Hybrid Penetration Tester: Web, API & Cloud Security

VIQU IT Recruitment; Copsale; Hybrid; GBP 54,000 - 66,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

VIQU IT Recruitment is seeking a permanent Penetration Tester in the Horsham area with hybrid working arrangements. The role covers hands-on security testing across web applications, APIs, infrastructure and cloud environments, delivering risk-based remediation guidance and clear final reports.

You will join a collaborative Cyber Defence team, work with modern security tooling, and have opportunities to develop technical expertise and progress to senior offensive security positions.

Qualifications

• Hands-on pen tester delivering assessments across web apps, APIs, infrastructure and cloud.
• Strong understanding of OWASP Top 10, authn/authz flaws and input validation.
• Knowledge of methodologies (OWASP, PTES, NIST) with practical use of offensive security tools.
• Experience interpreting vulnerability scan results and validating findings.
• Understanding attacker TTPs and how they apply in real-world scenarios.
• Ability to produce clear, structured reports with remediation advice.
• Working towards recognised penetration testing certifications such as CREST CPSA/CRT or OSCP.
• Strong communication and relationship-building skills across technical and business teams.
• Analytical, organized, collaborative and proactive in learning.

Responsibilities

• Deliver penetration testing across web apps, APIs, infrastructure and cloud environments using recognised methodologies.
• Perform end-to-end testing including recon, exploitation, post-exploitation, validation and reporting.
• Produce clear, risk-based penetration testing reports with remediation recommendations for technical and non-technical stakeholders.
• Support management of external penetration testing providers and validate deliverables.
• Assist with vulnerability assessments, risk prioritisation, remediation tracking and re-testing.
• Work with dev, engineering and delivery teams to embed security testing in lifecycles.
• Contribute to purple team exercises, incident investigations and cyber defence initiatives.
• Help improve internal testing playbooks, tooling and knowledge sharing.
• Maintain awareness of emerging threats and attacker techniques.

Skills

Penetration testing

Web applications

APIs

Infrastructure

Cloud security

Reporting

Communication

Education

CREST CPSA/CRT

OSCP

Job description

VIQU IT Recruitment is seeking a permanent Penetration Tester in the Horsham area with hybrid working arrangements. The role covers hands-on security testing across web applications, APIs, infrastructure and cloud environments, delivering risk-based remediation guidance and clear final reports.

You will join a collaborative Cyber Defence team, work with modern security tooling, and have opportunities to develop technical expertise and progress to senior offensive security positions.