Penetration Tester
Role details
Job location
Tech stack
Job description
- Conduct internal penetration testing across applications, infrastructure, and end user devices (EUDs).
- Perform scenario-based testing aligned with their principles and security non-functional requirements.
- Collaborate with development teams to integrate findings into JIRA workflows for rapid remediation.
- Support the testing pipeline, including planning, execution, and reporting of penetration tests.
- Maintain compliance with guidance and the client's security standards.
Requirements
-
Certifications: OSCP, CREST CRT, CTL Web/Inf, , CEH.
-
Experience with cloud security (AWS, Azure) and containerised environments. Essential Skills & Experience
-
Hands-on experience with penetration testing tools.
-
Strong understanding of OWASP, NIST SP 800-53, ISO 27001, and CIS Benchmarks.
-
Familiarity with CI/CD pipeline integration.
-
Experience testing EUDs under operational constraints (e.g. no destructive tools, CSOC coordination).
-
Ability to interpret and apply security NFRs across diverse environments.
-
Proficiency in JIRA, SharePoint, and vulnerability management platforms. Attributes
-
Strong stakeholder engagement and communication skills.
-
Ability to work independently and as part of cross-functional teams.
-
Commitment to continuous improvement and knowledge sharing.