Senior Penetration Tester — Remote/Hybrid, Hands-On

Employment International; Essex; Hybrid; GBP 90,000 - 130,000; Full time

Job summary

Employment International is seeking an experienced Senior Penetration Tester to support a cybersecurity engagement in the Essex area. The role is hybrid/remote with immediate start and Inside IR35 contract terms.

The successful candidate will perform hands-on validation beyond automated testing, analyze attack paths, and provide remediation guidance while communicating findings clearly to both technical and non-technical stakeholders.

Qualifications

• Hands-on security professional with expertise in validating vulnerabilities beyond automated tooling.
• Ability to reproduce vulnerabilities and demonstrate exploit paths.
• Strong ability to assess business and technical impact of findings.
• Experience identifying false positives and contextual vulnerability assessment.
• Proven ability to communicate findings to technical and non-technical stakeholders.

Responsibilities

• Validate and investigate findings from automated security testing platforms.
• Differentiate genuine vulnerabilities from false positives and edge cases.
• Reproduce and demonstrate vulnerabilities when required.
• Analyse attack paths and potential exploitation scenarios.
• Assess risk and impact to business and technology.
• Prioritise remediation based on risk and exploitability.
• Recommend remediation measures and compensating controls.
• Explain findings to technical teams and stakeholders.
• Produce high-quality technical reports and documentation.
• Apply manual testing to complement automated testing.
• Demonstrate strong commercial experience in penetration testing.

Skills

Penetration testing

Offensive security

Manual testing

Risk assessment

Vulnerability analysis

Report writing

Communication

Job description

Employment International is seeking an experienced Senior Penetration Tester to support a cybersecurity engagement in the Essex area. The role is hybrid/remote with immediate start and Inside IR35 contract terms.

The successful candidate will perform hands-on validation beyond automated testing, analyze attack paths, and provide remediation guidance while communicating findings clearly to both technical and non-technical stakeholders.