Senior Penetration Tester (Cybersecurity)

Location: London Area, United Kingdom; hybrid

What you will do

• Conduct white-box and black-box penetration tests across applications, infrastructure, and APIs.
• Investigate vulnerabilities, bug bounty reports, third-party tools, and integrations to identify root causes and related variants.
• Build scalable tools for reconnaissance, automation, and security insights.
• Work with engineers, product teams, security, and the SOC to turn findings into practical fixes.
• Deliver security demos, workshops, and hands-on knowledge-sharing sessions.
• Help prioritize security improvements and evolve the security programme.

Requirements

• Solid experience in penetration testing and offensive security.
• Ability to identify vulnerabilities in code, particularly Java and Node.js.
• Understanding of AWS, microservices, and APIs.
• Strong communication skills and ability to provide actionable remediation advice.
• Comfort with scripting and contributing to larger Python projects.
• Ownership, curiosity, and a pragmatic approach to security problem-solving.

Nice to have

• OSCP, OSWE, CREST, GIAC, AWS certifications, or equivalent experience.
• CTF participation, bug bounty hunting, or involvement in the security community.

Culture & Benefits

• Permanent hybrid role based in the London Area.
• Hands-on work with direct impact on security resilience.
• Close collaboration with engineering, product, security, and SOC teams.