Penetration Tester

Guideposts Trust Limited; Cardiff; On-site; GBP 45,000 - 65,000; Full time

Job summary

Guideposts Trust Limited is seeking a skilled Penetration Tester to join our expanding team in the United Kingdom. The role focuses on manual penetration testing across multiple disciplines, with reporting to a high standard and clear communication to non-technical audiences.

We require a minimum of two years’ experience in penetration testing, along with a relevant degree in cyber security or related field. Some travel to client sites will be necessary.

Qualifications

• Minimum 2 years' experience in a penetration testing role across web applications, APIs, internal and external networks, cloud and infrastructure.
• Working towards industry certifications such as CPSA, CRT, OSCP, CSTM.
• Working knowledge of recognised penetration testing methods.
• Degree in cyber security or related field.

Responsibilities

• Perform formal and comprehensive application and infrastructure penetration testing engagements.
• Provide well-written and concise technical and non-technical reports to high standards of written English.
• Assist with delivery of technical accreditations such as Cyber Essentials Plus.
• Maintain company systems to enable an accurate picture of project status.
• Perform vulnerability assessments and provide findings with remediation actions.
• Collaborate with the penetration testing team to ensure best execution.
• Support quality assessment checks across engagements.
• Contribute to internal R&D projects such as report automation and testing toolsets.
• Coordinate with SOC and Governance, Risk & Compliance teams to maximise testing effectiveness.
• Travel to client sites to conduct onsite testing as required.

Skills

Penetration testing

Report writing

Vulnerability assessment

Communication

Education

Degree in cyber security or related field

Certification in CPSA/CRT/OSCP/CSTM in progress

Job description

Full time, Monday - Friday, 37.5 hours per week.

Overview

We are looking for a skilled Penetration Tester to join our growing team. This role will be performing manual penetration testing duties across several disciplines using the appropriate methodologies.

The ideal candidate will have a competent level of technical skills and be confident in finding vulnerabilities across a range of systems. The preparation and presentation of reports and technical information to a high standard is a key function, as is an ability to deliver the information to a non-technical audience.

Previous experience in a penetration testing role is essential.

Key Responsibilities

• Perform formal and comprehensive application and infrastructure penetration testing engagements.
• Provide well-written and concise technical and non-technical reports to the highest standards of written English.
• Assist with the delivery of technical accreditations such as Cyber Essentials Plus.
• Maintain Company systems to enable an accurate picture of the status of all projects.
• Perform vulnerability assessments and provide findings with remediation actions.
• Liaise effectively with the Team Lead's and the wider penetration testing team to ensure the best execution and delivery of projects.
• Help complete quality assessment checks against the rest of the penetration testing engagements.
• During dedicated periods, create and contribute to internal R&D projects such as report automation and testing toolsets.
• Liaise with the SOC and Governance Risk & Compliance teams to help maximise overall effectiveness of Penetration Testing activities.
• Travel to client sites to conduct onsite testing as required.

Person specification

• Minimum 2 years' experience in a penetration testing role conducting tests across multiple environments such as web applications, APIs, internal networks, external networks, cloud platforms, and infrastructure.
• Hold or working towards a relevant industry certification such as CPSA, CRT, OSCP, CSTM.
• Working knowledge of recognised penetration testing methods
• Excellent problem solving skills and attention to detail
• Degree in cyber security or related field

Regrettably, we are unable to offer sponsorship for this opportunity. All applicants must have the right to work in the UK with no restrictions.