Senior Penetration Tester

About the Role

Our client is seeking a highly skilled and ethical Senior Penetration Tester to join their security assurance team, operating on a hybrid basis in Edinburgh . You will be responsible for simulating cyber-attacks to identify vulnerabilities in our client's systems, applications, and networks before malicious actors can exploit them. This role requires a deep understanding of offensive security techniques, a methodical approach to testing, and the ability to clearly communicate findings and remediation recommendations to technical and non-technical audiences. If you are passionate about finding weaknesses and helping to strengthen defenses, this role offers a challenging and rewarding career path.

Key Responsibilities

• Conduct comprehensive penetration tests across web applications, networks, mobile applications, and cloud environments.
• Perform vulnerability assessments and security audits to identify and prioritize security flaws.
• Develop detailed reports documenting findings, risks, and actionable remediation strategies.
• Utilize a variety of penetration testing tools and methodologies to uncover security weaknesses.
• Stay current with the latest attack vectors, exploitation techniques, and security vulnerabilities.
• Collaborate with development and infrastructure teams to ensure security vulnerabilities are addressed effectively.

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• 4+ years of professional experience in penetration testing or offensive security.
• Proven experience with various testing methodologies and tools (e.g., Metasploit, Burp Suite, Nmap).
• Strong understanding of common vulnerabilities (e.g., OWASP Top 10) and exploit techniques.
• Excellent analytical and problem-solving skills.
• Relevant certifications such as OSCP, CEH, or GPEN are highly desirable.

Benefits

• Competitive salary and bonus opportunities.
• Hybrid working model to support work-life balance.
• Comprehensive health and wellness benefits.
• Significant budget for training, certifications, and conference attendance.
• Opportunity to work on diverse and challenging security engagements.