> Markdown version of [/jobs/ext/3281991-penetration-tester-vulnerability-researcher](https://www.wearedevelopers.com/jobs/ext/3281991-penetration-tester-vulnerability-researcher). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Penetration Tester - Vulnerability Researcher

- **Company:** Thales Group
- **Location:** Bristol, UK
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Software System Penetration Testing, Biometrics, Cyber Security, Linux, Web Applications, Cloud Platform System, Information Technology
- **Published:** September 12, 2026
- **Apply:** https://find.jobs/jobs-near-me/apply/ats-redirect/?id=2966929571-2

## About the Role

* Hands-on penetration testing experience across diverse platforms (IT and/or OT environments)
 * CSTL (Cyber Scheme Team Leader) certification is a must
 * Strong understanding of security testing methodologies and frameworks
 * Experience producing clear, actionable technical reports
 * Degree in Computer Science, Engineering, or equivalent experience
 * Industry certifications such as CREST, OSCP, CEH, GPEN, GXPN (or similar)

Desirable Experience:

 * Background in Defence, Aerospace, Government, Nuclear, Transport, or other regulated industries
 * Familiarity with compliance-driven environments and secure system accreditation

## Description

Join Thales at a pivotal time as we expand our Cyber Security capability across critical national infrastructure, defence, and aerospace programmes. As a Penetration Tester, you'll play a key role in identifying vulnerabilities across complex systems and helping secure technologies that truly matter.

From secure software to biometrics and encryption, our CDI technologies and services enable organisations to confidently authenticate identities and protect data with care and precision. We support businesses and governments in keeping people safe and enabling trusted services across personal devices, connected objects, the cloud and everything in between.

The Opportunity:

You'll work on high-impact projects, performing penetration testing across IT and OT environments while influencing secure design and risk mitigation strategies from early project stages through to delivery.

What You'll Be Doing:

 * Conduct penetration testing across Windows, Linux, mobile (iOS/Android), web applications, and cloud environments
 * Identify, exploit, and clearly communicate security vulnerabilities and risks
 * Support accreditation and assurance activities on complex, high-security programmes
 * Advise on security controls and mitigation strategies aligned to customer needs
 * Contribute to governance frameworks, policies, and secure operating procedures
 * Produce high-quality technical reports and through-life security documentation
 * Act as a cybersecurity SME across projects, staying aligned with evolving regulations and standards
 * Collaborate with internal teams, customers, and external stakeholders at all levels
 * Support bid activities, including technical input and effort estimation


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Biometric Phone Chargers, $40m Domain Names & AI Movies Winning Awards - Peter Kröner](https://www.wearedevelopers.com/videos/1810-biometric-phone-chargers-40m-domain-names-ai-movies-winning-awards-peter-kroner)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker)
- [WeAreDevelopers LIVE - What Development and Tattoos Have in Common and more](https://www.wearedevelopers.com/videos/1380-wearedevelopers-live-what-development-and-tattoos-have-in-common-and-more)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)