Penetration Tester

TN United Kingdom; City of Edinburgh; Hybrid; GBP 40,000 - 60,000; Full time

Job summary

A leading mutual life and pensions company in the UK is seeking a Penetration Tester to join their Cyber Attack Surface Management team. The role involves assessing security vulnerabilities, simulating cyber-attacks, and providing expert advice to enhance the organization's security posture. Candidates should have operational experience in penetration testing and be familiar with various cybersecurity tools and methodologies. The company offers a hybrid working style and excellent benefits, including generous annual leave and pension contributions.

Benefits

28 days of annual leave plus bank holidays

Up to 14% employer matching pension scheme

Private medical insurance

Qualifications

• At least one year of operational experience in penetration testing.
• Ability to document findings and communicate risks clearly.
• Knowledge of common web vulnerabilities and testing tools.

Responsibilities

• Assess systems to identify and address security vulnerabilities.
• Simulate cyber-attacks to strengthen defenses.
• Maintain high-level cyber knowledge to support assessments.

Skills

Penetration Testing

Cybersecurity

Vulnerability Assessment

Documentation

Continuous Learning

Education

OSCP/OSCE, GPEN/GXPN, CHECK Team Member

Tools

Metasploit

Wireshark

Nmap

Job description

Social network you want to login/join with:

Working style: Hybrid 50% home/office based

Closing date: 1st June 2025

Over the last few years, we’ve been on a continuous improvement journey and are looking to expand the security and resilience team. These new roles will enable us to fully enact our threat-led security program, drive further improvements across cyber, and support our organisational goal of building a secure and resilient mutual. With a security team of over 60 members, these new roles will enhance our capabilities as the threat landscape continues to evolve.

We are recruiting for an exciting role as a Penetration Tester within our Cyber Attack Surface Management team. You’ll join the team responsible for end-to-end security testing across the group, including owning relationships across our security towers to drive continual improvement.

You will provide expert advice to all levels of the business as part of the team at the center of our threat-led security program. Our small internal penetration testing team is new, and its aim is to support our operations and intelligence teams by testing controls and the efficacy of detection engineering.

About the role

• Assess computer systems, networks, or applications to identify and address security vulnerabilities.
• Simulate cyber-attacks to help Royal London strengthen defenses and protect against real threats.
• Be familiar with various operating systems, including Linux and Windows, to exploit vulnerabilities across platforms.
• Have knowledge of common web vulnerabilities (e.g., SQL injection, cross-site scripting) and testing tools for web applications.
• Be aware of cybersecurity tools such as Metasploit, Wireshark, Nmap, and others for scanning, reconnaissance, and exploitation.
• Maintain a high level of business and cyber knowledge across the organization, including understanding dependencies, to support effective assessment and enhancement of systems and networks.

About you

• At least one year of operational experience in penetration testing.
• Proven ability to define scope, objectives, and rules of engagement, preferably in a large enterprise environment.
• Support development and implementation of penetration testing methodologies to ensure security and resilience.
• Ability to document findings clearly and communicate risks to both technical and non-technical stakeholders.
• A commitment to continuous learning to stay updated on threats, techniques, and security measures.
• Qualifications such as OSCP/OSCE, GPEN/GXPN, CHECK Team Member, or similar are desirable but not mandatory.

About Royal London

We’re the UK’s largest mutual life, pensions, and investment company, offering protection, long-term savings, and asset management products and services.

Our People Promise is that we will work somewhere inclusive, responsible, enjoyable, and fulfilling. This is underpinned by our Spirit of Royal London values: Empowered, Trustworthy, Collaborate, Achieve.

We offer great workplace benefits such as 28 days of annual leave plus bank holidays, up to 14% employer matching pension scheme, and private medical insurance. See all our benefits here - Our Benefits.

Inclusion, diversity, and belonging

We’re an inclusive employer. We celebrate and value different backgrounds and cultures across Royal London. Our diverse perspectives give us a range of skills which are recognised and respected—whatever their background.