> Markdown version of [/jobs/ext/2992619-security-testing-engineer-crest-certified](https://www.wearedevelopers.com/jobs/ext/2992619-security-testing-engineer-crest-certified). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Testing Engineer - CREST Certified

- **Company:** Tlscontact
- **Location:** UK (Remote available)
- **Salary:** £44,465.0
- **Contract:** Permanent contract
- **Skills:** Software System Penetration Testing, Bash Shell, Burp Suite, Static Program Analysis, Continuous Integration, Github, Python (Programming Language), Open Web Application Security, PCI Data Security Standards, Windows PowerShell, Secure Coding, Software Engineering, Scripting, Mitre Att&ck, Gitlab, Metasploit, Checkmarx, CIS Benchmarks, Jenkins, Vulnerability Analysis
- **Published:** September 19, 2026
- **Apply:** https://www.adzuna.co.uk/jobs/details/5889014792

## About the Role

Experience in penetration testing and security testing.
Hands-on expertise with security tools (Burp Suite, OWASP ZAP) and scripting languages (Python, Bash, PowerShell, Metasploit, Checkmarx).
Experience with CI/CD tools (GitLab, Jenkins, GitHub Actions).
Deep understanding of secure software development lifecycle (SDLC).
Strong problem-solving skills with high attention to detail.
Excellent communication skills to collaborate with technical and non-technical teams.
English fluency (B2 level or higher).
CREST Registered certification required.

## Description

If you are passionate about penetration testing, vulnerability analysis, and secure development, this role is perfect for you! You will work closely with our software engineering teams to identify security risks, implement best practices, and enhance the security posture of our digital services., Conduct manual and automated code analysis to detect vulnerabilities and non-trivial security issues.
Support technical teams in resolving vulnerabilities and strengthening security measures.
Develop and maintain security testing methodologies aligned with OWASP, NIST, and CIS Controls.
Integrate security testing into the CI/CD pipeline to detect and fix vulnerabilities early.
Ensure compliance with industry security regulations (PCI DSS, GDPR, HIPAA, SOC 2).
Use PTES, MITRE ATT&CK, and CVSS scoring for standardized security assessments.
Collaborate with developers and QA teams to build comprehensive security test strategies.
Provide detailed security reports, analyze trends, and propose continuous improvements.


## Related Videos

- [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next)
- [WeAreDevelopers LIVE - Modern DevOps for IoT Devices and More](https://www.wearedevelopers.com/videos/1805-wearedevelopers-live-modern-devops-for-iot-devices-and-more)
- [The Road to MLOps: How Verivox Transitioned to AWS](https://www.wearedevelopers.com/videos/1050-the-road-to-mlops-how-verivox-transitioned-to-aws)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security)
- [Bringing AI Model Testing and Prompt Management to Your Codebase with GitHub Models](https://www.wearedevelopers.com/videos/1536-bringing-ai-model-testing-and-prompt-management-to-your-codebase-with-github-models)

## Related Articles

- [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)