Penetration Tester – UK

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Provide and assist in security assessments across networks, applications, and cloud infrastructure.

• Execute penetration testing on networks, web applications, APIs, mobile applications, and cloud environments.

• Replicate real-world attack scenarios to evaluate client resilience against cyber threats.

• Utilize automated vulnerability scanning tools along with manual testing and exploitation methods.

• Detect, analyze, and exploit security vulnerabilities across various client environments.

• Evaluate technical security controls and identify areas for improvement.

• Collaborate directly with clients during penetration testing engagements.

• Clearly and professionally present findings and recommendations.

• Articulate the business and technical implications of vulnerabilities to both technical and non-technical stakeholders.

• Assist clients in understanding and prioritizing remediation actions.

• Generate high-quality technical reports that document vulnerabilities, exploitation methods, evidence, risks, and remediation suggestions.

• Work with the broader cybersecurity team to share knowledge and lessons learned.

• Contribute to the development of penetration testing methodologies and processes.

• Effectively manage testing, documentation, and deliverables.

• Stay updated on emerging vulnerabilities, attack techniques, and industry developments.

⛳️ Requirements

• Practical experience in conducting penetration testing and security assessments.

• Familiarity with vulnerability scanning tools as well as manual testing and exploitation techniques.

• Solid understanding of offensive security methodologies, tools, and techniques.

• Strong ability to assess and compromise technical security controls.

• Experience in one or more areas: network penetration testing, web application testing, API testing, mobile application testing, or cloud security testing.

• Strong analytical and problem-solving capabilities.

• Excellent written and verbal communication abilities.

• Capability to convey technical vulnerabilities and risks in a clear, non-technical manner.

• Strong client engagement skills with a professional approach to customer service.

• Ability to manage workload effectively and meet deadlines.

• Proactive in learning and staying current with developments in offensive security.

• Industry-recognized certifications are preferred, including OSCP, CPSA, CRT, or CREST-related certifications.

• Relevant practical experience will be considered alongside formal certifications.

🏝️ Benefits

• 25 days of annual leave each year plus 8 English bank holidays.

• 1 day of paid leave for your birthday.

• Access to the Westfield Health Care Cash Plan.

• Employee mental health and wellbeing platform.

• £2,000 annual training budget.

• Referral bonus of up to £2,000 for each successful referral.

• Fully remote work arrangement.