Penetration Tester

Edinburgh Source: WhatJobs

See advert for pay

Overview

In this role, you help strengthen the Group’s security posture by delivering offensive security testing across multiple technologies. You will work within the Security Testing team in a large, regulated financial services environment. You plan, execute, and report on penetration engagements across web, API, mobile, infrastructure and cloud assets, contributing to scalable detection mechanisms. This is a collaborative, learning-driven opportunity in a mission-driven organisation that values expertise and impact. You’ll join a hybrid workplace and have a clear path to grow your skills in a high-stakes setting.

Pay / Benefits

Generous pension contribution up to 15%
Annual bonus award (subject to group performance)
Share schemes including free shares
Discounted shopping benefits
28 days’ holiday plus bank holidays
Wellbeing initiatives and parental leave policies

Responsibilities

Plan, execute and report on penetration testing engagements across web, API, mobile, infrastructure and cloud assets
Perform manual exploitation and post-exploitation activities
Review findings to ensure high-quality outputs
Contribute to design of repeatable detection mechanisms that identify recurring weaknesses at scale
Support delivery of offensive security testing across a wide range of technologies and platforms

Key requirements

Significant experience as a penetration tester
Strong experience in at least three areas: Web, API, Mobile, Infrastructure, Cloud (incl. cloud native) or AI testing
Security testing certifications such as CREST (CRT, CCT), OSCP, OSCE, GPEN or GXPN
Demonstrable knowledge of OWASP Top 10 vulnerabilities
Strong analytical and problem‑solving skills
Excellent communication skills with technical and non-technical stakeholders
Collaborative approach and commitment to continuous learning and improvement