Internal Penetration Tester

Xpand Group; City Of London; Hybrid; GBP 75,000 - 110,000; Full time

Job summary

Xpand Group seeks an experienced Internal Penetration Tester to join a global security team. You will perform manual testing of web applications, APIs and enterprise platforms, identifying vulnerabilities and validating findings across multiple markets.

You will deliver detailed reports, work with owners and security stakeholders, and contribute to testing methodologies for emerging technologies including AI-enabled applications and services. Rates vary by experience and client requirements.

Qualifications

• Minimum 3–5 years hands-on penetration testing experience in enterprise, consultancy, or professional services environments.
• Strong experience in web application pentesting, manual testing techniques and vulnerability validation.
• Excellent understanding of OWASP Top 10 vulnerabilities and offensive security methodologies.
• Experience delivering findings from scoping to final reporting with independent security assessments.
• Hands-on with offensive security toolsets (Burp Suite, Kali Linux, Metasploit, Nessus, Wireshark).
• Ability to communicate findings to technical and non-technical stakeholders and support remediation.

Responsibilities

• Perform manual penetration testing and security assessments of web apps, APIs and enterprise platforms.
• Identify, validate and exploit vulnerabilities using recognised methodologies and industry best practices.
• Conduct security testing aligned to OWASP guidance and application security frameworks.
• Produce detailed technical reports with findings, risk ratings, remediation recommendations and business impact.
• Collaborate with application owners, technology teams and security stakeholders to communicate findings and support remediation.
• Contribute to security research and testing of emerging technologies, including AI-enabled applications and services.

Skills

Penetration testing

Web application security

OWASP methodologies

Security assessments

Tools

Burp Suite

Kali Linux

Metasploit

Nessus

Wireshark

Job description

Internal Penetration Tester

Salary: £75,000 - £110,000 per annum

Location: Belfast - 2/3 days per week

Positions: 3

We are partnering with a globally recognised professional services organisation that operates across multiple international markets and supports thousands of employees worldwide. With technology and cyber security continuing to be a strategic priority, the business is investing heavily in strengthening its cyber resilience, risk management capabilities and enterprise security programmes.

This is an excellent opportunity for an experienced Penetration Tester, Offensive Security Consultant or Application Security professional to join a growing global security team responsible for assessing and improving the security of enterprise applications, platforms and emerging technologies.

Internal Penetration Tester - Responsibilities

• Perform manual penetration testing and security assessments of web applications, APIs and enterprise platforms.


• Identify, validate and exploit security vulnerabilities using recognised penetration testing methodologies and industry best practices.


• Conduct security testing aligned to OWASP guidance and application security frameworks.


• Produce detailed technical reports outlining findings, risk ratings, remediation recommendations and business impact.


• Work closely with application owners, technology teams and security stakeholders to communicate findings and support remediation efforts.


• Contribute to security research, testing methodologies and the assessment of emerging technologies, including AI-enabled applications and services.

Internal Penetration Tester - Requirements

• Minimum 3-5 years of hands-on penetration testing experience within enterprise, consultancy or professional services environments.


• Strong practical experience conducting web application penetration testing, including manual assessment techniques and vulnerability validation.


• Excellent understanding of OWASP Top 10 vulnerabilities, web application security principles and offensive security methodologies.


• Experience performing independent security assessments and delivering findings from initial scoping through to final reporting.


• Hands-on experience with tools such as Burp Suite, Kali Linux, Metasploit, Nessus, Wireshark or equivalent offensive security toolsets.


• Strong understanding of vulnerability exploitation techniques, attack simulation and the difference between vulnerability assessments and penetration testing engagements.

This is an exciting opportunity to join a highly respected global organisation that is making significant investments in cybersecurity and AI. You will work alongside experienced offensive security professionals, gain exposure to complex enterprise environments and play a key role in helping secure critical business systems and innovative technologies.

*Rates depend on experience and client requirements