Hybrid Internal Penetration Tester – Enterprise Security

Salt; Greater London; Hybrid; GBP 75,000 - 110,000; Full time

Job summary

Salt is seeking an Internal Penetration Tester to join a global professional services security team. You will perform manual testing of web applications, APIs and enterprise platforms, produce detailed reports, and work with technology teams to remediate findings.

Required 3–5 years of hands-on testing, strong OWASP Top 10 knowledge, and experience with Burp Suite, Kali Linux, Metasploit and Nessus. Belfast-based role with 2–3 days on-site.

Qualifications

• 3–5 years of hands-on penetration testing in enterprise, consultancy or professional services.
• Strong practical experience in web application penetration testing with manual testing and validation.
• Excellent understanding of OWASP Top 10 vulnerabilities and offensive security methodologies.
• Experience delivering findings from scoping through final reporting.
• Hands-on use of Burp Suite, Kali Linux, Metasploit, Nessus or similar tools.

Responsibilities

• Perform manual penetration testing and security assessments of web apps, APIs and platforms.
• Identify, validate and exploit vulnerabilities using recognized methodologies and best practices.
• Test applications in line with OWASP guidance and application security frameworks.
• Produce detailed reports with findings, risk ratings and remediation recommendations.
• Collaborate with owners and security stakeholders to communicate findings and support remediation.
• Contribute to security research and testing approaches for emerging technologies incl. AI.

Skills

Penetration testing

Web application security

OWASP Top 10

Security assessments

Stakeholder communication

Tools

Burp Suite

Kali Linux

Metasploit

Nessus

Wireshark

Job description

Salt is seeking an Internal Penetration Tester to join a global professional services security team. You will perform manual testing of web applications, APIs and enterprise platforms, produce detailed reports, and work with technology teams to remediate findings.

Required 3–5 years of hands-on testing, strong OWASP Top 10 knowledge, and experience with Burp Suite, Kali Linux, Metasploit and Nessus. Belfast-based role with 2–3 days on-site.