Lead Penetration Tester — AI‑Driven Security (Remote/Flex)

SITA; Reading; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Flex Week

Flex Day

Flex-Location

Employee Wellbeing

Professional Development

Competitive Benefits

Job summary

SITA, a global leader in air travel technology, seeks a Lead Penetration Tester to advance security testing from scoping to closure. You will guide internal and external pentesters, validate reports, and ensure alignment with security standards across applications, APIs, and cloud environments.

You will drive modern, AI-assisted testing approaches, advocate for secure design, and communicate findings to product, engineering and management. This role offers flexible work options and global impact.

Qualifications

• Masters degree in Information Security, Computer Science or related field.
• Penetration Testing certification (OSCP/GPEN/CRTO) is a strong advantage.
• Professional security cert (CISSP/CISA) is a plus.

Responsibilities

• Run authorized penetration tests on SITA applications, APIs, mobile apps, AI components, cloud environments and infrastructure.
• Lead scoping sessions with product/tech teams; define test scope and plan; collect prerequisites.
• Provide technical direction to internal/contracted pentesters during testing.
• Review reports for technical accuracy and remediation advice; raise critical alerts.
• Explain findings and business impact to teams and management; present results in triage calls.
• Perform or supervise retests and produce summary reports and attestations for customers/regulators.
• Conduct root-cause analysis on critical findings and feed lessons learned back to product teams.
• Evaluate AI-assisted pentesting tools; decide what tasks require human oversight vs automation.
• Research/testing tools and methodologies; contribute to automating security testing in CI/CD pipelines.
• Advise on secure design via threat modelling and architecture reviews.

Skills

Lateral thinking

Business impact

Attack tools & techniques

Networking concepts

Continual learning

Security standards

Web security (OWASP Top 10)

Development basics (.NET/Java)

AI-assisted pentesting

Security reporting & communication

Education

Masters degree in Information Security / related

Penetration Testing certification (OSCP/GPEN/CRTO)

CISSP / CISA (plus)

Tools

DAST tools

Pentest reporting platform

AI-assisted testing tooling

Job description

SITA, a global leader in air travel technology, seeks a Lead Penetration Tester to advance security testing from scoping to closure. You will guide internal and external pentesters, validate reports, and ensure alignment with security standards across applications, APIs, and cloud environments.

You will drive modern, AI-assisted testing approaches, advocate for secure design, and communicate findings to product, engineering and management. This role offers flexible work options and global impact.