Web & Mobile Application Penetration Tester

Avord; United Kingdom; Remote; USD 120,000 - 160,000; Full time

Job summary

AVORD is seeking a Penetration Tester to join their expanding offensive security team. This role offers the chance to assess the security of various web and mobile platforms, identify vulnerabilities, and shape the application security testing approach. With a remote-first culture, you'll enjoy flexibility while contributing to impactful projects across diverse sectors.

Benefits

Flexible remote-first culture

Support for personal development and research

Work on diverse and challenging engagements

Qualifications

• Minimum of two years billable consulting experience.
• Strong interest in offensive security, particularly application testing.
• Self-motivated and comfortable in a remote-first, team-oriented environment.

Responsibilities

• Conduct penetration tests of web and mobile applications, identifying vulnerabilities.
• Evaluate authentication mechanisms, session management, and APIs.
• Create clear, well-structured reports for stakeholders.

Skills

Penetration Testing

Communication

Scripting

Application Security

Knowledge of OWASP Top 10

Education

OSCP or similar certification

Experience in web and mobile application security testing

Tools

Python

Bash

PowerShell

Industry-standard testing tools

Job description

Direct message the job poster from AVORD GROUP

This role is UK-based only, applicants must have full right to work and live in the UK. We are unable to provide visa sponsorship currently.

About Us

AVORD is expanding its offensive security team, and we’re looking for a passionate individual to grow our web and mobile application testing offering. As a growing team, this is an exciting opportunity to make a real impact, help shape our service offerings and contribute to the development of a dynamic offensive security practice.

AVORD operates as a remote-first company, offering flexibility in where you work while maintaining a collaborative team culture. Travel to client sites may be required when necessary if remote solutions are not possible.

Who We're Looking For

We’re looking for web and mobile application penetration testers with a minimum of two years billable consulting experience. You will have the opportunity to play a hands-on role in delivering high-quality assessments, building tools, and shaping how we approach application security testing.

Role Overview

As a Web and Mobile Application Tester, your primary responsibility will be assessing the security of web and mobile platforms across a wide range of clients and industries. You’ll help identify vulnerabilities, advise on remediation, and contribute to internal development efforts aimed at enhancing our capabilities.

Key Responsibilities

• Conduct penetration tests of web and mobile applications, identifying vulnerabilities and business logic issues.
• Evaluate the security of authentication mechanisms, session management, APIs, and client-side implementations.
• Perform dynamic and static testing of Android and iOS applications using industry-standard tools and techniques.
• Create clear, well-structured reports for both technical and non-technical stakeholders.
• Collaborate with peers to improve methodologies, toolkits, and reporting templates.
• Stay abreast of the latest trends in application vulnerabilities, mobile platform updates, and offensive testing techniques.
• Engage with clients to explain findings, suggest mitigations, and support secure development practices.
• Strong interest in offensive security, particularly application testing.
• Solid understanding of OWASP Top 10 and mobile app security principles.
• Competency with scripting (Python, Bash, or PowerShell) for automation or custom tooling.
• Excellent communication and report-writing skills.
• Self-motivated and comfortable in a remote-first, team-oriented environment.
• Experience testing Android and iOS applications (manual and automated analysis).
• Familiarity with mobile app reverse engineering, instrumentation, and hook-based testing.
• Previous exposure to API testing and modern web frameworks (e.g. React, Angular, etc.).
• Offensive certifications (e.g. OSCP, OSWE, OSWA, CPTS, OSEP).
• Active participation on platforms like Hack The Box or TryHackMe.

Why Join AVORD?

• Be part of a new, growing team where your ideas and contributions matter.
• Work on diverse and challenging engagements across multiple sectors.
• Help shape how web and mobile testing is delivered in a forward-thinking security consultancy.
• Enjoy the flexibility of a remote-first culture with support for personal development and research.

How to Apply

If you’re passionate about penetration testing and want to be part of a team where you can truly make a difference, we’d love to hear from you.

Seniority level

• Seniority level

  Entry level

Employment type

• Employment type

  Full-time

Job function

• Job function

  Information Technology

• Industries

  Security and Investigations

Referrals increase your chances of interviewing at AVORD GROUP by 2x

Get notified about new Penetration Tester jobs in United Kingdom.

Penetration Tester (OSCP or similar certified)

United Kingdom $120,000.00-$160,000.00 1 month ago

London, England, United Kingdom 1 month ago

Leeds, England, United Kingdom 2 months ago

Cardiff, Wales, United Kingdom 2 weeks ago

Greater Manchester, England, United Kingdom 4 days ago

Liverpool, England, United Kingdom 4 days ago

United Kingdom A$140,000.00-A$160,000.00 4 weeks ago

Warrington, England, United Kingdom 4 days ago

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.