Remote UK Penetration Tester — Client-Facing Security Expert

Cognisys; United Kingdom; Remote; GBP 55,000 - 90,000; Full time

Benefits offered by this job

Annual leave 25 days + holidays

Birthday leave

Health & wellbeing plan

£2,000 annual training budget

Referral bonus up to £2,000

Job summary

Cognisys is a global cybersecurity company delivering Penetration Testing, GRC consulting and managed security services. We are growing rapidly and seek a Pen Tester to deliver security assessments for clients across networks, web apps, APIs, mobile apps and cloud environments.

You will combine automated tools with manual testing, communicate findings effectively to technical and non-technical stakeholders, and contribute to ongoing security improvements for client engagements.

Qualifications

• Hands-on penetration testing and security assessments experience.
• Experience using vulnerability scanning tools alongside manual testing.
• Ability to explain findings clearly to both technical and non-technical stakeholders.
• Strong understanding of offensive security methodologies, tools and techniques.
• Experience across networks, web apps, APIs, mobile apps, and cloud environments.

Responsibilities

• Conduct penetration testing across networks, web apps, APIs, mobile apps and cloud environments.
• Simulate real-world attack scenarios to assess client resilience.
• Produce high-quality technical reports with evidence and remediation recommendations.
• Present findings to clients and help prioritise remediation.
• Collaborate with the wider cybersecurity team and share knowledge.

Skills

Penetration testing

Security assessments

Vulnerability scanning

Report writing

Client communication

Offensive security

Tools

Nessus

Burp Suite

Metasploit

OWASP ZAP

Job description

Cognisys is a global cybersecurity company delivering Penetration Testing, GRC consulting and managed security services. We are growing rapidly and seek a Pen Tester to deliver security assessments for clients across networks, web apps, APIs, mobile apps and cloud environments.

You will combine automated tools with manual testing, communicate findings effectively to technical and non-technical stakeholders, and contribute to ongoing security improvements for client engagements.