Penetration Tester

Yolk Recruitment Ltd; Cardiff; On-site; GBP 71,000 - 81,000; Full time

Benefits offered by this job

Annual bonus

Excellent pension

Hybrid working

Training and certification support

Job summary

Yolk Recruitment Ltd in South Wales is seeking a Penetration Testing Specialist to plan and deliver testing across IT and OT environments, including industrial control systems. This role combines hands‑on testing with collaboration across security teams to improve resilience.

You will assess vulnerabilities, produce remediation guidance, and work in a hybrid setup with ongoing training and a competitive package.

Qualifications

• Commercial penetration testing experience.
• Experience testing OT/ICS or industrial environments.
• Strong reporting and stakeholder communication skills.
• Knowledge of attacker TTPs and offensive security methodologies.

Responsibilities

• Deliver infrastructure, web application and internal penetration testing.
• Assess OT/ICS environments using safe testing methodologies.
• Research new vulnerabilities, exploits and attacker techniques.
• Produce clear technical reports with practical remediation advice.
• Support vulnerability management and technical risk assessment.
• Manage external penetration testing providers where required.
• Work closely with security, infrastructure and engineering teams to improve resilience.

Skills

Penetration testing

Infrastructure security testing

OT/ICS security

Vulnerability assessment

Threat intelligence/attack techniques

Job description

Penetration Testing Specialist | South Wales | Hybrid | £71,000 - £81,000 + bonus + excellent benefits

The Role

Working as part of an established cyber security function, you'll be responsible for planning and delivering penetration testing across a diverse technology estate, including traditional IT infrastructure, business applications and Operational Technology.

Alongside hands‑on testing, you'll work closely with technical teams and third‑party security partners to prioritise remediation, improve security controls and provide expert guidance on emerging threats.

This is a varied technical role offering exposure to modern enterprise environments as well as industrial control systems and critical infrastructure.

What You’ll Be Doing:

• Deliver infrastructure, web application and internal penetration testing
• Assess Operational Technology (OT) and industrial environments using safe testing methodologies
• Research new vulnerabilities, exploits and attacker techniques
• Identify weaknesses across people, processes and technology, including social engineering and information leakage
• Produce clear technical reports with practical remediation advice
• Support vulnerability management and technical risk assessment
• Manage external penetration testing providers where required
• Work closely with security, infrastructure and engineering teams to improve resilience

What We're Looking For:

You'll ideally have experience in several of the following:

• Commercial penetration testing experience
• Infrastructure and application security testing
• Strong knowledge of attacker TTPs and offensive security methodologies
• Vulnerability assessment and security risk management
• Experience working with or assessing OT,ICS or industrial environments
• Excellent technical reporting and stakeholder communication skills

What's on Offer?

• Competitive salary
• Annual bonus
• Excellent pension
• Hybrid working
• Ongoing technical training and certification support
• Exposure to enterprise-scale and Operational Technology environments
• Long-term career progression within a growing cyber security function