Hands-On Penetration Tester (Hybrid Belfast)

Ocho; Belfast City District; Hybrid; GBP 40,000 - 50,000; Full time

Benefits offered by this job

Private medical insurance

Pension matching up to 8%

Life assurance at 4x salary

25 days’ annual leave + bank holidays

Job summary

Ocho, based in Belfast with hybrid work (2 days on site), is hiring a hands-on Penetration Tester to assess web apps, APIs and systems for a global law firm. You’ll perform manual testing, focusing on live applications, including AI-enabled components, using Burp Suite and Kali Linux with OWASP methodologies.

Expect a mix of on-site and remote collaboration, and a focus on practical, actionable findings. The role emphasizes independent testing, clear reporting, and contributing to capacity

Qualifications

• Hands-on penetration testing experience is essential.
• Strong manual testing of web apps and APIs required.
• Experience with vulnerability assessment vs. pen-testing understood.

Responsibilities

• Deliver hands-on pen tests across web apps, APIs, and systems.
• Perform manual testing of live apps using OWASP methods.
• Test REST and GraphQL APIs and their auth controls.
• Identify, validate and exploit vulnerabilities; confirm findings.
• Write clear, actionable reports for technical and non-technical audiences.
• Contribute to architecture reviews and backlog clearing.

Skills

Hands-on testing

Burp Suite

Kali Linux

OWASP Top 10

CVEs & exploitation

API testing REST/GraphQL

Report writing

Ability to explain findings

Education

OSCP (advantage)

GIAC certifications (nice-to-have)

Security testing certifications

Tools

Nessus

AppScan

Nipper

Metasploit

Wireshark

Job description

Ocho, based in Belfast with hybrid work (2 days on site), is hiring a hands-on Penetration Tester to assess web apps, APIs and systems for a global law firm. You’ll perform manual testing, focusing on live applications, including AI-enabled components, using Burp Suite and Kali Linux with OWASP methodologies.

Expect a mix of on-site and remote collaboration, and a focus on practical, actionable findings. The role emphasizes independent testing, clear reporting, and contributing to capacity