Senior Penetration Tester

Phoenix; City of Edinburgh; On-site; GBP 60,000 - 65,000; Full time

Job summary

Phoenix Group is seeking a Senior Penetration Tester for their Threat Led Pen-Testing Team in Edinburgh. The role involves conducting penetration tests, leading projects, and collaborating with security teams. Ideal candidates will have extensive experience in penetration testing and relevant certifications, with a commitment to staying updated on industry trends.

Benefits

16% bonus up to 32%

Private medical cover

38 days annual leave

Excellent pension

12x salary life assurance

Career breaks

Income protection

3x volunteering days

Qualifications

• At least 2 years’ experience in Penetration Testing.
• Strong knowledge of industry-standard tools and frameworks.
• Ability to articulate business risks from vulnerabilities.

Responsibilities

• Conduct penetration tests on web applications and infrastructure.
• Lead tests from scoping to reporting.
• Collaborate with the Defensive team during Purple Team exercises.

Skills

Penetration Testing

Cyber Security

Reporting

Client Presentation

Infrastructure Security

Education

Crest CRT CCT APP/INF

OSCP

GPEN

Tools

C/C++

Python

Java

Job description

Job Description

We have an incredible opportunity to join us here at Phoenix Group as a Senior Penetration Tester to join our Threat Led Pen-Testing Team within our Information Security Department.

Job Type: Permanent

Location: This role could be based in either our Telford or Edinburgh Office, with hybrid working,

Flexible working: All of our roles are open to part-time, job-share and other types of flexibility. We will discuss what is important to you and balancing this with business requirements during the recruitment process. You can read more about Phoenix Flex here.

Closing Date: 05 June 2025

Salary and benefits: £60,000 to £65,000 plus 16% bonus up to 32%, private medical cover, 38 days annual leave, excellent pension, 12x salary life assurance, career breaks, income protection, 3x volunteering days and much more

Who are we?

We want to be the best place that any of our 6,600 colleagues have ever worked.

We’re the UK’s largest long-term savings and retirement business. We offer a range of products across our market-leading brands, Standard Life, SunLife, Phoenix Life and ReAssure. Around 1 in 5 people in the UK has a pension with us. We’re a FTSE 100 organisation that is tackling key issues such as transitioning our portfolio to net zero by 2050, and we’re not done yet.

The role

We are looking for a Senior Penetration Tester within our Threat led Pen-Testing team. In this role you will be conducting regular penetration tests ranging from web applications to infrastructure testing and purple teaming.

You Will Also

As a senior, lead penetration tests from scoping, through to delivery, reporting and debriefing.

Contribute to Quality Assurance of internally issued pen test reports.

Collaborate with the Defensive (Blue) team when conducting Purple Team exercises

Maintain knowledge of Cyber Security Threat Landscape, Attacks & Adversary TTPs

What are we looking for?

Essential

At least 2 years’ experience working in a full-time Penetration Testing role

Clear and demonstrable understanding of the Penetration Testing process

Willingness to stay up to date with the latest trends and attack paths

Wide range of testing experience

Strong Knowledge of commercial and the latest open-source industry standard tools

Strong knowledge of common infrastructure and security architectures

Understanding of the Cyber Kill Chain/MITRE ATT&CK framework

At least two of the following or equivalent certs/qualifications: Crest CRT CCT APP/INF, CRTO CRTL, OSCP OSEP OSWE, GPEN, HTB CPTS CBBH CAPE, PNPT

Strong demonstrated ability to take findings/vulnerabilities and articulate the actual business risk along with excellent reporting writing and client presentation skills to both technical and non-technical audiences

Desirable

Red Team/Purple Team experience

Software/Tool Development skills such as C/C++, C#, Python, Java, Go, Nim, Rust

We want to hire the whole version of you.

We are committed to ensuring that everyone feels accepted and welcome applicants from all backgrounds. If your experience looks different from what we’ve advertised and you believe that you can bring value to the role, we’d love to hear from you.

If you require any adjustments to the recruitment process, please let us know so we can help you to be at your best.

Please note that we reserve the right to remove adverts earlier than the advertised closing date. We encourage you to apply at the earliest opportunity.

Find out more about

Guide for Candidates: thephoenixgroup.pagetiger.com/guideforcandidates

Find or get answers from our colleagues: www.thephoenixgroup.com/careers/talk-to-us