Penetration Tester – Vulnerability Researcher

Overview

In this role you will conduct penetration testing across IT and OT environments to strengthen security for mission-critical systems. You will influence secure design and risk mitigation from early project stages through delivery, across defence, aerospace, and digital security programmes. You’ll produce actionable findings and work with diverse stakeholders to improve controls and compliance. This position offers exposure to high-security projects and opportunities to advance within a global engineering organization.

Pay / Benefits

• Performance-related bonus
• Half day every Friday
• 28 days annual leave (plus bank holidays)
• Private healthcare
• Pension scheme
• Life cover

Responsibilities

• Perform penetration testing across Windows, Linux, mobile (iOS/Android), web, and cloud environments
• Identify and communicate vulnerabilities and risks clearly
• Support accreditation and assurance activities on complex high-security programmes
• Advise on security controls and mitigation strategies aligned to customer needs
• Contribute to governance frameworks, policies, and secure procedures
• Produce high-quality technical reports and security documentation
• Act as cybersecurity SME across projects and stay aligned with evolving regulations
• Collaborate with internal teams, customers, and external stakeholders; support bid activities and effort estimation

Key requirements

• Hands-on penetration testing across IT/OT environments
• Strong understanding of security testing methodologies and frameworks
• Experience producing clear, actionable technical reports
• Degree in Computer Science or Engineering
• Industry certifications such as CREST, OSCP, CEH, GPEN, GXPN (or similar)

• Collaborative mindset
• Clear written and verbal communication
• Stakeholder engagement across levels
• Penetration testing across Windows, Linux, mobile, web, and cloud
• Security testing methodologies and frameworks
• Technical reporting and documentation

…