Penetration Tester

DGH Recruitment Limited; Greater London; On-site; GBP 60,000 - 100,000; Full time

Job summary

DGH Recruitment Limited is recruiting on behalf of a leading client in the Accountancy industry for a Penetration Tester to join their London team. The role focuses on delivering testing across web apps, APIs and networks, defining scope with clients and applying manual and tool-assisted techniques.

The successful candidate will work with recognised methodologies and frameworks, produce high-quality deliverables, and communicate findings to technical and non-technical stakeholders, with

Qualifications

• Experience delivering client-facing penetration tests across web apps, APIs and networks.
• Strong manual testing with use of automated tools.
• Knowledge of web/app vulnerabilities, TCP/IP, Windows and Linux security.

Responsibilities

• Lead and support penetration testing engagements across web applications, APIs, and networks.
• Define objectives, scope, and rules of engagement with clients.
• Apply manual and tool-assisted testing using Kali Linux, Burp Suite, Nmap.
• Deliver Cyber Essentials Plus assessments including scoping and remediation verification.
• Conduct vulnerability, cloud security, and CIS benchmark reviews.
• Produce clear deliverables and present findings to technical and non-technical stakeholders.

Skills

Penetration testing

Web/API security

Scripting

Tools

Kali Linux

Burp Suite

Nmap

Qualys/Nessus

Job description

Penetration Tester

DGH Recruitment are currently recruiting on behalf of a leading client in the Accountancy industry who require a Penetration Tester to join the firm in London.

Key Responsibilities

• Lead and support penetration testing engagements across web applications, APIs, and internal and external network infrastructure.
• Work with clients to define objectives, agree scope and rules of engagement, and plan testing that meets their assurance needs.
• Apply manual and tool-assisted testing techniques aligned with recognised methodologies and frameworks, including the OWASP Web Security Testing Guide, PTES, and MITRE ATT&CK.
• Deliver Cyber Essentials Plus assessments, including scoping, conducting the required technical tests, verifying remediation and supporting clients through to certification in line with current NCSC and IASME scheme requirements.
• Deliver wider technical security assessments, including vulnerability assessments, cloud security reviews, and build and configuration reviews against CIS Benchmarks and vendor hardening guidance.
• Produce clear, high-quality deliverables and present findings to technical and non-technical stakeholders.

Required Skills

• Professional experience delivering client-facing penetration tests across web applications, APIs, and internal or external network infrastructure, independently and/or as part of a team.
• Strong manual testing capability and sound judgement in selecting and using automated tools, with practical experience of Kali Linux, Burp Suite, Nmap, and Qualys or Nessus.
• Familiarity with recognised penetration testing methodologies and frameworks, together with the ability to script or automate tasks using Python, PowerShell, Bash, or a comparable language.
• Good knowledge of modern web architecture, common web and API vulnerabilities, TCP/IP, Windows and Linux security, and Active Directory and Microsoft Entra ID attack paths.
• Experience delivering, or the ability to deliver, wider technical assessments such as vulnerability assessments and configuration reviews against recognised benchmarks such as CIS.
• Working knowledge of the Cyber Essentials and Cyber Essentials Plus schemes. Existing assessor experience is beneficial; appropriate training will be provided where required.

Penetration Tester

In accordance with the Employment Agencies and Employment Businesses Regulations 2003, this position is advertised based upon DGH Recruitment Limited having first sought approval of its client to find candidates for this position.