Security tester

LA International; City Of London; Remote; GBP 60,000 - 80,000; Full time

Job summary

A leading ICT Recruitment Consultancy in the UK is seeking a Security Tester to conduct security testing and mentor team members. This role requires strong knowledge of security standards and SAST/DAST tools, with remote working options available. Candidates should have or be eligible for SC clearance. The position offers a duration of 6 months initially.

Qualifications

• Strong understanding of security standards including OWASP, NIST SP 800-53, ISO 27001, and CIS Benchmarks.
• Experience with SAST/DAST tools and Cloud Security platforms (AWS, Azure).
• Familiarity with Secure-by-Design principles and organisational security policies.
• Experience with penetration testing, risk assessment, and compliance testing.
• Proficiency in tools such as JIRA, SharePoint, and vulnerability management platforms.

Responsibilities

• Conduct Security Testing using SAST and DAST tools.
• Collaborate with Cyber Security Managers and Governance teams.
• Mentor and upskill team testers in application security testing.
• Track and report on security metrics and KPIs.
• Integrate security testing into CI/CD pipelines.

Job description

Role: Security tester (manual)
Rate: Outside IR35
Location: Remote with occasional travel to Croydon
Duration: 6 months initially
SC clearance or eligible

The Security Tester will play a key role in delivering robust application security testing aligned with Secure-by-Design (SbD) principles and compliance frameworks such as NIST, CAF, and CAT. This role supports the strategic aim to scale enterprise security testing capabilities, reduce outsourcing reliance, and embed security into the software development lifecycle.

Key Responsibilities

• Conduct Security Testing using SAST and DAST tools
• Collaborate with Cyber Security Managers and Governance teams to ensure alignment with organisational security policies and standards
• Mentor and upskill team testers in application security testing and automation
• Track and report on security metrics and KPIs, including vulnerability trends and remediation outcomes
• Integrate security testing into CI/CD pipelines, supporting shift-left strategies and DevSecOps practices

Required Skills & Experience

• Strong understanding of security standards including OWASP, NIST SP 800-53, ISO 27001, and CIS Benchmarks
• Experience with SAST/DAST tools and Cloud Security platforms (AWS, Azure)
• Familiarity with Secure-by-Design principles and organisational security policies
• Experience with penetration testing, risk assessment, and compliance testing
• Proficiency in tools such as JIRA, SharePoint, and vulnerability management platforms

Desirable Attributes

• Ability to interpret and apply OWASP and NIST security principles across diverse project environments
• Strong stakeholder engagement and communication skills
• Experience in developing deployment checklists and decision trees for secure tool usage
• Certifications such as CREST CRT, OSCP, CEH, or SANS are highly desirable

Due to the nature and urgency of this post, candidates holding or who have held high level security clearance in the past are most welcome to apply. Please note successful applicants will be required to be security cleared prior to appointment which can take up to a minimum 10 weeks. LA International is a HMG approved ICT Recruitment and Project Solutions Consultancy, operating globally from the largest single site in the UK as an IT Consultancy or as an Employment Business & Agency depending upon the precise nature of the work, for security cleared jobs or non-clearance vacancies, LA International welcomes applications from all sections of the community and from people with diverse experience and backgrounds.