Internal Penetration Tester

This is an excellent opportunity for an experienced Penetration Tester, Offensive Security Consultant or Application Security professional to join a growing global security team responsible for assessing and improving the security of enterprise applications, platforms and emerging technologies.

Internal Penetration Tester - Responsibilities

• Perform manual penetration testing and security assessments of web applications, APIs and enterprise platforms.
• Identify, validate and exploit security vulnerabilities using recognised penetration testing methodologies and industry best practices.
• Conduct security testing aligned to OWASP guidance and application security frameworks.
• Produce detailed technical reports outlining findings, risk ratings, remediation recommendations and business impact.
• Work closely with application owners, technology teams and security stakeholders to communicate findings and support remediation efforts.
• Contribute to security research, testing methodologies and the assessment of emerging technologies, including AI-enabled applications and services.

• Minimum 3-5 years of hands-on penetration testing experience within enterprise, consultancy or professional services environments.
• Strong practical experience conducting web application penetration testing, including manual assessment techniques and vulnerability validation.
• Excellent understanding of OWASP Top 10 vulnerabilities, web application security principles and offensive security methodologies.
• Experience performing independent security assessments and delivering findings from initial scoping through to final reporting.
• Hands-on experience with tools such as Burp Suite, Kali Linux, Metasploit, Nessus, Wireshark or equivalent offensive security toolsets.
• Strong understanding of vulnerability exploitation techniques, attack simulation and the difference between vulnerability assessments and penetration testing engagements.

We are partnering with a globally recognised professional services organisation that operates across multiple international markets and supports thousands of employees worldwide. With technology and cyber security continuing to be a strategic priority, the business is investing heavily in strengthening its cyber resilience, risk management capabilities and enterprise security programmes.