Senior Penetration Tester – Hybrid/Remote

Nomios; Oxford; Hybrid; GBP 52,000 - 72,000; Full time

Benefits offered by this job

Hybrid Working

Certification Sponsorship

Private health insurance

Job summary

Dionach by Nomios in the UK offers a flexible role with remote work or hybrid arrangements from our Oxford or Glasgow offices. You will visit client sites as needed and contribute to a dynamic information security practice focused on penetration testing and assurance services.

The ideal candidate has at least two years in penetration testing, holds CREST CRT/CCT or OSCP/OSWE style certifications, and can translate technical findings into clear reports.

Qualifications

• Certifications such as CREST CRT, CREST CCT, OSCP, OSWE, OSCE or equivalent.
• Minimum two years in penetration testing across network, web, internal tests and customer engagements.
• Proficient with Burp Suite Pro, Nessus and other industry tools.
• Eligibility to work in the UK and for security clearance.
• Excellent communication and report writing.

Responsibilities

• Conduct penetration tests across environments including web apps, APIs, Cloud and networks.
• Issue detailed reports outlining findings, risks and remediation.
• Translate complex findings into actionable insights for technical and non-technical audiences.
• Stay updated with the latest security trends, tools, and techniques.
• Participate in research and development projects.
• Focus on development by attaining industry recognised certifications.
• Be available for occasional on-call duties and on-site client engagements.

Skills

Communication

Independence

Analytical thinking

Stakeholder management

Tools

Burp Suite Pro

Nessus

Job description

Dionach by Nomios in the UK offers a flexible role with remote work or hybrid arrangements from our Oxford or Glasgow offices. You will visit client sites as needed and contribute to a dynamic information security practice focused on penetration testing and assurance services.

The ideal candidate has at least two years in penetration testing, holds CREST CRT/CCT or OSCP/OSWE style certifications, and can translate technical findings into clear reports.