Penetration Tester

VIQU IT Recruitment; Copsale; Hybrid; GBP 54,000 - 66,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

VIQU IT Recruitment is seeking a permanent Penetration Tester in the Horsham area with hybrid working arrangements. The role covers hands-on security testing across web applications, APIs, infrastructure and cloud environments, delivering risk-based remediation guidance and clear final reports.

You will join a collaborative Cyber Defence team, work with modern security tooling, and have opportunities to develop technical expertise and progress to senior offensive security positions.

Qualifications

• Hands-on pen tester delivering assessments across web apps, APIs, infrastructure and cloud.
• Strong understanding of OWASP Top 10, authn/authz flaws and input validation.
• Knowledge of methodologies (OWASP, PTES, NIST) with practical use of offensive security tools.
• Experience interpreting vulnerability scan results and validating findings.
• Understanding attacker TTPs and how they apply in real-world scenarios.
• Ability to produce clear, structured reports with remediation advice.
• Working towards recognised penetration testing certifications such as CREST CPSA/CRT or OSCP.
• Strong communication and relationship-building skills across technical and business teams.
• Analytical, organized, collaborative and proactive in learning.

Responsibilities

• Deliver penetration testing across web apps, APIs, infrastructure and cloud environments using recognised methodologies.
• Perform end-to-end testing including recon, exploitation, post-exploitation, validation and reporting.
• Produce clear, risk-based penetration testing reports with remediation recommendations for technical and non-technical stakeholders.
• Support management of external penetration testing providers and validate deliverables.
• Assist with vulnerability assessments, risk prioritisation, remediation tracking and re-testing.
• Work with dev, engineering and delivery teams to embed security testing in lifecycles.
• Contribute to purple team exercises, incident investigations and cyber defence initiatives.
• Help improve internal testing playbooks, tooling and knowledge sharing.
• Maintain awareness of emerging threats and attacker techniques.

Skills

Penetration testing

Web applications

APIs

Infrastructure

Cloud security

Reporting

Communication

Education

CREST CPSA/CRT

OSCP

Job description

Salary: £60,000 - 60,000 per year

Requirements:

• Previous hands-on experience as a Pen Tester delivering assessments across web applications, APIs, infrastructure, and cloud environments.
• Strong understanding of common vulnerability classes, including the OWASP Top 10, authentication and authorisation flaws, input validation issues, and business logic vulnerabilities.
• Knowledge of penetration testing methodologies such as OWASP, PTES, and NIST, with practical experience using offensive security tools.
• Experience interpreting vulnerability scan results and validating security findings.
• Understanding of attacker tactics, techniques, and procedures, and how they apply in real-world scenarios.
• Ability to produce clear, well-structured technical reports with risk-based remediation advice.
• Holds, or is working towards, a recognised penetration testing certification such as CREST CPSA/CRT, OSCP, or equivalent experience.
• Strong communication skills with the ability to build relationships across technical and business teams.
• Analytical, organised, collaborative, and passionate about offensive security with a proactive approach to continuous learning.

Responsibilities:

• Deliver penetration testing across web applications, APIs, infrastructure, and cloud environments using recognised industry methodologies.
• Perform end-to-end testing activities including reconnaissance, exploitation, post-exploitation, validation, and reporting.
• Produce clear, risk-based penetration testing reports with practical remediation recommendations for both technical and non-technical stakeholders.
• Support the management of external penetration testing providers, reviewing test quality, validating findings, and ensuring consistency of deliverables.
• Assist with vulnerability assessments, risk prioritisation, remediation tracking, and re-testing activities.
• Work closely with development, engineering, and delivery teams to embed security testing into project lifecycles and advise on appropriate testing approaches.
• Contribute to purple team exercises, incident investigations, and wider Cyber Defence initiatives.
• Help improve internal testing methodologies, playbooks, tooling, and knowledge sharing across the team.
• Maintain awareness of emerging threats, vulnerabilities, attacker techniques, and offensive security tools.

Technologies:

• Cloud
• Support
• OWASP
• Security
• Web

More:

We are recruiting for a permanent Penetration Tester position in Horsham on a hybrid basis, offering a salary of up to £60,000. You will join our collaborative Cyber Defence team and work alongside experienced security professionals, with the opportunity to deliver hands-on security testing across web applications, APIs, infrastructure, and cloud environments. We offer excellent opportunities to develop your technical expertise, work with modern security tooling, and progress towards senior offensive security positions. This role also includes involvement in purple team exercises, remediation support, and broader security best practice initiatives across the organisation.

last updated 40 week of 2026