> Markdown version of [/jobs/ext/2356506-penetration-tester](https://www.wearedevelopers.com/jobs/ext/2356506-penetration-tester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Penetration Tester

- **Company:** Cyber and Fraud Centre - Scotland
- **Location:** Edinburgh, UK
- **Experience:** Starter
- **Salary:** £35,000.0 - £45,000.0
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Software System Penetration Testing, Application Testing, Microsoft Azure, Burp Suite, Cloud Computing, Cloud Computing Security, Fraud Prevention and Detection, Information Systems Security Architecture Professional, Nmap, Open Web Application Security, Google Cloud, Mitre Att&ck, Cyber Threat Analysis, Metasploit, Nessus
- **Published:** August 24, 2026
- **Apply:** https://uk.indeed.com/viewjob?jk=1826cbe22a57d7e4

## About the Role

A hands-on technical role with opportunities to grow and develop your skills as part of a social enterprise contributing to Scotland's wider cyber resilience ecosystem., You will be joining a caring and committed team with a strong sense of purpose., * 1-2 years of proven experience delivering penetration testing in professional or client-facing environments.

 * Understanding of common vulnerabilities and attack techniques (e.g. OWASP Top 10, MITRE ATT&CK).
 * Experience with industry-standard tools (e.g. Burp Suite, Nmap, Metasploit, Nessus or equivalents).
 * Ability to write clear, high-quality technical reports.
 * Strong ethical mindset and commitment to responsible disclosure.

Desirable

 * CREST penetration testing certifications, such as CPSA or CRT.
 * Experience in cloud security testing (AWS, Azure, GCP).
 * Knowledge of secure architecture or defensive controls.
 * Additional certifications (e.g. OSCP, CHECK, CISSP, cloud security certs).

## Description

You will deliver high-quality, ethical penetration testing engagements aligned with CREST standards. A hands-on technical role with opportunities to grow and develop your skills as part of a social enterprise contributing to Scotland's wider cyber resilience ecosystem., * Deliver CREST-aligned penetration testing engagements, including:

 * Infrastructure and network testing
 * Web and application testing
 * Cloud and hybrid environments
 * Execute tests in line with agreed methodologies and best practice
 * Produce clear, high-quality technical and executive-level reports
 * Communicate findings and risk in a clear, constructive manner to a range of stakeholders
 * Support remediation discussions and re-testing where required
 * Maintain accurate records and testing artefacts in line with governance and assurance requirements
 * Contribute to continuous improvement of tools, methodologies, and internal knowledge sharing.
 * Stay informed about emerging cyber threats, fraud trends, and regulatory changes affecting organisations.
 * Achieve and maintain CREST accreditation.


## Related Videos

- [How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR](https://www.wearedevelopers.com/videos/39-how-to-cause-or-prevent-a-massive-data-breach-secure-coding-and-idor)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders)
- [It's a (testing) trap! - Common testing pitfalls and how to solve them](https://www.wearedevelopers.com/videos/1193-it-s-a-testing-trap-common-testing-pitfalls-and-how-to-solve-them)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)