Lead Penetration Tester – AI‑Driven Security & Hybrid Work

SITA Switzerland Sarl; Reading; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Flex Week: Work from home up to 2 days

Flex Day

Flex-Location: up to 30 days worldwide

Employee Wellbeing

Professional Development

Competitive Benefits

Job summary

SITA in Reading, United Kingdom, is seeking a Lead Penetration Tester to drive security testing across apps, APIs, cloud and infrastructure.

You will lead internal and contracted pentesters, advance AI-assisted testing, and advise on secure design and threat modelling to reduce risk for customers and regulators.

The role collaborates with product teams, presents findings to management, and ensures high-quality reports using CVSS scoring.

Qualifications

• 5-7 years' experience in network, web/mobile, or cloud penetration testing.
• Mastery of Unix/Linux/Windows OS, including bash and PowerShell, with scripting (Python/Ruby/Perl).
• Experience with AI-assisted penetration testing.
• Strong understanding of network technologies and security frameworks.

Responsibilities

• Run authorized pentests on apps, APIs, mobile apps, AI, cloud, and infrastructure.
• Lead scoping sessions and write the pentest plan; collect prerequisites.
• Provide technical direction to testers and unblock issues.
• Review reports for CVSS scoring and remediation before publishing.
• Explain findings and business impact to development teams and management; present results in triage calls.
• Perform or supervise retests and produce summary reports and attestations.
• Run root-cause analysis on critical findings and feed lessons back to product teams.
• Evaluate and use AI-assisted pentesting tools; decide automation vs human checks.
• Research and develop testing tools; contribute to CI/CD automation for security testing.
• Advise on secure design through threat modelling and architecture reviews.

Skills

Adversarial Thinking

Cloud Security Assessment

Exploitation Techniques

Vulnerability Analysis

Security pen-testing tool mastery

Threat Modeling

Network & Active Directory Security

Application Security Testing

Privilege Escalation

Post-Exploitation Techniques

Red Team Operations

Security Standards & Compliance

Incident Simulation & Reporting

Scripting & Automation

Risk-Based Assessment

Security Advisory

Research & Innovation

Technical Writing & Documentation

Education

Masters degree in a technical discipline such as Information Security, Computer Science, Engineering, Telecommunications, Mathematics, Physics

Penetration Testing certification (e.g. OSCP, GPEN, CRTO)

Professional security certification (e.g. CISSP, CISA)

Job description

SITA in Reading, United Kingdom, is seeking a Lead Penetration Tester to drive security testing across apps, APIs, cloud and infrastructure.

You will lead internal and contracted pentesters, advance AI-assisted testing, and advise on secure design and threat modelling to reduce risk for customers and regulators.

The role collaborates with product teams, presents findings to management, and ensures high-quality reports using CVSS scoring.