Penetration tester

LA International; Croydon; On-site; GBP 100,000 - 125,000; Full time

Job summary

A cybersecurity firm based in the UK is looking for a Pen tester to conduct internal penetration testing and ensure compliance with security standards. This role involves collaborating with development teams and requires strong skills in penetration testing tools and cloud security. Candidates with SC clearance or previous high-level clearance are encouraged to apply.

Qualifications

• Hands-on experience with penetration testing tools.
• Strong understanding of OWASP, NIST SP 800-53, ISO 27001, and CIS Benchmarks.
• Experience testing End User Devices (EUDs) under operational constraints.

Responsibilities

• Conduct internal penetration testing across applications and infrastructure.
• Perform scenario-based testing aligned with SbD principles.
• Collaborate with teams to integrate findings into JIRA.

Skills

Penetration testing tools

Understanding of OWASP

Cloud security (AWS, Azure)

CI/CD pipeline integration

Education

Certifications: OSCP, CREST CRT, CTL Web/Inf, CEH

Tools

JIRA

SharePoint

Vulnerability management platforms

Job description

Role Overview

Role: Pen tester
Rate: Outside IR35
Location: 1-2 days a week onsite in Croydon
Duration: 6 months initially
SC clearance required

Key Responsibilities

• Conduct internal penetration testing across applications, infrastructure, and end user devices (EUDs), including POISE and MacBook platforms.
• Perform scenario-based testing aligned with SbD principles and DSA security non‑functional requirements.
• Collaborate with development teams to integrate findings into JIRA workflows for rapid remediation.
• Support the testing pipeline, including planning, execution, and reporting of penetration tests.
• Maintain compliance with NCSC guidance and Home Office security standards.

Desirable Qualifications

• Certifications: OSCP, CREST CRT, CTL Web/Inf, CEH.
• Experience with cloud security (AWS, Azure) and containerised environments.

Essential Skills & Experience

• Hands‑on experience with penetration testing tools.
• Strong understanding of OWASP, NIST SP 800‑53, ISO 27001, and CIS Benchmarks.
• Familiarity with Secure‑by‑Design principles and CI/CD pipeline integration.
• Experience testing EUDs under operational constraints (e.g. no destructive tools, CSOC coordination).
• Ability to interpret and apply security NFRs across diverse environments.
• Proficiency in JIRA, SharePoint, and vulnerability management platforms.

Attributes

• Strong stakeholder engagement and communication skills.
• Ability to work independently and as part of cross‑functional teams.
• Commitment to continuous improvement and knowledge sharing.

Security Clearance

Due to the nature and urgency of this post, candidates holding or who have held high level security clearance in the past are most welcome to apply. Successful applicants will be required to be security cleared prior to appointment which can take up to a minimum 10 weeks.