Security Testing Engineer - CREST Certified

Tlscontact; United States; Remote; USD 94,000 - 121,000; Full time

Job summary

TLScontact is seeking a Security Testing Engineer (Pen Tester) to safeguard our visa and immigration platforms and applications. This role focuses on offensive security testing, vulnerability analysis, and secure development, collaborating with software engineering teams to reduce risk.

You will work to integrate security into the CI/CD pipeline, align with OWASP, NIST, and CIS controls, and ensure compliance with PCI DSS, GDPR, HIPAA, and SOC 2.

Qualifications

• Experience in penetration testing and security testing.
• Hands-on with security tools and scripting languages.
• Experience with CI/CD tools.
• Understanding of secure software development lifecycle.
• English fluency (B2 level or higher).
• CREST Registered certification required.

Responsibilities

• Perform offensive security testing (penetration testing) on web applications and services.
• Conduct manual and automated code analysis to detect vulnerabilities and non-trivial security issues.
• Support technical teams in resolving vulnerabilities and strengthening security measures.
• Develop and maintain security testing methodologies aligned with OWASP, NIST, and CIS Controls.
• Integrate security testing into the CI/CD pipeline to detect and fix vulnerabilities early.
• Ensure compliance with industry security regulations (PCI DSS, GDPR, HIPAA, SOC 2).
• Use PTES, MITRE ATT&CK, and CVSS scoring for standardized security assessments.
• Collaborate with developers and QA teams to build comprehensive security test strategies.
• Provide detailed security reports, analyze trends, and propose continuous improvements.

Tools

Burp Suite

OWASP ZAP

Metasploit

Checkmarx

Job description

Security Testing Engineer (Pen Tester) – CREST Certified

Location: Remote, UK
Job Type: Full-time/Permanent
Reporting to: Software Engineering Manager (QA Automation)

Join TLScontact – Secure the Future of Global Visa & Immigration Services!

At TLScontact, we specialise in delivering seamless and secure visa and immigration solutions for governments and travellers worldwide. Security is at the heart of our digital transformation, and we are looking for a Security Testing Engineer (Pentester) to help safeguard our platforms and applications.

If you are passionate about penetration testing, vulnerability analysis, and secure development, this role is perfect for you! You will work closely with our software engineering teams to identify security risks, implement best practices, and enhance the security posture of our digital services.

Your Mission

• Perform offensive security testing (penetration testing) on web applications and services.
• Conduct manual and automated code analysis to detect vulnerabilities and non-trivial security issues.
• Support technical teams in resolving vulnerabilities and strengthening security measures.
• Develop and maintain security testing methodologies aligned with OWASP, NIST, and CIS Controls.
• Integrate security testing into the CI/CD pipeline to detect and fix vulnerabilities early.
• Ensure compliance with industry security regulations (PCI DSS, GDPR, HIPAA, SOC 2).
• Use PTES, MITRE ATT&CK, and CVSS scoring for standardized security assessments.
• Collaborate with developers and QA teams to build comprehensive security test strategies.
• Provide detailed security reports, analyze trends, and propose continuous improvements.

What You Bring to TLScontact

• Experience in penetration testing and security testing.
• Hands-on expertise with security tools (Burp Suite, OWASP ZAP) and scripting languages (Python, Bash, PowerShell, Metasploit, Checkmarx).
• Experience with CI/CD tools (GitLab, Jenkins, GitHub Actions).
• Deep understanding of secure software development lifecycle (SDLC).
• Strong problem-solving skills with high attention to detail.
• Excellent communication skills to collaborate with technical and non-technical teams.
• English fluency (B2 level or higher).
• CREST Registered certification required.

Why TLScontact?

• Global Impact – Work on security solutions that protect sensitive visa and immigration data.
• Innovative Environment – Be part of a tech-driven organization committed to security and excellence.
• Career Growth – Access ongoing learning opportunities, certifications, and professional development.
• Collaborative Culture – Join a diverse and skilled team that values knowledge-sharing and teamwork.
• Competitive Package – Enjoy an attractive salary and benefits package.

At TLScontact, we are proud to foster an inclusive work environment where diversity is celebrated

and valued. We are committed to equal employment opportunities and pay parity, regardless of

factors like race, religion, gender, or disability.

Please note that all successful applicants will be required to undergo an enhanced level

Criminal Record disclosure.

Please note TLScontact is unable to sponsor those without permission to work in the UK, therefore any applicant must already have permission to work in the UK.

All successful applicants will need to apply for and pass a Criminal Record disclosure -

Under The Immigration, Asylum and Nationality Act 2006, you must have the right to

work in the United Kingdom to be considered for this role.

Please find below our Privacy Notice for Recruits: