Security Tester

Salary: £? - ? per year

Requirements:

• Strong hands-on experience within Security Testing / Application Security Testing.
• Experience conducting security and vulnerability testing across enterprise applications.
• Strong understanding of common application security vulnerabilities and OWASP principles.
• Experience testing web applications and APIs.
• Experience using relevant security testing and vulnerability assessment tools.
• Ability to identify vulnerabilities, assess their potential impact and recommend remediation.
• Experience producing clear security testing reports and documentation.
• Experience working within complex enterprise environments.
• Strong stakeholder engagement and communication skills.
• Experience working within defence, government or UK public-sector programmes.
• Experience within highly regulated or security-critical environments.
• Knowledge of secure software development and DevSecOps practices.
• Experience working alongside Agile engineering and testing teams.
• Relevant security testing certifications are advantageous but not essential.

Responsibilities:

• Plan and execute security testing activities across applications, APIs and supporting systems.
• Identify, assess and document security vulnerabilities and risks.
• Perform hands-on security testing using appropriate manual and automated techniques.
• Test application and system security controls against defined requirements.
• Work closely with development and engineering teams to communicate findings and support remediation.
• Retest vulnerabilities and security issues following remediation.
• Produce clear security testing documentation and reports.
• Support security assurance activities throughout the delivery lifecycle.
• Work collaboratively with wider functional, integration and automation testing teams.

Technologies:

• DevSecOps
• Support
• OWASP
• Security
• Web

More:

We are recruiting a Security Tester for a contract role of 12 months with potential to extend, based remote-first in the UK and inside IR35. We are supporting a major programme within a complex and highly regulated environment, and we are seeking an experienced consultant to work alongside engineering, development and wider testing teams throughout the delivery lifecycle. SC Clearance is required (active or lapsed).

last updated 37 week of 2026