Internal Penetration Tester

Salt; Greater London; Hybrid; GBP 75,000 - 110,000; Full time

Job summary

Salt is seeking an Internal Penetration Tester to join a global professional services security team. You will perform manual testing of web applications, APIs and enterprise platforms, produce detailed reports, and work with technology teams to remediate findings.

Required 3–5 years of hands-on testing, strong OWASP Top 10 knowledge, and experience with Burp Suite, Kali Linux, Metasploit and Nessus. Belfast-based role with 2–3 days on-site.

Qualifications

• 3–5 years of hands-on penetration testing in enterprise, consultancy or professional services.
• Strong practical experience in web application penetration testing with manual testing and validation.
• Excellent understanding of OWASP Top 10 vulnerabilities and offensive security methodologies.
• Experience delivering findings from scoping through final reporting.
• Hands-on use of Burp Suite, Kali Linux, Metasploit, Nessus or similar tools.

Responsibilities

• Perform manual penetration testing and security assessments of web apps, APIs and platforms.
• Identify, validate and exploit vulnerabilities using recognized methodologies and best practices.
• Test applications in line with OWASP guidance and application security frameworks.
• Produce detailed reports with findings, risk ratings and remediation recommendations.
• Collaborate with owners and security stakeholders to communicate findings and support remediation.
• Contribute to security research and testing approaches for emerging technologies incl. AI.

Skills

Penetration testing

Web application security

OWASP Top 10

Security assessments

Stakeholder communication

Tools

Burp Suite

Kali Linux

Metasploit

Nessus

Wireshark

Job description

Internal Penetration Tester

Salary: £75,000 - £110,000 per annum
Location: Belfast - 2/3 days per week
Positions: 3

We are partnering with a globally recognised professional services organisation that operates across multiple international markets and supports thousands of employees worldwide. With technology and cyber security continuing to be a strategic priority, the business is investing heavily in strengthening its cyber resilience, risk management capabilities and enterprise security programmes.

This is an excellent opportunity for an experienced Penetration Tester, Offensive Security Consultant or Application Security professional to join a growing global security team responsible for assessing and improving the security of enterprise applications, platforms and emerging technologies.

Internal Penetration Tester - Responsibilities

• Perform manual penetration testing and security assessments of web applications, APIs and enterprise platforms.
• Identify, validate and exploit security vulnerabilities using recognised penetration testing methodologies and industry best practices.
• Conduct security testing aligned to OWASP guidance and application security frameworks.
• Produce detailed technical reports outlining findings, risk ratings, remediation recommendations and business impact.
• Work closely with application owners, technology teams and security stakeholders to communicate findings and support remediation efforts.
• Contribute to security research, testing methodologies and the assessment of emerging technologies, including AI-enabled applications and services.

Internal Penetration Tester - Requirements

• Minimum 3-5 years of hands‑on penetration testing experience within enterprise, consultancy or professional services environments.
• Strong practical experience conducting web application penetration testing, including manual assessment techniques and vulnerability validation.
• Excellent understanding of OWASP Top 10 vulnerabilities, web application security principles and offensive security methodologies.
• Experience performing independent security assessments and delivering findings from initial scoping through to final reporting.
• Hands‑on experience with tools such as Burp Suite, Kali Linux, Metasploit, Nessus, Wireshark or equivalent offensive security toolsets.
• Strong understanding of vulnerability exploitation techniques, attack simulation and the difference between vulnerability assessments and penetration testing engagements.

This is an exciting opportunity to join a highly respected global organisation that is making significant investments in cybersecurity and AI. You will work alongside experienced offensive security professionals, gain exposure to complex enterprise environments and play a key role in helping secure critical business systems and innovative technologies.

*Rates depend on experience and client requirements