Security Tester | Contract (12 Months+) | SC Clearance Required (Active/Lapsed) | Inside IR35

WeDoTech; West of England; On-site; GBP 92,000 - 129,000; Full time

Job summary

WeDoTech is seeking an experienced Security Tester for a 12-month contract. The role is remote-first within the UK, focusing on hands-on security testing across applications and APIs to ensure security standards and regulatory requirements are met.

You will work with engineering and testing teams, document findings, and support remediation throughout the delivery lifecycle. SC clearance is required or may be active/lapsed.

Qualifications

• Strong hands-on security testing experience.
• Experience testing across enterprise applications.
• Solid understanding of OWASP top 10 and secure coding practices.
• Experience testing web applications and APIs.
• Ability to document findings clearly and communicate risks effectively.

Responsibilities

• Plan and execute security testing activities across applications, APIs and supporting systems.
• Identify, assess and document security vulnerabilities and risks.
• Perform hands-on security testing using manual and automated techniques.
• Test application and system security controls against defined requirements.
• Work with development and engineering teams to communicate findings and support remediation.
• Retest vulnerabilities after remediation and produce security testing reports.
• Support security assurance activities throughout the delivery lifecycle.
• Collaborate with wider testing teams to integrate security perspectives.

Skills

Security testing

Application security

OWASP

Web apps

APIs

Vulnerability assessment

Reporting

Stakeholder engagement

Job description

Security Tester | Contract (12 months+) | SC Clearance Required (Active/Lapsed) | Inside IR35

Location: Remote-first, UK

Contract: Initial 12 months (potential to extend)

Clearance: SC Clearance Required (Active/Lapsed)

We are looking for an experienced Security Tester to support a major programme within a complex and highly regulated environment.

The successful consultant will bring strong hands-on security testing experience, with the ability to identify vulnerabilities, assess security controls and work closely with technical teams to ensure applications and systems meet required security standards.

You will work alongside engineering, development and wider testing teams, providing security testing expertise throughout the delivery lifecycle.

Key Responsibilities

• Plan and execute security testing activities across applications, APIs and supporting systems.
• Identify, assess and document security vulnerabilities and risks.
• Perform hands-on security testing using appropriate manual and automated techniques.
• Test application and system security controls against defined requirements.
• Work closely with development and engineering teams to communicate findings and support remediation.
• Retest vulnerabilities and security issues following remediation.
• Produce clear security testing documentation and reports.
• Support security assurance activities throughout the delivery lifecycle.
• Work collaboratively with wider functional, integration and automation testing teams.

Essential Experience

• Strong hands-on experience within Security Testing / Application Security Testing.
• Experience conducting security and vulnerability testing across enterprise applications.
• Strong understanding of common application security vulnerabilities and OWASP principles.
• Experience testing web applications and APIs.
• Experience using relevant security testing and vulnerability assessment tools.
• Ability to identify vulnerabilities, assess their potential impact and recommend remediation.
• Experience producing clear security testing reports and documentation.
• Experience working within complex enterprise environments.
• Strong stakeholder engagement and communication skills.

Desirable Experience

• Experience working within defence, government or UK public-sector programmes.
• Experience within highly regulated or security-critical environments.
• Knowledge of secure software development and DevSecOps practices.
• Experience working alongside Agile engineering and testing teams.
• Relevant security testing certifications are advantageous but not essential