Penetration Tester

DGH Recruitment Limited; Bishopsgate; On-site; GBP 50,000 - 61,000; Full time

Job summary

DGH Recruitment Limited is recruiting a Penetration Tester for a leading accountancy client in London. The role focuses on delivering client-facing security assessments across web apps, APIs, and networks, with hands-on use of Kali Linux, Burp Suite, Nmap, and vulnerability scanners.

You will plan testing engagements with clients, apply frameworks like OWASP and PTES, and produce clear deliverables. The position requires strong manual testing skills and the ability to automate where appropriate.

Qualifications

• Experience delivering client-facing penetration tests across web apps, APIs and networks.
• Hands-on use of Kali Linux, Burp Suite, Nmap and vulnerability scanners.
• Familiarity with penetration testing methodologies and scripting to automate tasks.
• Knowledge of modern web architectures and common vulnerabilities.
• Experience with CIS, Cyber Essentials schemes, and related frameworks.

Responsibilities

• Lead and support penetration testing engagements across web apps, APIs and networks.
• Define objectives, scope, and engagement rules with clients and plan testing.
• Apply manual and tool-based testing aligned with OWASP/PTES/MITRE ATT&CK.
• Deliver Cyber Essentials Plus assessments and remediation support.
• Conduct broader security assessments including CIS benchmarks and vendor guidance.
• Produce clear deliverables and present findings to technical and non-technical stakeholders.

Skills

Penetration testing

Manual testing

Python scripting

PowerShell scripting

OWASP

Client communication

Tools

Kali Linux

Burp Suite

Nmap

Qualys

Nessus

Job description

Salary: £55,000 - 55,000 per year

Requirements:

• Professional experience delivering client-facing penetration tests across web applications, APIs, and internal or external network infrastructure, independently or as part of a team
• Strong manual testing capability and sound judgment in selecting and using automated tools, with practical experience of Kali Linux, Burp Suite, Nmap, and Qualys or Nessus
• Familiarity with recognized penetration testing methodologies and frameworks, and ability to script or automate tasks using Python, PowerShell, Bash, or a comparable language
• Good knowledge of modern web architecture, common web and API vulnerabilities, TCP/IP, Windows and Linux security, and Active Directory and Microsoft Entra ID attack paths
• Experience delivering, or ability to deliver, wider technical assessments such as vulnerability assessments and configuration reviews against recognized benchmarks such as CIS
• Working knowledge of the Cyber Essentials and Cyber Essentials Plus schemes; existing assessor experience is beneficial, and we will provide appropriate training where required

Responsibilities:

• Lead and support penetration testing engagements across web applications, APIs, and internal and external network infrastructure
• Work with clients to define objectives, agree scope and rules of engagement, and plan testing to meet their assurance needs
• Apply manual and tool-assisted testing techniques aligned with recognized methodologies and frameworks, including the OWASP Web Security Testing Guide, PTES, and MITRE ATT&CK
• Deliver Cyber Essentials Plus assessments, including scoping, technical testing, remediation verification, and support through to certification in line with current NCSC and IASME scheme requirements
• Deliver wider technical security assessments, including vulnerability assessments, cloud security reviews, and build and configuration reviews against CIS Benchmarks and vendor hardening guidance
• Produce clear, high-quality deliverables and present findings to technical and non-technical stakeholders

Technologies:

• API
• Active Directory
• Bash
• Cloud
• Support
• Linux
• Network
• OWASP
• PowerShell
• Python
• Security
• TCP/IP
• Web
• Windows

More:

We are recruiting on behalf of a leading client in the accountancy industry for a Penetration Tester to join the firm in London. We advertise this position after seeking our clients approval to find candidates. DGH Recruitment Limited acts as both an Employment Agency and an Employment Business.