Penetration Tester – UK
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Penetration Tester conducting network, application, API, mobile, and cloud security assessments for Cognisys, a global cybersecurity company. Delivering client-facing findings, reports, and remediation guidance.
Responsibilities:
- Deliver and support security assessments across networks, applications and cloud infrastructure
- Conduct penetration testing across networks, web applications, APIs, mobile applications and cloud environments
- Simulate real-world attack scenarios to assess client resilience against cyber threats
- Use automated vulnerability scanning tools and manual testing and exploitation techniques
- Identify, analyse and exploit security vulnerabilities across diverse client environments
- Assess technical security controls and identify opportunities for improvement
- Work directly with clients throughout penetration testing engagements
- Present findings and recommendations clearly and professionally
- Explain the business and technical impact of vulnerabilities to technical and non-technical stakeholders
- Support clients in understanding and prioritising remediation activities
- Produce high-quality technical reports documenting vulnerabilities, exploitation techniques, evidence, risk and remediation recommendations
- Collaborate with the wider cybersecurity team and share knowledge and lessons learned
- Contribute to the development of penetration testing methodologies and ways of working
- Manage testing, documentation and deliverables effectively
- Maintain current knowledge of emerging vulnerabilities, attack techniques and industry developments
Requirements:
- Hands-on experience conducting penetration testing and security assessments
- Experience using vulnerability scanning tools alongside manual testing and exploitation techniques
- Strong understanding of offensive security methodologies, tools and techniques
- Strong grasp of assessing and breaking technical security controls
- Experience in one or more of: network penetration testing, web application testing, API testing, mobile application testing, cloud security testing
- Strong analytical and problem-solving skills
- Excellent written and verbal communication skills
- Ability to communicate technical vulnerabilities and risks in a clear, non-technical format
- Strong client engagement skills and professional approach to customer service
- Ability to manage workload effectively and deliver work to agreed deadlines
- Proactive approach to learning and keeping up to date with offensive security developments
- Industry-recognised certifications preferred, including OSCP, CPSA, CRT or CREST-related certifications
- Relevant practical experience considered alongside formal certifications
Benefits:
- 25 days annual leave per year plus 8 English bank holidays
- 1 day of paid leave for your Birthday
- Access to Westfield Health Care Cash Plan
- Employee mental health and wellbeing platform
- £2,000 annual training budget
- Referral bonus of up to £2,000 per successful referral
- Fully remote work arrangement
Similar Jobs
Software and Data Quality Assurance Analyst I
Software QA analyst testing NCCPA applications through functional, regression, manual, and automated testing. Supporting defect resolution, acceptance testing, deployments, and quality control.
Quality Assurance Engineer II
Quality Assurance Engineer II testing Ad Hoc’s digital government services for the Library of Congress. Automating functional, accessibility, API, and CI/CD testing in a remote agile environment.
QA Test Automation – Mid-Level
QA Test Automation specialist at Compass UOL, a digital transformation and AI services firm. Planning manual and automated testing, API performance, integration, and CI/CD quality processes.
Associate Penetration Tester
Associate Penetration Tester conducting network, application, and social engineering tests for FRSecure, an information security consultancy. Documenting vulnerabilities and advising clients on remediation.
QA Engineer
QA Engineer ensuring functional quality through Playwright-based regression and E2E automation. Supporting ARKHO’s digital transformation, AI, data, and managed services offerings.
Clinical Quality Assurance Coordinator
Clinical Quality Assurance Coordinator reviewing peer-review reports for MES Solutions, a provider of independent medical examinations and peer-review services. Ensuring clinical accuracy, regulatory compliance, and report quality remotely.
QA Lead
QA Lead validating settlement integrity, payment flows, and RPC security for an AI-driven real-money platform. Building traceable test coverage and leading a QA pod.
Quality Assurance Analyst
Quality Assurance Analyst auditing files, communications, and processes for Dovenmuehle, a mortgage subservicing firm. Analyzing compliance findings and recommending corrective actions and process improvements.
Senior QA Engineer – Mobile, Web
Senior QA Engineer owning release readiness for React Native mobile and React web products. Investigating defects with SQL, APIs, logs, and application code.
Principal Software Tester
Software Tester Principal building Playwright UI and API test automation for SAIC’s defense, space, intelligence, and civilian technology solutions. Supporting CI/CD quality, defect tracking, and testing standards.
Senior Software Tester
Senior Software Tester automating UI and API quality assurance for SAIC’s mission-critical technology solutions. Building Playwright frameworks and supporting CI/CD release quality.
Quality Assurance Lead Analyst
Quality assurance lead analyzing customer escalations and CAPA trends for Airspace, an AI-powered time-critical freight logistics company. Driving corrective actions and quality improvements across Operations.
QA, Mandarin
Quality Checker reviewing and correcting Mandarin call-transcript annotations for DataForce by TransPerfect. Ensuring accurate labeling, guideline compliance, and appropriate PII redaction.
Software Quality Engineering Manager
Software Quality Engineering Manager leading SDET teams and AI-native testing for Unifonic’s customer experience platform. Owning automation, release quality, and testing strategy across web, mobile, and agentic products.
QA Engineer II
QA Engineer II testing MPulse web, API, and database platforms. Creating test plans, tracking JIRA defects, and supporting production troubleshooting.
Farsi Linguistic Tester – Mac M-Series Required
Freelance Farsi linguistic tester reviewing AI-generated content and Farsi software interfaces for Acclaro. Reporting linguistic, layout, and functional issues in English.
Senior Manager, Quality Engineering
Senior Manager leading test infrastructure and quality engineering for Samsara’s Connected Operations Cloud. Scaling automation, quality platforms, and release confidence for IoT customers.
Quality Assurance Engineer
Quality Assurance Engineer testing Beacon Funding’s lending systems and customer portals. Combining manual, automated, and AI-assisted testing within Agile Scrum teams.
Senior Software Quality Assurance Engineer
Senior QA Engineer testing applications, databases, and enterprise technology for Mano Lani LLC. Developing test plans, tracking defects, and validating software releases.
Middle General QA Engineer
General QA Engineer manually testing gambling-sector web and hybrid applications. Owning quality processes, exploratory testing, documentation, automation, and release support.