Senior Security Tester — Penetration & Risk Expert

Sainsbury's; Greater London; Hybrid; GBP 80,000 - 110,000; Full time

Benefits offered by this job

Colleague discount across brands

Holiday allowance

Bonus scheme

Pension plan

Season ticket loans

Private healthcare

Job summary

Sainsbury's Tech is seeking an expert Security Penetration Tester to safeguard our systems and customers. You will conduct web and infrastructure testing, generate detailed reports, and contribute to security improvements across the business.

You’ll work within a collaborative team, applying OWASP methodologies and industry best practices, with opportunities to mentor colleagues and expand red/purple team activities. Flexible working is supported within a dynamic retail tech environment.

Qualifications

• Extensive experience performing Web Application penetration testing.
• Extensive knowledge of OWASP vulnerabilities, tools and methodologies.
• Strong experience performing Infrastructure penetration tests against Windows & Linux environments.
• Strong experience performing build reviews against Windows & Linux hosts, MacOS a bonus.
• Strong technical writing ability to write penetration test reports for technical and non-technical audiences.
• Strong reporting QA skills in security testing outputs.
• Ability to work autonomously with minimal supervision and deliver on time.
• Understanding of security best practices across physical and logical information systems.
• At least one of OSWE, OSCP, GIAC or CREST certifications.

Responsibilities

• Scope penetration testing for internal and external facing systems.
• Take ownership and perform a wide range of penetration tests and provide detailed reports.
• Provide expert feedback in forums related to vulnerabilities and processes.
• QA reviews on in-house reports and vulnerability write-ups.
• Improve vulnerability database write-ups to increase report quality.
• Mentor team members and assist in knowledge sharing.
• Perform Purple Team activities and contribute to Red Team capabilities.

Skills

Web app pen testing

OWASP knowledge

Infra pentesting

Build reviews

Technical writing

QA reporting

Independent worker

Security best practices

Certifications OSWE

Purple Team

Job description

Sainsbury's Tech is seeking an expert Security Penetration Tester to safeguard our systems and customers. You will conduct web and infrastructure testing, generate detailed reports, and contribute to security improvements across the business.

You’ll work within a collaborative team, applying OWASP methodologies and industry best practices, with opportunities to mentor colleagues and expand red/purple team activities. Flexible working is supported within a dynamic retail tech environment.