Internal Penetration Tester

Job Description

Internal Penetration Tester

Salary: £75,000 - £110,000 per annum
Location: London - 2/3 days per week

We are partnering with a globally recognised professional services organisation that operates across multiple international markets and supports thousands of employees worldwide. With technology and cyber security continuing to be a strategic priority, the business is investing heavily in strengthening its cyber resilience, risk management capabilities and enterprise security programmes.

This is an excellent opportunity for an experienced Penetration Tester, Offensive Security Consultant or Application Security professional to join a growing global security team responsible for assessing and improving the security of enterprise applications, platforms and emerging technologies.

Internal Penetration Tester - Responsibilities

• Perform manual penetration testing and security assessments of web applications, APIs and enterprise platforms.
• Identify, validate and exploit security vulnerabilities using recognised penetration testing methodologies and industry best practices.
• Conduct security testing aligned to OWASP guidance and application security frameworks.
• Produce detailed technical reports outlining findings, risk ratings, remediation recommendations and business impact.
• Work closely with application owners, technology teams and security stakeholders to communicate findings and support remediation efforts.
• Contribute to security research, testing methodologies and the assessment of emerging technologies, including AI-enabled applications and services.

Internal Penetration Tester - Requirements

• Minimum 3-5 years of hands-on penetration testing experience within enterprise, consultancy or professional services environments.
• Strong practical experience conducting web application penetration testing, including manual assessment techniques and vulnerability validation.
• Excellent understanding of OWASP Top 10 vulnerabilities, web application security principles and offensive security methodologies.
• Experience performing independent security assessments and delivering findings from initial scoping through to final reporting.
• Hands-on experience with tools such as Burp Suite, Kali Linux, Metasploit, Nessus, Wireshark or equivalent offensive security toolsets.
• Strong understanding of vulnerability exploitation techniques, attack simulation and the difference between vulnerability assessments and penetration testing engagements.

This is an exciting opportunity to join a highly respected global organisation that is making significant investments in cybersecurity and AI. You will work alongside experienced offensive security professionals, gain exposure to complex enterprise environments and play a key role in helping secure critical business systems and innovative technologies. Apply directly or contact me on (see below)

*Rates depend on experience and client requirements