penetration testing Maintain vulnerability handling playbooks, product security procedures, and incident response runbooks What we’re looking for 3+ years of experience in product … security expert Hands‐on experience with AWS security controls, best practices, and architecture patterns Hands‐on experience with C++ or JavaScript Experience with security testing and automation using scripting, APIs, CI/CD pipelines, or specialized tools Experience with threat modeling for SaaS, API, cloud, or on‐prem product ...

internal audits, control reviews, and risk assessments. Maintain and monitor the organisational risk register. Support business continuity and resilience planning activities. Coordinate vulnerability scanning, penetration testing, and remediation programmes. Assist with the investigation and resolution of information security incidents. Deliver security awareness initiatives, user training, and phishing simulations ...

/CD and Jira. Strong Python skills, including FastAPI and Pytest. Experience within a regulated environment. Desirable Docker, Kubernetes, Helm, Serverless, GitOps and CDK. Penetration testing exposure. Snowflake, MongoDB, Databricks, GitHub and Terraform Cloud. Certifications Associate-level cloud certification (AWS, Azure, GCP or equivalent). Cyber security certification ...

Group IT Security Risk Register. Lead cyber security risk assessments and remediation planning activities. Manage incident response, cyber investigations, and escalation procedures. Oversee annual penetration testing programmes and security audits. Support compliance initiatives including Cyber Essentials, Cyber Essentials Plus, ISO 27001, and similar frameworks. Produce security reporting ...

Group IT Security Risk Register. Lead cyber security risk assessments and remediation planning activities. Manage incident response, cyber investigations, and escalation procedures. Oversee annual penetration testing programmes and security audits. Support compliance initiatives including Cyber Essentials, Cyber Essentials Plus, ISO 27001, and similar frameworks. Produce security reporting ...

vendor APIs • Drive adoption of automation tools such as AlgoSec, Tufin, Jenkins, and Git-based workflows Security Operations & Risk Management • Oversee vulnerability assessments, penetration testing coordination, and remediation efforts • Develop and maintain security policies, threat models, and governance frameworks • Partner with cross-functional teams to embed security best ...