> Markdown version of [/jobs/ext/4095912-penetration-tester](https://www.wearedevelopers.com/jobs/ext/4095912-penetration-tester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Penetration Tester

- **Company:** Optimyze Consulting
- **Location:** London, UK
- **Salary:** £60,000.0 - £75,000.0
- **Contract:** Permanent contract
- **Skills:** Active Directory, Application Programming Interfaces (APIs), Artificial Intelligence, Software System Penetration Testing, Burp Suite, Cloud Computing Security, Nmap, Scripting, Cloud Platform System, Agentic-AI
- **Published:** October 13, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=27a6f99860f11563

## About the Role

* Hands-on experience in penetration testing, an internal offensive-security team or substantial bug-bounty research.
 * A solid understanding of common vulnerabilities and the ability to exploit them manually, including access-control issues, authentication weaknesses and injection vulnerabilities.
 * Confidence testing web applications and APIs, alongside experience with infrastructure or cloud environments.
 * Familiarity with tools such as Burp Suite and Nmap, including the ability to assess and challenge their results.
 * Ability to write or adapt Python scripts to automate tasks and support security testing.
 * Strong written communication skills, with the ability to explain findings, reproduce vulnerabilities and demonstrate their impact.
 * Curiosity, persistence and a willingness to seek help when an unfamiliar problem requires a different approach.

Desirable Experience

Experience in any of the following areas would be advantageous:

 * Active Directory.
 * Privilege escalation.
 * Cloud security.
 * Adversary emulation.
 * Exploit development.
 * Public security research, useful tooling or technical write-ups.

Candidates do not need experience in every area to apply.

Certifications and AI Experience

Certifications such as OSCP are welcome but not mandatory. The company is more interested in how candidates investigate targets, reason through vulnerabilities and demonstrate their impact.

Previous AI experience is not required. An interest in how autonomous agents can support offensive-security work is welcomed.

## Description

The company is looking for a hands-on Penetration Tester / Red Teamer to conduct and support security testing in customer environments, validate findings identified by its AI agents, and help improve its product and research capabilities.

This is a mid-level position for someone who enjoys practical offensive-security work and wants to take on more responsibility while working alongside experienced security researchers and engineers.

You will investigate real vulnerabilities, test their exploitability and determine whether findings represent genuine, reproducible security issues. Practical ability is valued more highly than certifications., * Conduct penetration tests across customer applications, APIs and infrastructure, with support on more complex engagements.

 * Support red-team exercises by investigating attack paths, testing weaknesses and contributing to exploitation.
 * Manually validate findings generated by AI agents, distinguishing reproducible vulnerabilities from false positives.
 * Develop clear proof-of-concept exploits demonstrating exploitability, realistic impact and the conditions required for an attack.
 * Produce concise technical reports containing evidence and practical remediation recommendations.
 * Collaborate with engineers to improve agent behaviour, testing coverage and the quality of findings.
 * Turn discoveries into scripts, repeatable test cases and research inputs.
 * Work carefully within agreed testing scopes, communicate clearly and exercise sound judgement when working in customer environments.