Principal Penetration Tester — Hybrid, AWS & Purple Team

Addition

Watford

Hybrid

GBP 100,000 - 140,000

Full time

10 days ago

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Benefits offered by this job

Hybrid working

Company bonus scheme

Matched pension contributions 8.5%

Private healthcare

Annual wellness allowance

Life days

Volunteering opportunities

Job summary

Addition is working with a large, highly regulated organisation on digital transformation and seeks a Principal Penetration Tester in Watford. Hybrid working, competitive salary with bonus and benefits.

You will lead testing across web apps, APIs and cloud environments (AWS) with a focus on Spring Boot microservices. Role involves threat-informed testing, purple team exercises, and coaching security colleagues for improved resilience.

Qualifications

Hands-on penetration testing across web apps, APIs and service-based architectures.
Deep Java/Spring Boot backend expertise.
Experience with AWS-hosted apps and cloud security controls.
Ability to communicate technical risks to technical and non-technical stakeholders.

Responsibilities

Lead advanced penetration testing across web applications, APIs and backend services.
Assess authentication, authorisation, session management, APIs, business logic and data flows.
Review SAST/DAST findings and prioritise genuine risks for engineers.
Translate architecture and threat models into practical testing strategies.
Support release assurance with remediation guidance and risk metrics.
Develop internal testing standards, playbooks and methodologies.
Collaborate with external security partners to drive improvements.