Penetration Tester

Overview

As a Penetration Tester, you will help protect our organisation by identifying vulnerabilities in web, network, mobile, and client applications. You’ll work within a collaborative security testing team, turning findings into actionable remediation with stakeholders. You will develop and adapt testing methodologies to counter emerging attack techniques, while communicating risk and recommendations to senior stakeholders. This role offers the chance to shape security assurance across diverse projects and align with our values and governance standards.

Responsibilities

• Develop and execute assessments, audits, and threat models to identify vulnerabilities in systems, applications, and servers using penetration testing tools and techniques
• Communicate key findings and remediation recommendations to stakeholders
• Collaborate with IT teams and stakeholders to understand security requirements and enhance overall posture
• Maintain comprehensive reports for senior stakeholders on findings and remediation guidance
• Identify emerging vulnerabilities and attack techniques to update testing methodologies
• Contribute to the development of penetration testing methodologies and best practices
• Engage with stakeholders to prepare Statements of Work (SoW) and deliver high-quality security reports

Key requirements

• Holding a CREST qualification (or equivalent), or working towards one
• Delivering end-to-end penetration testing across web, network, and mobile environments
• Engaging with stakeholders and producing clear, actionable security reports

• Stakeholder engagement
• Clear communication of complex information
• Collaborative mindset
• End-to-end penetration testing across web, network, and mobile
• Exposure to emerging areas such as AI security testing
• Familiarity with scripting or programming

…