Penetration Tester

Salary: £60,000 - 60,000 per year

Requirements:

• Previous hands-on experience as a Pen Tester delivering assessments across web applications, APIs, infrastructure, and cloud environments.
• Strong understanding of common vulnerability classes, including the OWASP Top 10, authentication and authorisation flaws, input validation issues, and business logic vulnerabilities.
• Knowledge of penetration testing methodologies such as OWASP, PTES, and NIST, with practical experience using offensive security tools.
• Experience interpreting vulnerability scan results and validating security findings.
• Understanding of attacker tactics, techniques, and procedures, and how they apply in real-world scenarios.
• Ability to produce clear, well-structured technical reports with risk-based remediation advice.
• Holds, or is working towards, a recognised penetration testing certification such as CREST CPSA/CRT, OSCP, or equivalent experience.
• Strong communication skills with the ability to build relationships across technical and business teams.
• Analytical, organised, collaborative, and passionate about offensive security with a proactive approach to continuous learning.

Responsibilities:

• Deliver penetration testing across web applications, APIs, infrastructure, and cloud environments using recognised industry methodologies.
• Perform end-to-end testing activities including reconnaissance, exploitation, post-exploitation, validation, and reporting.
• Produce clear, risk-based penetration testing reports with practical remediation recommendations for both technical and non-technical stakeholders.
• Support the management of external penetration testing providers, reviewing test quality, validating findings, and ensuring consistency of deliverables.
• Assist with vulnerability assessments, risk prioritisation, remediation tracking, and re-testing activities.
• Work closely with development, engineering, and delivery teams to embed security testing into project lifecycles and advise on appropriate testing approaches.
• Contribute to purple team exercises, incident investigations, and wider Cyber Defence initiatives.
• Help improve internal testing methodologies, playbooks, tooling, and knowledge sharing across the team.
• Maintain awareness of emerging threats, vulnerabilities, attacker techniques, and offensive security tools.

Technologies:

• Cloud
• Support
• OWASP
• Security
• Web

More:

We are recruiting for a permanent Penetration Tester position in Horsham on a hybrid basis, offering a salary of up to £60,000. You will join our collaborative Cyber Defence team and work alongside experienced security professionals, with the opportunity to deliver hands-on security testing across web applications, APIs, infrastructure, and cloud environments. We offer excellent opportunities to develop your technical expertise, work with modern security tooling, and progress towards senior offensive security positions. This role also includes involvement in purple team exercises, remediation support, and broader security best practice initiatives across the organisation.

last updated 35 week of 2026