Internal Penetration Tester

Salt; Belfast City District; On-site; GBP 55,000 - 90,000; Full time

Job summary

Salt seeks an experienced Penetration Tester/Offensive Security professional to join a growing global security team. You will assess and improve the security of enterprise applications, platforms and emerging technologies across multiple markets.

Join a professional services organisation investing in cybersecurity and AI, delivering hands-on testing, detailed reporting and actionable remediation guidance to risk owners and technology teams.

Qualifications

• 3–5 years of hands-on penetration testing experience within enterprise, consultancy or professional services environments.
• Strong understanding of OWASP Top 10 vulnerabilities and offensive security methodologies.
• Experience with independent security assessments from scoping to final reporting.

Responsibilities

• Perform manual penetration testing and security assessments of web applications, APIs and enterprise platforms.
• Identify, validate and exploit security vulnerabilities using recognised methodologies and industry best practices.
• Produce detailed technical reports with findings, risk ratings, remediation recommendations and business impact.
• Communicate findings to application owners and security stakeholders to support remediation efforts.
• Contribute to security research, testing methodologies and AI-enabled applications assessments.

Skills

Penetration testing

OWASP Top 10

Web application security

Offensive security tools

Report writing

Tools

Burp Suite

Kali Linux

Metasploit

Nessus

Wireshark

Job description

We are partnering with a globally recognised professional services organisation that operates across multiple international markets and supports thousands of employees worldwide. With technology and cyber security continuing to be a strategic priority, the business is investing heavily in strengthening its cyber resilience, risk management capabilities and enterprise security programmes.

This is an excellent opportunity for an experienced Penetration Tester, Offensive Security Consultant or Application Security professional to join a growing global security team responsible for assessing and improving the security of enterprise applications, platforms and emerging technologies.

• Perform manual penetration testing and security assessments of web applications, APIs and enterprise platforms.
• Identify, validate and exploit security vulnerabilities using recognised penetration testing methodologies and industry best practices.
• Conduct security testing aligned to OWASP guidance and application security frameworks.
• Produce detailed technical reports outlining findings, risk ratings, remediation recommendations and business impact.
• Work closely with application owners, technology teams and security stakeholders to communicate findings and support remediation efforts.
• Contribute to security research, testing methodologies and the assessment of emerging technologies, including AI-enabled applications and services.
• Minimum 3-5 years of hands-on penetration testing experience within enterprise, consultancy or professional services environments.
• Strong practical experience conducting web application penetration testing, including manual assessment techniques and vulnerability validation.
• Excellent understanding of OWASP Top 10 vulnerabilities, web application security principles and offensive security methodologies.
• Experience performing independent security assessments and delivering findings from initial scoping through to final reporting.
• Hands-on experience with tools such as Burp Suite, Kali Linux, Metasploit, Nessus, Wireshark or equivalent offensive security toolsets.
• Strong understanding of vulnerability exploitation techniques, attack simulation and the difference between vulnerability assessments and penetration testing engagements.

This is an exciting opportunity to join a highly respected global organisation that is making significant investments in cybersecurity and AI. You will work alongside experienced offensive security professionals, gain exposure to complex enterprise environments and play a key role in helping secure critical business systems and innovative technologies.