151 to 175 of 225 Remote/Hybrid Penetration Testing Jobs

management information. Support the operational effectiveness of cyber security tooling and services, ensuring incidents, alerts and service performance are appropriately monitored and reported. Coordinate penetration testing activities, remediation tracking and assurance reporting. Support supplier security reviews and third-party assurance activities, including evidence collection, action tracking and reporting. … Assist with cyber incident exercises, tabletop simulations and operational resilience testing activities. Maintain cyber operational procedures, playbooks, runbooks and supporting documentation. Produce cyber operational dashboards, management information, Key Risk Indicators (KRIs) and performance metrics. Monitor service performance against agreed cyber security service levels, KPIs and contractual obligations. Support attack ...

manage the Dev, QA, Demo, Training and Production environments, including container configuration, environment variables and secrets. Build dedicated test environments for the testing team and maintain a performance testing environment. Restructure the Demo environment so testers can access the database. Maintain and test the disaster recovery model, including … failover, static fallback pages and Front Door routing during outages. Deliver outstanding platform hardening and act on penetration testing findings. Manage IAM, deployment permissions, DNS records and user offboarding within the subscription. Produce clear infrastructure documentation in line with governance controls. Essential Experience Strong hands-on Microsoft Azure ...

leading information security company in the UK is seeking an experienced penetration tester. The role offers hybrid flexibility, allowing you to work from home or the office in Oxford or Glasgow. Candidates should have at least two years of experience in penetration testing and relevant certifications like ...

regulations (e.g. NCSC, ISO, SoC, NIST, PCI, GDPR). Background in application architecture, software development and/or infrastructure architecture. Hands-on experience testing software and infrastructure security using appropriate tools. Familiarity with Continuous Security, Continuous Integration and Continuous Delivery practices. Solid understanding of network security (OSI, TCP/…/authorisation solutions. Exposure to end-to-end security including governance, risk and compliance, operational security, supply chain security and secure user management. Relevant penetration testing qualifications (e.g. OSCP, CREST, TIGER or equivalent). Experience leading security engineers and junior staff members. Reference: AMC/RHU/ ...

application architecture, software development and/or infrastructure architecture.• Clear communication with technical and non-technical audiences• Experience mentoring engineers and architects • Experience testing the security of software and infrastructure using appropriate security tools. • Experience with Continuous Security, Continuous Integration and Continuous Delivery techniques. • Experience of network security (e.g. … Defence/Healthcare Sector(s) • End-to-end security involvement, including governance, risk and compliance, operational security, supply chain security and secure user management. • Penetration testing qualifications (e.g. OSCP, CREST, TIGER or equivalent) • Experience leading security engineers and other junior members of staff• Involvement across the full security ...

underwriters. Security Operations & Vulnerability Management Design and implement Security Operations Centre (SOC) operating models. Conduct vulnerability management programmes, gap analyses, and remediation tracking. Lead penetration testing and application security assessments (OWASP Top 10). Oversee DLP and DDA monitoring strategies. Compliance & Regulatory Alignment Support ISMS implementation aligned with … operations. Proven experience delivering cyber maturity assessments and risk advisory engagements. Experience designing SOC or security operating models. Strong understanding of vulnerability management and penetration testing. Experience aligning organisations to NIST CSF, ISO 27001, and related frameworks. Executive report writing and board‐level presentation capability. Experience leading client engagements ...

Blue Team detection and response capabilities. Work closely with SOC, Cyber Defence, Threat Intelligence, Incident Response and Security Engineering teams. Translate Red Team findings, penetration testing results and adversary behaviours into practical defensive improvements. Develop, tune and optimise detection rules, security use cases, alerts and response playbooks. Lead ...

Windows, Linux, networking, cloud, Docker, Active Directory, and troubleshooting.* Strong knowledge of IT infrastructure, network security, cybersecurity methodologies, and Microsoft network protocols.* Familiarity with penetration testing; practical experience is a strong advantage.* CEH, CISSP, or equivalent certification is preferred.* Strong interpersonal and organizational skills, with a knack ...

engage senior engineers, architects, offensive security specialists, risk teams, and senior business stakeholders. Practical offensive security awareness, including attack paths, common enterprise weaknesses, penetration testing outputs, red/purple team findings, exploitability, and risk‐based remediation. Security solution architecture knowledge across cloud, identity and access management, network security ...

clients and prospects receive accurate, transparent, and timely answers about our security posture. Organising monthly review meetings. Directing the end-to-end planning of penetration testing campaigns. Supporting security awareness activities, including onboarding, refresher training, phishing reporting and practical guidance for colleagues. Helping improve security documentation and processes ...

ensuring our clients and prospects receive accurate, transparent, and timely answers about our security posture. Directing the end-to-end planning and execution of penetration testing campaigns. Managing and facilitating annual business continuity planning (BCP) exercises. Assessing our vendors to ensure we accurately identify, evaluate, and mitigate ...

Citation Cyber is seeking a Security Consultant (Penetration Testing) to join our hybrid-UK team. You'll deliver security assessments across client environments, report findings clearly and help clients remediate vulnerabilities. As a CHECK/CREST-enabled provider, you’ll work on infrastructure and web app testing ...

design principles, including cybersecurity standards, cloud architecture guardrails and operational controls Lead DevOps and Site Reliability Engineering (SRE) maturity, embedding monitoring, observability, automated testing and structured incident response Drive adoption of automation and AI‐enabled tooling to improve anomaly detection, incident management, vulnerability management and operational efficiency Provide technical … oversight of production operations, ensuring alignment between platform standards and operational support teams Lead cybersecurity governance, including audits, penetration testing, vulnerability management and risk frameworks Support integration of acquired platforms, ensuring alignment with EA Technology’s security and reliability standards Establish and maintain platform standards that balance delivery ...

Citation Cyber is a UK cyber security consultancy delivering penetration testing, certifications, consultancy, training and managed security services to public and private sector organisations. We seek a Security Consultant to deliver diverse testing engagements within a hybrid UK environment. You will conduct infrastructure and web app pentests ...

Citation Cyber is seeking a Security Consultant (Penetration Testing) to join our growing team. You will deliver a wide range of technical security assessments across client environments, identifying vulnerabilities and advising on remediation. The role covers infrastructure and web application testing, cloud security assessments, and clear, high ...

security team and the overarching engineering org to ensure that we are proactive in minimizing risk while we build products Lead security assessments and penetration testing of WRITER’s applications, AI services, and APIs, identifying vulnerabilities across our tech stack and working collaboratively with teams to remediate issues … explain why something matters and motivate teams to actionKnowledge of security tools and methodologies including SAST/DAST solutions, vulnerability management platforms, security testing frameworks, and DevSecOps practices—you know which tools to use and when automation beats manual reviewAlignment with WRITER’s values of Connect (building strong relationships ...

Cytix Software in Manchester is seeking an Application Security Engineer to join the AppSec Engineering team. You will perform penetration testing across web apps, APIs, and mobile apps, collaborating with clients and in-house developers to drive secure SDLC integration. The role emphasizes continuous security testing, threat … modelling, and shaping Cytix’s next generation of testing services. Office presence twice a month is acceptable or remote working is available. #J-18808-Ljbffr ...

ISNs) Knowledge of UK Government security standards, including: Government Security Policy Framework (SPF) NCSC Cloud Security Principles NCSC SaaS Security Principles Cyber Essentials CHECK Penetration Testing Scheme Familiarity with UK Government physical and personnel security requirements, including NPSA and UKSV. Experience conducting risk assessments using recognised methodologies such ...

Entra ID/Azure AD) and device compliance tools (Microsoft Intune/MDM). Threat & Risk Management: Monitor, identify, and remediate environment vulnerabilities. Support penetration testing schedules, deploy Multi-Factor Authentication (MFA), and maintain device encryption policies. Data Protection Compliance: Ensure all localized retail systems and warehouse practices ...

Dionach by Nomios is seeking an experienced Lead Penetration Tester to guide a skilled team across web, mobile, internal and infrastructure tests. You will lead on-site engagements and act as the CHECK authority, delivering detailed reports and remediation guidance. Applicants should have extensive pen-testing experience, strong ...

security requirements to meet compliance standards and industry best practices.Perform security code reviews and act as a technical SME for engineering and compliance teams.Security Testing & DevSecOpsDeploy and manage automated security tools (SCA/SBOM, SAST, DAST, Secret Scanning) within CI/CD pipelines.Apply manual network/application testing …/CD pipelines.Software Engineering: Hands-on development experience, specifically in Go and C#.Standards & Frameworks: Knowledge of NIST, ISO 27001, CIS, and OWASP (ASVS/Testing Guides).Desirable QualificationsAdvanced Technical Skills: Deep vulnerability research, exploit R&D, manual pentesting (cloud/web/embedded/mobile), SIEM/logging platforms ...

meet compliance standards and industry best practices. Perform security code reviews and act as a technical SME for engineering and compliance teams. Security Testing & DevSecOpsDeploy and manage automated security tools (SCA/SBOM, SAST, DAST, Secret Scanning) within CI/CD pipelines. Apply manual network/application testing … pipelines. Software Engineering: Hands-on development experience, specifically in Go and C#.Standards & Frameworks: Knowledge of NIST, ISO 27001, CIS, and OWASP (ASVS/Testing Guides). Desirable QualificationsAdvanced Technical Skills: Deep vulnerability research, exploit R&D, manual pentesting (cloud/web/embedded/mobile), SIEM/logging platforms ...

Valarian Technologies is a dual-use technology company building critical tools to safeguard the future in an era of evolving global security challenges. We're rethinking security beyond traditional military domains, addressing asymmetric threats that ...

PERSON SPECIFICATION You will need experience in at least one of the following areas: Proven experience related to cyber-security red-teaming such as: Penetration testing Cyber range design Competing in or designing in CTFs Developing automated security testing tools Bug bounties, vulnerability research, or exploit discovery ...

voice for security in design, code and backlog decisions. Embed secure development practices across the software development lifecycle, including secure coding standards, code review, testing, CI/CD and related controls. Carry out threat modelling, secure design reviews and technical risk assessments for new and existing product capabilities … product roadmap, backlog and design decisions, working with product owners and engineering leadership. Work with our external security partners to arrange and act on penetration testing and security assessments of our products. Contribute to security standards, metrics and ways of working that improve product security maturity over time. ...