Web & Cloud Penetration Tester — Security & Resilience

OUP; Hinoba-an; On-site; PHP 789,000 - 1,577,000; Full time

Job summary

Oxford University Press is seeking a Cyber Security & Resilience Testing Specialist to defend digital platforms, services, and data worldwide. You will lead comprehensive penetration testing across web apps, APIs, cloud services, and mobile applications, reporting findings and guiding remediation.

You will work with a skilled security team, contribute to security testing methodologies, and help strengthen OUP's cyber resilience while supporting education-driven initiatives.

Qualifications

• Experience conducting manual and automated penetration testing of modern web applications and supporting infrastructure.
• Strong knowledge of application security principles and vulnerability assessment techniques.
• Deep understanding of the OWASP Top 10 and experience identifying, exploiting, validating, and reporting vulnerabilities.
• Experience with technologies such as .NET/ASP.NET, Java/Spring, Node.js, Python, PHP, and modern JS frameworks (React, Angular, Vue).
• Experience performing API security assessments and testing across REST/GraphQL.
• Excellent written and verbal communication; able to present findings to technical and non-technical audiences.

Responsibilities

• Conduct comprehensive penetration testing across web apps, APIs, cloud-native services, mobile apps, and supporting infra.
• Identify, exploit, validate, and document security vulnerabilities with OWASP alignment.
• Perform SAST and DAST to detect insecure coding and runtime issues.
• Assess API security including authentication, authorization, and data exposure risks.
• Produce high-quality reports with findings and actionable remediations.
• Collaborate with dev, infra, and business teams to improve security outcomes.

Skills

Penetration testing

OWASP Top 10

SAST/DAST

API security testing

Mobile security testing

Security reporting

Collaboration

Threat analysis

Education

Degree in Computer Science or Information Security

Tools

Kali Linux

Nmap

Burp Suite Pro

OWASP ZAP

JWT Toolkits

ffuf

Dirb/GoBuster/Feroxbuster

Metasploit

CrackMapExec/NetExec

WPScan

CMSMap

SQLMap

Nuclei

Wafw00f/LBD

Job description

Oxford University Press is seeking a Cyber Security & Resilience Testing Specialist to defend digital platforms, services, and data worldwide. You will lead comprehensive penetration testing across web apps, APIs, cloud services, and mobile applications, reporting findings and guiding remediation.

You will work with a skilled security team, contribute to security testing methodologies, and help strengthen OUP's cyber resilience while supporting education-driven initiatives.