> Markdown version of [/jobs/ext/2140311-penetration-tester](https://www.wearedevelopers.com/jobs/ext/2140311-penetration-tester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Penetration Tester

- **Company:** Anthony James Consulting
- **Location:** Brighton, UK
- **Contract:** Temporary contract
- **Skills:** PHP (Programming Language), Application Programming Interfaces (APIs), Software System Penetration Testing, User Authentication, Laravel, Regression Testing, Software Security
- **Published:** August 20, 2026
- **Apply:** https://www.careerboard.com/pt/en/find-jobs-in-United-Kingdom/-6E8B69C69EC4609440/

## About the Role

* Crest CRT/CCT or OSCP
 * Crest CHECK status is a strong advantage
 * Demonstrable experience testing web applications and APIs
 * Final report must provide evidence suitable for DSP Toolkit and DTAC requirements
 * Ability to provide a professional remediation and retest process

## Description

We're looking for an experienced penetration tester or specialist security testing firm to conduct an independent penetration test of a Laravel/PHP web application with a significant API component.

Scope

The engagement will cover:

 * Web application penetration testing
 * API security testing
 * Authentication and authorisation
 * Infrastructure and cloud configuration
 * Identification and exploitation of relevant vulnerabilities
 * Clear, actionable remediation recommendations
 * Retesting following remediation


## Related Videos

- [Trunk-Based Development at Scale: Real-World Insights from a High-Traffic Luxury E-Commerce Platform](https://www.wearedevelopers.com/videos/1435-trunk-based-development-at-scale-real-world-insights-from-a-high-traffic-luxury-e-commerce-platform)
- [Software Security 101: Secure Coding Basics](https://www.wearedevelopers.com/videos/220-software-security-101-secure-coding-basics)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [The Laravel Core - Demystify The Beast](https://www.wearedevelopers.com/videos/98-the-laravel-core-demystify-the-beast)
- [Lessons learned from observing a billion API requests](https://www.wearedevelopers.com/videos/1574-lessons-learned-from-observing-a-billion-api-requests)
- [Leveraging Storybook for Component Driven Development outside of your classic Component Library.](https://www.wearedevelopers.com/videos/975-leveraging-storybook-for-component-driven-development-outside-of-your-classic-component-library)

## Related Articles

- [11 Best Practices For PHP Security](https://www.wearedevelopers.com/magazine/90-11-best-practices-for-php-security)
- [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [Dev Digest 139 - Soft and hard queries](https://www.wearedevelopers.com/magazine/487-dev-digest-139-soft-and-hard-queries)
- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)