> Markdown version of [/jobs/ext/3665463-internal-penetration-tester](https://www.wearedevelopers.com/jobs/ext/3665463-internal-penetration-tester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Internal Penetration Tester

- **Company:** Salt Search Ltd.
- **Location:** London, UK
- **Experience:** Experienced
- **Salary:** £75,000.0 - £110,000.0
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Software System Penetration Testing, Burp Suite, Kali Linux, Open Web Application Security, Web Application Security, Wireshark, Web Applications, Enterprise Software Applications, Software Security, Metasploit, Nessus, Vulnerability Analysis
- **Published:** October 10, 2026
- **Apply:** https://www.totaljobs.com/job/penetration-tester/salt-job108122215

## About the Role

* Minimum 3-5 years of hands-on penetration testing experience within enterprise, consultancy or professional services environments.
 * Strong practical experience conducting web application penetration testing, including manual assessment techniques and vulnerability validation.
 * Excellent understanding of OWASP Top 10 vulnerabilities, web application security principles and offensive security methodologies.
 * Experience performing independent security assessments and delivering findings from initial scoping through to final reporting.
 * Hands-on experience with tools such as Burp Suite, Kali Linux, Metasploit, Nessus, Wireshark or equivalent offensive security toolsets.
 * Strong understanding of vulnerability exploitation techniques, attack simulation and the difference between vulnerability assessments and penetration testing engagements.

## Description

This is an excellent opportunity for an experienced Penetration Tester, Offensive Security Consultant or Application Security professional to join a growing global security team responsible for assessing and improving the security of enterprise applications, platforms and emerging technologies.

Internal Penetration Tester - Responsibilities

 * Perform manual penetration testing and security assessments of web applications, APIs and enterprise platforms.
 * Identify, validate and exploit security vulnerabilities using recognised penetration testing methodologies and industry best practices.
 * Conduct security testing aligned to OWASP guidance and application security frameworks.
 * Produce detailed technical reports outlining findings, risk ratings, remediation recommendations and business impact.
 * Work closely with application owners, technology teams and security stakeholders to communicate findings and support remediation efforts.
 * Contribute to security research, testing methodologies and the assessment of emerging technologies, including AI-enabled applications and services.