Junior Web App & Cloud Security Pen Tester

OUP; Hinoba-an; On-site; PHP 986,000 - 1,380,000; Full time

Job summary

Oxford University Press (OUP) is seeking a Cyber Security & Resilience Testing Specialist to strengthen its security posture across web apps, APIs, cloud services, and mobile platforms. You will perform testing, identify vulnerabilities, and deliver remediation recommendations to protect critical systems worldwide.

The role emphasizes collaboration with development, infrastructure, and business teams, contributing to secure software delivery and resilient operations across the organisation.

Qualifications

• Demonstrable experience conducting manual and automated web application penetration testing.
• Strong understanding of offensive security principles and vulnerability assessment methodologies.
• Deep knowledge of the OWASP Top 10 and experience identifying, validating, and reporting vulnerabilities across these categories.
• Experience testing modern applications built using technologies such as: .NET / ASP.NET, Java / Spring, Node.js, Python frameworks, PHP frameworks, React/Angular/Vue.js and other JavaScript technologies, REST and GraphQL APIs, SPAs.
• Experience assessing API security.
• Strong communication skills with the ability to present complex technical concepts to both technical and non-technical audiences.
• Experience using industry-recognised security tools, including: Kali Linux, Nmap, Burp Suite Professional.
• Experience with tools such as OWASP ZAP, JWT Toolkits, ffuf, GoBuster, Feroxbuster, Metasploit, CrackMapExec/NetExec, WPScan, CMSMap, SQLMap, Nuclei, and Wafw00f/LBD.
• Experience conducting mobile application security testing.
• Degree in Computer Science, Information Security, or a related discipline.
• Relevant industry certifications such as OSCP, CEH, CISSP, or equivalent.

Responsibilities

• Conduct penetration testing against web applications, APIs, cloud-native services, internal networks, and supporting infrastructure.
• Identify, exploit, validate, and document security vulnerabilities, including those aligned to the OWASP Top 10 framework.
• Perform SAST and DAST to identify coding weaknesses and runtime vulnerabilities.
• Assess API security, including authentication, authorization, and data exposure risks.
• Conduct security assessments for mobile applications across iOS and Android platforms.
• Produce high-quality technical reports with clear findings, risk analysis, and remediation recommendations.
• Collaborate with technical and business stakeholders to improve security controls and resilience across the organisation.
• Support the continuous improvement of security testing processes, standards, and methodologies.

Skills

Penetration testing

OWASP Top 10

Offensive security

API security testing

Mobile app security testing

Security reporting

Security tooling

Education

Degree in Computer Science / Information Security

Tools

Kali Linux

Nmap

Burp Suite Professional

OWASP ZAP

Metasploit

Nuclei

Job description

Oxford University Press (OUP) is seeking a Cyber Security & Resilience Testing Specialist to strengthen its security posture across web apps, APIs, cloud services, and mobile platforms. You will perform testing, identify vulnerabilities, and deliver remediation recommendations to protect critical systems worldwide.

The role emphasizes collaboration with development, infrastructure, and business teams, contributing to secure software delivery and resilient operations across the organisation.