Web App Security Penetration Tester II

NetSPI; United Kingdom; On-site; GBP 70,000 - 95,000; Full time

Job summary

NetSPI is seeking a Security Consultant II to conduct penetration testing of web applications and APIs, delivering clear reports and helping strengthen clients' security postures.

You will apply OWASP Top 10 knowledge, use tools such as Kali Linux, Burp Suite, Metasploit, and Nessus, and collaborate with client teams to drive improvements. Travel up to 5–10%; typical 8-hour days with occasional after-hours.

Qualifications

• Bachelor’s degree or higher required, with concentration in CS/Engineering/Math/IT preferred, or equivalent experience.
• 2–3 years of work experience in application penetration testing.
• Familiarity with offensive tools (e.g., Kali Linux, Burp Suite, Metasploit, Nessus).
• Knowledge of OWASP Top 10 and security frameworks.
• Working knowledge of Windows, Linux and MacOS.
• Ability to work independently and in a team.
• Proficient written and verbal communication skills.
• Willingness to travel up to 5–10%.
• 8-hour workday with occasional evenings or weekends.

Responsibilities

• Conduct penetration testing engagements on web applications and underlying APIs.
• Create, deliver, and collaborate on penetration testing reports in diverse client environments.
• Research and develop innovative techniques, tools, and methodologies for penetration testing services.
• Perform administrative tasks related to day-to-day consulting activities.

Skills

Penetration testing

Security reporting

Client communication

Team collaboration

Mentoring (preferred)

Education

Bachelor’s degree or higher (CS/Engineering/IT) or equivalent experience

Tools

Kali Linux

Burp Suite

Metasploit

Nessus

Job description

NetSPI is seeking a Security Consultant II to conduct penetration testing of web applications and APIs, delivering clear reports and helping strengthen clients' security postures.

You will apply OWASP Top 10 knowledge, use tools such as Kali Linux, Burp Suite, Metasploit, and Nessus, and collaborate with client teams to drive improvements. Travel up to 5–10%; typical 8-hour days with occasional after-hours.