Penetration Tester

Salary: £80,000 - 80,000 per year

Requirements:

• We ideally have experience in several of the following:
• Commercial penetration testing experience
• Infrastructure and application security testing
• Strong knowledge of attacker TTPs and offensive security methodologies
• Vulnerability assessment and security risk management
• Experience working with or assessing OT, ICS or industrial environments
• Excellent technical reporting and stakeholder communication skills

Responsibilities:

• We plan and deliver penetration testing across a diverse technology estate, including traditional IT infrastructure, business applications and Operational Technology.
• We deliver infrastructure, web application and internal penetration testing.
• We assess Operational Technology and industrial environments using safe testing methodologies.
• We research new vulnerabilities, exploits and attacker techniques.
• We identify weaknesses across people, processes and technology, including social engineering and information leakage.
• We produce clear technical reports with practical remediation advice.
• We support vulnerability management and technical risk assessment.
• We manage external penetration testing providers where required.
• We work closely with security, infrastructure and engineering teams to improve resilience.
• We prioritise remediation, improve security controls and provide expert guidance on emerging threats.

Technologies:

• Support
• Security
• Web

More:

We are an established cyber security function offering a varied technical role with exposure to modern enterprise environments as well as industrial control systems and critical infrastructure. The role is hybrid based in South Wales and comes with a competitive salary, annual bonus, excellent pension, ongoing technical training and certification support, and long-term career progression within a growing cyber security team. We value technical excellence, continuous learning and innovation, and we offer the chance to make a genuine impact by protecting systems that underpin critical services used by millions of people across the UK.

last updated 31 week of 2026