Application Penetration Tester

Tata Consultancy Services; Letterkenny; Hybrid; EUR 55,000 - 85,000; Full time

Benefits offered by this job

Pension

Health care

Life assurance

Laptop provided

Employee discounts

Health & wellness initiatives

Sports events sponsorship

Job summary

Tata Consultancy Services in Letterkenny, Co. Donegal, invites experienced Application Penetration Testers to join its Attack Surface Management team on a permanent, onsite role with hybrid flexibility after training.

You will perform manual testing of web, mobile, and API applications, scope with clients, deliver risk reports, retest fixes, and help advance security practices across projects.

Qualifications

• Several years of hands-on application penetration testing experience.
• Strong understanding of OWASP WSTG methodologies for web apps.
• Ability to assess risks with CVSS scoring and communicate remediation options.
• Proven capability to deliver clear, actionable remediation guidance.
• Experience working with Burp Suite Pro, Jira, ServiceNow and DAST tools.

Responsibilities

• Perform in-depth manual application pentesting of web, mobile apps and APIs.
• Lead scoping conversations with clients to understand scope and requirements.
• Prepare reports detailing vulnerabilities, risks and remediation actions.
• Retest identified issues after remediation to confirm fixes are effective.
• Maintain client trust with regular communication and expert remediation guidance.
• Share innovative ideas to improve testing methodologies and processes.
• Research latest security threats and stay ahead of risks.

Skills

Application Penetration Testing

OWASP WSTG knowledge

Remediation guidance

Clear client communication

Stakeholder management

Tools

Burp Suite Pro

Jira

ServiceNow

DAST Scanners

Job description

Job Type: Permanent

Location: Letterkenny, Co. Donegal (Onsite - with flexibility on hybrid model once training has been completed).

Join a global tech leader right here in Donegal. With over 850 employees and a state-of-the-art global delivery centre, we’re proud to offer world-class career opportunities without having to leave the Northwest. Recognised as Workplace of the Year by the Letterkenny Chamber, we foster a culture of continuous learning, innovation, and respect. Our people are at the heart of everything we do – collaborating across teams, geographies, and disciplines to drive real change for clients around the world. Be part of something global, grounded in Donegal.

Careers at TCS: It means more

TCS is a purpose-led transformation company, built on belief. We do not just help businesses to transform through technology. We support them in making a meaningful difference to the people and communities they serve - our clients include some of the biggest brands in the UK and worldwide. For you, it means more to make an impact that matters, through challenging projects which demand ambitious innovation and thought leadership.

The Role

Join the customer’s Attack Surface Management team as an experienced Application Penetration Tester. Our client, a major U.S.-based financial services group, is expanding its security capabilities and seeks a professional who can not only identify vulnerabilities but also guide development teams through effective remediation.

Your responsibilities:

• Perform in-depth manual Application Penetration Testing of web, mobile applications and APIs (REST/SOAP).
• Conduct scoping conversations with the client to thoroughly understand the application, its functionality, and specific scope requirements to ensure accurate and effective penetration testing.
• Prepare comprehensive reports detailing vulnerabilities, risks, and remediation recommendations, and effectively present these findings to the client to ensure clear understanding and actionable outcomes.
• Retest identified vulnerabilities after remediation to verify the effectiveness of implemented fixes, ensuring all issues are fully resolved and meet security standards.
• Build and maintain trust with the client by providing consistent communication, expert guidance on remediation strategies, and ongoing support throughout the entire penetration testing process.
• Actively share innovative ideas and collaborate with team members to enhance penetration testing methodologies, improve processes, and drive continuous improvement in security practices.
• Research latest and emerging security threats

Your Profile

Essential skills/knowledge/experience:

• A few years industry experience in Application Penetration Testing such as web, mobile & API.
• Strong understanding of the OWASP WSTG, with the ability to effectively test web application vulnerabilities using its methodologies, ensuring comprehensive identification and mitigation of security risks
• Proficient in using the CVSS (Common Vulnerability Scoring System) calculator to accurately assess and prioritize risks based on severity and potential impact.
• Demonstrated expertise in communicating clear, actionable remediation advice to address identified issues effectively and support informed decision-making for the client.
• Familiar working with multiple technologies such as Burp Suite professional, Jira & ServiceNow, DAST Scanners.
• Ability to deliver several key pieces of work at pace, whilst maintaining high standards
• Excellent communication and interpersonal skills, with the ability to clearly articulate vulnerabilities, risks, and remediation strategies to diverse stakeholders, including both technical and non-technical audiences
• Proven ability to write clear, structured, and evidence-based reports to effectively communicate findings and recommendations to the client.
• Experienced in managing and coordinating tasks across multiple programs.

Desirable skills/knowledge/experience:

• Have experience in manual Application Penetration Testing of IOS & Android applications.
• Completed industry certifications such as Burp Suite Certified Practitioner (BSCP), HTB Certified Penetration Testing Specialist (HTB CPTS), Offensive Security Certified Professional (OSCP)
• Experience in AI penetration testing, including security assessments of AI-driven applications such as chatbots, following best practices outlined in the OWASP AI Testing Guide.
• Network/Infrastructure based penetration testing
• Development experience
• Experience working within the financial service industry
• Japanese, Spanish or Portuguese language skills an advantage

Rewards & Benefits

TCS is consistently voted a Top Employer in the UK and globally. Our competitive salary packages feature pension, health care, life assurance, laptop and access to extensive training resources and discounts within the larger Tata network.

We offer health & wellness initiatives and sports events; we are the proud sponsor of the London Marathon and partner with our local communities in Ireland.

Diversity, Inclusion and Wellbeing

Tata Consultancy Services UK&I is committed to meeting the accessibility needs of all individuals in accordance with the Ireland Employment Equality Acts 1998-2011 (as amended) and the Equal Status Acts 2000-2012 (as amended).

We welcome and embrace diversity in race, nationality, ethnicity, disability, neurodiversity, gender identity, age, physical ability, gender reassignment, sexual orientation. We are a disability inclusive employer and encourage disabled people to apply for this role.

As a Disability Confident Employer, we offer an interview to applicants with disabilities or long-term conditions who meet the minimum criteria for the role. Please email us at if you would like to opt in.

Due to the high volume of applications, we will be unable to contact each applicant individually on the status of their application. If you have not received a direct response within 30 days, then it should be deemed unsuccessful on this occasion.