Lead Penetration Tester (CTL) – Cloud & App Security

Instil; City of Edinburgh; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A leading technology company in Edinburgh seeks a skilled Lead Penetration Tester to lead complex testing engagements across infrastructure, cloud, web, and mobile applications. This senior role involves mentoring junior testers, executing penetration tests, and producing actionable reports. Ideal candidates have CHECK Team Lead status and 5+ years of experience in penetration testing. Offering a flexible work environment and comprehensive benefits, this position is perfect for those looking to grow in a dynamic security team.

Benefits

Discretionary annual performance bonus

Flexible working arrangements

Competitive pension scheme

Private healthcare

35 days holiday

Learning and development opportunities

Qualifications

• Minimum 5 years’ penetration testing experience.
• Proven experience in cloud security reviews (AWS, Azure, GCP).
• Strong knowledge of operating systems (Linux, Windows).

Responsibilities

• Lead and execute penetration tests across various applications.
• Manage end‑to‑end engagements, from scoping to client debriefs.
• Produce detailed reports outlining vulnerabilities and remediation steps.

Skills

CHECK Team Lead (CTL) status

Penetration testing experience

Cloud security reviews

Web, mobile, and network methodologies

Scripting skills (Python, Shell)

Communication skills

Tools

BurpSuite Pro

Nmap

Nessus

Metasploit

Kali Linux

Job description

A leading technology company in Edinburgh seeks a skilled Lead Penetration Tester to lead complex testing engagements across infrastructure, cloud, web, and mobile applications. This senior role involves mentoring junior testers, executing penetration tests, and producing actionable reports. Ideal candidates have CHECK Team Lead status and 5+ years of experience in penetration testing. Offering a flexible work environment and comprehensive benefits, this position is perfect for those looking to grow in a dynamic security team.