101 to 125 of 226 Remote/Hybrid Penetration Testing Jobs

DevOps, automation, data and machine learning... We’re hiring a Senior Offensive Security Analyst with deep expertise in API Security, OAuth, and web application penetration testing. The role will exclusively focus on identifying weaknesses in authentication and authorisation implementations across multiple teams, ensuring consistency and strong security practices within … services. Please note: This role is fully remote and open to candidates located anywhere within the UK. Required Experience: Strong background in web application penetration testing Deep, hands‐on expertise in API Security, OAuth, JWT , and token‐based authentication/authorisation Ability to evaluate systems both ...

enterprises, provides research-fueled security services across all industries. Our cutting-edge cybersecurity teams provide highly specialized technical and programmatic services including full-stack penetration testing, program efficacy assessments, and hardware hacking. IOActive brings a unique attacker’s perspective to every engagement to maximize cybersecurity investments and improve … side ARM 32- and 64-bit assembly Wi‐Fi/Bluetooth Reverse engineering, specifically firmware Hardware/embedded system hacking Vulnerability assessment and penetration testing Knowledge of security‐related topics, such as authentication, entitlements, identity management, data protection, data leakage prevention, validation checking, encryption, hashing, principle of least ...

applications. Joining a specialist security team, you'll focus on offensive web security, acting as the bridge between Security and Engineering. You'll perform penetration testing, reverse engineering and vulnerability assessments, identifying security risks and working closely with developers to build secure, resilient web applications from the ground … innovation sessions and team meetings.About you:You have strong experience in web application security and offensive security testingYou have hands-on expertise in penetration testing and reverse engineeringYou have a deep understanding of modern web security vulnerabilities and mitigation techniquesYou have commercial JavaScript experience, with TypeScript knowledge highly ...

Senior Infrastructure Penetration Tester Location: London flexible hybrid Salary: £70,000 – £80,000 We’re hiring on behalf of our client, a growing Penetration Testing Consultancy, for a Senior Infrastructure Penetration Tester to join their elite Testing team. This role is ideal for someone … thrives on deep technical challenges, values autonomy, and enjoys working in a fast paced and growing environment. What You’ll Be Doing Leading infrastructure penetration tests across complex environments (on prem, cloud, hybrid). Identifying and exploiting vulnerabilities in networks, systems, and configurations. Developing custom tooling and scripts ...

scale security assurance programme within a highly regulated environment. This is an excellent opportunity for a contractor with a strong background in security controls testing, assurance and risk management, particularly within central government or wider public sector environments. What You'll Be Doing Evaluating the effectiveness of security controls … identified environment to ensure they meet the standards defined within supporting documentation, including High-Level Designs (HLDs), Low-Level Designs (LLDs) and Controls Catalogues. Testing controls against recognised security frameworks and standards, including ISO 27001, NIST CSF and NIST 800-53. Reviewing policies, procedures, network configurations, firewall rules ...

best practice You will need: Strong knowledge of cloud security across modern environments Advanced knowledge and hands-on experience with attack methodologies and security testing Experience across penetration testing (application and network), AppSec, wireless security and vulnerability management Experience implementing and managing security controls (e.g. DLP, patching ...

tooling into how we ship. Own vulnerability management end to end: find issues, triage findings, and drive engineering teams to closure. Design our security testing, from penetration testing to fuzzing, and build tools other engineers can run without you. Ship network and server-side and data protection ...

management processes. You will conduct infrastructure, application, and cloud security assessments. You will work with technical teams to coordinate remediation activities. You will review penetration testing findings and support remediation planning. You will perform security reviews and risk assessments for new technologies and services. Application Security & DevSecOps … will integrate security into CI/CD pipelines and development workflows. You will support secure coding initiatives and security testing programmes. You will implement automated security scanning and validation controls. You will collaborate with development teams to reduce application security risks. You will promote security-first engineering and DevSecOps ...

risk, and data privacy issues. The analyst serves as an expert on cybersecurity protection, detection, response, and recovery. This individual is responsible for coordinating penetration testing and managing internal and external cybersecurity analysts to detect, mitigate, and analyze threats. Works closely with other teams to develop controls such … security technologies by developing selection criteria to identify appropriate security solutions to support strategic, operational needs, and security requirements. Participate in the development and testing of the security incident response plan, act as the incident response leader. Develop security, risk, and compliance reports and alerts.Participate in the yearly review ...

software development lifecycle, including secure design reviews, threat modelling, secure coding standards, dependency scanning, SAST/DAST tooling, secrets management, application/API penetration testing, vulnerability remediation tracking and release security governance. Support DORA‐related client and contractual obligations for EU financial services customers, including ICT risk management … evidence, incident response and notification processes, resilience testing, ICT third‐party risk controls, subcontractor oversight, exit planning and audit evidence. Provide security governance over cloud and SaaS environments, including identity and access management, logging and monitoring, encryption, key management, backup, tenant segregation, environment segregation, secure configuration and cloud security ...

risk appetite. Support the deployment of cloud-based services, predominantly within Azure environments. Work with technical teams to validate security control effectiveness. Assist with penetration testing and IT Health Check scoping activities. Review security findings and provide practical remediation guidance. Contribute to security standards, patterns and architecture documentation. … Azure security services, identity management and cloud-native security controls. Exposure to threat modelling and risk assessment methodologies. Understanding of security assurance and controls testing activities. Excellent stakeholder engagement and communication skills. Desirable Skills & Certifications CISSP, CISM, SABSA or TOGAF Azure or AWS cloud certifications Knowledge of PKI, Encryption ...

privilege, contextual access control and segmentation of services, users and devices Defining and reviewing security assurance activities, including design assurance, verification, validation, vulnerability assessment, penetration testing inputs and interpretation of assurance evidence Developing and communicating corporate and domain information security policy, standards, guidelines and design guardrails Identifying ...

privilege, contextual access control and segmentation of services, users and devices Defining and reviewing security assurance activities, including design assurance, verification, validation, vulnerability assessment, penetration testing inputs and interpretation of assurance evidence Developing and communicating corporate and domain information security policy, standards, guidelines and design guardrails Identifying ...

infrastructure. You’ll lead the implementation and management of SIEM systems, Fortinet security tools, and endpoint detection & response (EDR) while conducting vulnerability assessments and penetration testing to stay ahead of cyber threats. You’ll enhance identity and access management (IAM) by maintaining Active Directory, Entra ...

network, cloud, memory, and email forensics, incident response including the technical management of high‐profile security incidents, threat hunting and analysis, web application security, penetration testing, leading red and/or blue teaming exercises, and open‐source intelligence (OSINT). This role requires a logical, pragmatic, meticulous, analytical ...

Senior and Principal level Consultants. Working within a defence-focused environment, you will deliver threat-led security assessments, adversary emulation activities and advanced security testing for customers operating within complex and high-assurance environments. You will emulate realistic cyber threats, assess the effectiveness of security controls and provide actionable … also wanting to influence how a capability develops and matures over time. Core areas (must have): Experience delivering red team, adversary simulation or advanced penetration testing activities. Relevantcertifications relating tored teaming. Strong technical skills in one or more of the following areas: initial access, cloud exploitation, malware development ...

Senior and Principal level Consultants. Working within a defence-focused environment, you will deliver threat-led security assessments, adversary emulation activities and advanced security testing for customers operating within complex and high-assurance environments. You will emulate realistic cyber threats, assess the effectiveness of security controls and provide actionable … also wanting to influence how a capability develops and matures over time. Core areas (must have) Experience delivering red team, adversary simulation or advanced penetration testing activities. Relevant certifications relating to red teaming. Strong technical skills in one or more of the following areas: initial access, cloud exploitation ...

architectures, cloud services and system integrations. Drive the implementation and continual improvement of security controls across applications, infrastructure and cloud environments. Assess vulnerabilities, review penetration testing results and support remediation activities. Monitor emerging threats and security trends, helping the business respond proactively. Contribute to the development and enhancement ...

enthusiastic security consultant to join our team. Working alongside some of the best hacking minds in the country, you will be delivering pen testing services to a diverse range of clients, from presales through to delivery and debriefs. We are looking for a consultant with a minimum … years’ experience in pen testing who can deliver the following: Web application testing API testing External & Internal Infrastructure testing (including build reviews) Mobile application testing (including knowledge of standards such as OWASP MASVS) Experience testing in any of the following areas is also desirable ...

load for engineering teams, and improve release velocity. What You’ll Do Design, develop, and maintain CI/CD pipelines to automate software builds, testing, and releases. Build and maintain internal tooling to support the software development lifecycle (e.g., code quality analysis, dependency management, automated testing). Collaborate … maintain infrastructure as code (IaC) for internal development environments. Work closely with development teams to troubleshoot and resolve issues related to build processes, testing, and deployments. Coordinate penetration testing, code/virus scanning, and disseminate findings to the engineering team for resolution. Measure performance and environment ...

roleJob Title: Application Security EngineerJob Summary: Designs, implements, and operates security controls to prevent and detect attacks against company systems, applications, and data. Conducts penetration testing and vulnerability assessments across applications, operating systems, and networks. Responds to cybersecurity incidents by identifying, isolating, and removing unauthorized access. Researches emerging … system disruption, or unauthorized access. People Manager: NoWhat you'll do Administer and enforce security policies governing system and application access. Perform application security testing and reviews to ensure secure configurations and compliance with standards. Conduct penetration tests and vulnerability assessments across applications, OS, and network layers. Lead ...

good understanding of relevant data protection legislation (e.g., UK GDPR). ISO 27001, SOC 2, NIST CSF, CAF, HIPAA, DSPT Gap analysis, auditing, or penetration testing Process and procedure development Software or AI development/testing Client-facing roles Relevant certifications (CISSP, CISM, CREST, etc. ...

governance documentation. Drive maturity of assurance processes, tooling, reporting, and governance across multiple programmes. Lead incident response capability development, including response plans, playbooks, testing, exercising, and Tabletop Exercises (TTXs). Manage vulnerability, risk, audit, control assessment, and compliance activities, ensuring findings are prioritised and driven through to resolution. Engage … protection, IDS/IPS, SIEM, identity and access management, PKI, LDAP, Active Directory, SAML, encryption, and key management. Experience interpreting outputs from vulnerability assessments, penetration testing, IT Health Checks (ITHCs), and security monitoring activities to support remediation planning and risk-based prioritisation. Ability to assess technical security controls ...

governance documentation. Drive maturity of assurance processes, tooling, reporting, and governance across multiple programmes. Lead incident response capability development, including response plans, playbooks, testing, exercising, and Tabletop Exercises (TTXs). Manage vulnerability, risk, audit, control assessment, and compliance activities, ensuring findings are prioritised and driven through to resolution. Engage … protection, IDS/IPS, SIEM, identity and access management, PKI, LDAP, Active Directory, SAML, encryption, and key management. Experience interpreting outputs from vulnerability assessments, penetration testing, IT Health Checks (ITHCs), and security monitoring activities to support remediation planning and risk-based prioritisation. Ability to assess technical security controls ...

security strategy and maturity roadmap • Own and continuously improve security operations and the outsourced SOC • Lead cyber incident investigation and response • Oversee vulnerability management, penetration testing and remediation programmes • Maintain ownership of ISO 27001 and Cyber Essentials Plus • Establish security architecture principles across infrastructure, cloud, SaaS, data ...