Penetration Tester in Cardiff

Yolk Recruitment Ltd; Cardiff; On-site; GBP 71,000 - 81,000; Full time

Benefits offered by this job

Hybrid working

Annual bonus

Excellent pension

Training & certification

OT environment exposure

Career progression

Job summary

Yolk Recruitment Ltd in South Wales is seeking a Penetration Testing Specialist to deliver infrastructure, web application and OT testing across enterprise environments.

You will plan and execute assessments, prioritise remediation with technical teams, and provide expert guidance on threats and security controls.

This hybrid role offers a competitive salary, annual bonus and a strong professional development path within a growing cyber security function.

Qualifications

• Commercial penetration testing experience.
• Infrastructure security testing experience.
• Knowledge of attacker TTPs and offensive security methodologies.
• Vulnerability assessment and security risk management.
• Experience with OT/ICS environments.
• Strong reporting and stakeholder communication skills.

Responsibilities

• Deliver infrastructure, web application and OT penetration testing.
• Assess OT and industrial environments with safe testing methodologies.
• Research new vulnerabilities and attacker techniques.
• Identify weaknesses across people, processes and technology, including social engineering.
• Produce clear technical reports with remediation guidance.
• Support vulnerability management and risk assessment.
• Coordinate with external penetration testing providers and internal teams.

Skills

Penetration testing

Infrastructure security

Application security

Threat hunting

Security reporting

Stakeholder communication

Job description

Penetration Testing Specialist South Wales Hybrid £71,000 - £81,000 + bonus + excellent benefits

The Role

Working as part of an established cyber security function, you'll be responsible for planning and delivering penetration testing across a diverse technology estate, including traditional IT infrastructure, business applications and Operational Technology.

Alongside hands-on testing, you'll work closely with technical teams and third-party security partners to prioritise remediation, improve security controls and provide expert guidance on emerging threats.

This is a varied technical role offering exposure to modern enterprise environments as well as industrial control systems and critical infrastructure.

What You'll Be Doing:

• Deliver infrastructure, web application and internal penetration testing
• Assess Operational Technology (OT) and industrial environments using safe testing methodologies
• Research new vulnerabilities, exploits and attacker techniques
• Identify weaknesses across people, processes and technology, including social engineering and information leakage
• Produce clear technical reports with practical remediation advice
• Support vulnerability management and technical risk assessment
• Manage external penetration testing providers where requiredWork closely with security, infrastructure and engineering teams to improve resilience

What We're Looking For:

You'll ideally have experience in several of the following:

• Commercial penetration testing experience
• Infrastructure and application security testing
• Strong knowledge of attacker TTPs and offensive security methodologies
• Vulnerability assessment and security risk management
• Experience working with or assessing OT,ICS or industrial environments
• Excellent technical reporting and stakeholder communication skills

What's on Offer?

• Competitive salary
• Annual bonus
• Excellent pension
• Hybrid working
• Ongoing technical training and certification support
• Exposure to enterprise-scale and Operational Technology environments
• Long-term career progression within a growing cyber security function

Why Apply?

This is an opportunity to work on security challenges that genuinely make a difference. You'll be testing and protecting systems that underpin critical services used by millions of people across the UK.

You'll join a collaborative cyber security team that values technical excellence, continuous learning and innovation, with opportunities to develop your offensive security expertise across both IT and OT environments.

If you're passionate about offensive security and want to apply your skills in an environment where every assessment has genuine impact, we'd love to hear from you.