251 to 275 of 526 Penetration Testing Jobs

solutions. Support security incident detection, investigation, and response alongside the SOC and Red Team. Threat & Vulnerability Management Perform regular security assessments, vulnerability scans, and penetration tests, prioritizing remediation efforts. Develop automated remediation for common security risks and misconfigurations. Monitor and analyze security logs and alerts, fine-tuning detections …/SOAR, network security, and automation tools. Familiarity with scripting (Python, PowerShell) and infrastructure-as-code (Terraform, Ansible). Deep understanding of vulnerability management, penetration testing, and security hardening. Knowledge of SOC processes, incident response, and forensics. Strong grasp of zero-trust architectures, identity security, and secure DevOps ...

alerts for potential threats, vulnerabilities, and incidents. Investigate and analyse security incidents, determining root causes and recommending remediation actions. Perform vulnerability assessments and penetration testing to identify weaknesses in systems and applications. Develop and implement security policies, procedures, and best practices in line with industry standards. Contribute ...

software development lifecycle, including secure design reviews, threat modelling, secure coding standards, dependency scanning, SAST/DAST tooling, secrets management, application/API penetration testing, vulnerability remediation tracking and release security governance. Support DORA‐related client and contractual obligations for EU financial services customers, including ICT risk management … evidence, incident response and notification processes, resilience testing, ICT third‐party risk controls, subcontractor oversight, exit planning and audit evidence. Provide security governance over cloud and SaaS environments, including identity and access management, logging and monitoring, encryption, key management, backup, tenant segregation, environment segregation, secure configuration and cloud security ...

Lead Penetration Tester Contract: Initial 6 months Day Rate: £700-£800 per day IR35: Inside IR35 1 day per month on site, either Chesterfield or London. About the Role We are looking for an experienced Lead Penetration Tester to take ownership of the end-to-end penetration testing process across applications, infrastructure and wider technology environments click apply for full job details ...

another area of Cyber Security. Our industry-renowned and awarded training program will teach you to perform web application security assessment, network and infrastructure testing, applied research, consultancy skills, and more. You will propel your career and be on the fast track to becoming a full fledge Penetration … writing You’ll work through real-world scenarios using tools like Burp Suite, Kali Linux, and custom NCC Group platforms. Expect to learn manual testing techniques alongside automated approaches You’ll observe live client engagements, gaining exposure to different industries, threat models, and testing methodologies Midway through ...

risk appetite. Support the deployment of cloud-based services, predominantly within Azure environments. Work with technical teams to validate security control effectiveness. Assist with penetration testing and IT Health Check scoping activities. Review security findings and provide practical remediation guidance. Contribute to security standards, patterns and architecture documentation. … Azure security services, identity management and cloud-native security controls. Exposure to threat modelling and risk assessment methodologies. Understanding of security assurance and controls testing activities. Excellent stakeholder engagement and communication skills. Desirable Skills & Certifications CISSP, CISM, SABSA or TOGAF Azure or AWS cloud certifications Knowledge of PKI, Encryption ...

Hardening - Proactive and risk-based vulnerability management, including attack surface reduction, system hardening, remediation support, and cloud security posture improvement. You will also coordinate penetration testing and security assessments, and drive the findings through to remediation. Automation and Continuous Improvement - Reduce manual effort across security operations through automation … Defender alerts. Microsoft Sentinel, including writing and tuning your own KQL queries, analytic rules, and workbooks. Microsoft Entra ID and Conditional Access policy design, testing, and troubleshooting. Microsoft Purview, Intune security controls, email security, and endpoint detection and response. Automation. Practical experience of removing manual effort from security operations ...

resolved within agreed SLAs. Coordinate vulnerability management activities, driving remediation across infrastructure, applications and cloud services. Conduct security assessments, technical reviews and support penetration testing programmes. Support and maintain the Information Security Management System (ISMS), including ISO 27001 and Cyber Essentials Plus compliance activities. Perform risk assessments ...

Threat Management Owning the end-to-end vulnerability management lifecycle, from scanning and validation through to prioritisation, remediation and reporting. Managing internal and external penetration testing and working with Engineering teams to resolve findings. Identity, Cloud & Technical Security Assuring Identity and Access Management controls including MFA, privileged access ...

privilege, contextual access control and segmentation of services, users and devices Defining and reviewing security assurance activities, including design assurance, verification, validation, vulnerability assessment, penetration testing inputs and interpretation of assurance evidence Developing and communicating corporate and domain information security policy, standards, guidelines and design guardrails Identifying ...

privilege, contextual access control and segmentation of services, users and devices Defining and reviewing security assurance activities, including design assurance, verification, validation, vulnerability assessment, penetration testing inputs and interpretation of assurance evidence Developing and communicating corporate and domain information security policy, standards, guidelines and design guardrails Identifying ...

solutions Experience of threat intelligence Leadership and mentoring experience and skills Understanding of low-level concepts including operating systems and networking Commercial experience in Penetration Testing and/or Security Monitoring Understanding of networking and infrastructure design Knowledge/experience of one or more System administration (Linux, Windows ...

before moving into security. Credibility with engineers and the ability to ship fixes, not just file tickets.Offensive security background (web/API or cloud penetration testing, exploit development, CTFs) used to inform defensive design.Experience securing multi-tenant SaaS at scale, including tenant isolation and EU data residency requirements.Experience ...

infrastructure. You’ll lead the implementation and management of SIEM systems, Fortinet security tools, and endpoint detection & response (EDR) while conducting vulnerability assessments and penetration testing to stay ahead of cyber threats. You’ll enhance identity and access management (IAM) by maintaining Active Directory, Entra ...

DAST platforms, ensuring coverage, configuration, and outputs are maintained to a defined standard Managing the vulnerability management programme, including coordination of internal and external penetration testing Conducting internal security audits and risk assessments, producing findings reports and tracking remediation Supporting ISO 27001 compliance activity, including contributing to control ...

scale and bespoke to the organisation.Oversee security within network architecture, encryption protocols, and identity/access management for restricted environments.Direct cyber security audits and penetration testing across defence platforms and supply chains.Provide cyber security training and awareness programs tailored to defence staff and contractors.Collaborate with engineering ...

endpoint protection, email security, firewalls) and respond to alerts Investigate and respond to security incidents, including root-cause analysis and remediation Manage vulnerability scanning, penetration testing follow-ups, and patching coordination Support and review access and access control policies, including privileged access controls. Monitor Threat Intelligence to ensure ...

network, cloud, memory, and email forensics, incident response including the technical management of high‐profile security incidents, threat hunting and analysis, web application security, penetration testing, leading red and/or blue teaming exercises, and open‐source intelligence (OSINT). This role requires a logical, pragmatic, meticulous, analytical ...

complex multi-supplier or multi-team environment, as an architect rather than an assessor. Experience conducting or coordinating technical security reviews and penetration testing in UK public sector contexts, including remediating findings and briefing senior technical stakeholders. Working knowledge of exposure management beyond CVE-only approaches — incorporating misconfiguration ...

Senior and Principal level Consultants. Working within a defence-focused environment, you will deliver threat-led security assessments, adversary emulation activities and advanced security testing for customers operating within complex and high-assurance environments. You will emulate realistic cyber threats, assess the effectiveness of security controls and provide actionable … also wanting to influence how a capability develops and matures over time. Core areas (must have): Experience delivering red team, adversary simulation or advanced penetration testing activities. Relevantcertifications relating tored teaming. Strong technical skills in one or more of the following areas: initial access, cloud exploitation, malware development ...

Senior and Principal level Consultants. Working within a defence-focused environment, you will deliver threat-led security assessments, adversary emulation activities and advanced security testing for customers operating within complex and high-assurance environments. You will emulate realistic cyber threats, assess the effectiveness of security controls and provide actionable … also wanting to influence how a capability develops and matures over time. Core areas (must have) Experience delivering red team, adversary simulation or advanced penetration testing activities. Relevant certifications relating to red teaming. Strong technical skills in one or more of the following areas: initial access, cloud exploitation ...

readiness. Provide insights and triage signals from security tooling (SAST, DAST, dependency scanning, SIEM). Work hands-on to perform internal security assessments or penetration testing. Manage relationships with external pentest providers, auditors, and assessors. Secure Development Lifecycle (SDLC) Partner with engineering teams to embed security in the SDLC … security standards and frameworks (ISO 27001, SOC 2, CIS, NIST, GDPR, EU AI Act). Hands-on technical skills in areas such as penetration testing, application security, or infrastructure hardening. Familiarity with modern software development practices, DevSecOps, and cloud-native architectures (preferably Python eco-system, Kubernetes and Azure ...

architectures, cloud services and system integrations. Drive the implementation and continual improvement of security controls across applications, infrastructure and cloud environments. Assess vulnerabilities, review penetration testing results and support remediation activities. Monitor emerging threats and security trends, helping the business respond proactively. Contribute to the development and enhancement ...

Responsibilities Maintain and improve the Information Security Management System (ISMS), policies, procedures and controls. Lead cybersecurity risk assessments, threat modelling and security reviews. Oversee penetration testing, vulnerability management and remediation activities. Advise on secure design, cloud security, mobile security, authentication, encryption and access control. Embed cybersecurity requirements within ...

rota. Desirable skills and experience Threat hunting, detection-rule development, alert tuning, malware analysis or digital forensics experience. Knowledge of vulnerability and exposure management, penetration-testing remediation and security-control assurance. Knowledge of ISO 27001/27002, Cyber Essentials Plus, MITRE ATT&CK or comparable security frameworks. Relevant ...