Penetration Tester

yolk recruitment; Cardiff; On-site; GBP 71,000 - 81,000; Full time

Benefits offered by this job

Annual bonus

Pension

Hybrid working

Technical training & certs

Career progression

Job summary

yolk recruitment is seeking a Penetration Testing Specialist in South Wales with a hybrid working pattern. You will deliver infrastructure, web application and OT penetration testing, and work with technical teams to prioritise remediation and enhance security controls.

Ideal candidates will have commercial penetration testing experience, familiarity with OT/industrial environments, and strong reporting and stakeholder communication skills.

Qualifications

• Commercial penetration testing experience.
• Experience with OT/industrial environments.
• Strong reporting and stakeholder communication skills.

Responsibilities

• Deliver infrastructure, web application and internal penetration testing.
• Assess OT/industrial environments with safe testing methods.
• Research vulnerabilities and attacker techniques.
• Produce actionable remediation guidance in reports.
• Support vulnerability management and risk assessment.
• Coordinate with external pentesting providers when required.
• Collaborate with security, infrastructure and engineering teams to improve resilience.

Skills

Penetration testing

Infrastructure security testing

Application security testing

Threat techniques

OT/industrial security

Stakeholder reporting

Job description

Penetration Testing Specialist | South Wales | Hybrid | £71,000 - £81,000 + bonus + excellent benefits

The Role

Working as part of an established cyber security function, you'll be responsible for planning and delivering penetration testing across a diverse technology estate, including traditional IT infrastructure, business applications and Operational Technology.

Alongside hands‑on testing, you'll work closely with technical teams and third‑party security partners to prioritise remediation, improve security controls and provide expert guidance on emerging threats.

This is a varied technical role offering exposure to modern enterprise environments as well as industrial control systems and critical infrastructure.

What You'll Be Doing:

• Deliver infrastructure, web application and internal penetration testing
• Assess Operational Technology (OT) and industrial environments using safe testing methodologies
• Research new vulnerabilities, exploits and attacker techniques
• Identify weaknesses across people, processes and technology, including social engineering and information leakage
• Produce clear technical reports with practical remediation advice
• Support vulnerability management and technical risk assessment
• Manage external penetration testing providers where required
• Work closely with security, infrastructure and engineering teams to improve resilience

What We're Looking For:

• Commercial penetration testing experience
• Infrastructure and application security testing
• Strong knowledge of attacker TTPs and offensive security methodologies
• Vulnerability assessment and security risk management
• Experience working with or assessing OT, IC S or industrial environments
• Excellent technical reporting and stakeholder communication skills

What's on Offer?

• Competitive salary
• Annual bonus
• Excellent pension
• Hybrid working
• Ongoing technical training and certification support
• Exposure to enterprise-scale and Operational Technology environments
• Long-term career progression within a growing cyber security function