Junior Penetration Tester

About the role

Sophos is looking for a motivated Junior Penetration Tester to join its internal Cyber Security team. You will help improve the company’s security posture by testing Sophos applications and infrastructure, and you will see the direct impact of your findings as you work with product and engineering teams to remediate issues.

Key responsibilities

• Plan, organise and execute penetration tests on Sophos web applications across diverse technologies.
• Conduct security assessments of on‑premise networks, cloud environments (AWS, Azure) and virtualised infrastructures.
• Leverage AI‑assisted workflows and internal tooling to enhance testing efficiency.
• Collaborate with development and operations teams to design and implement remediation strategies.
• Document findings from scoping through reporting and contribute to continuous improvement of security processes.

Required profile

• Hands‑on experience in a Red Team or similar offensive security role.
• Experience covering all phases of penetration testing, from scoping to detailed reporting.
• Strong motivation, innovative mindset and meticulous attention to detail.
• Ability to stay current with emerging threats, techniques and tools.

Required skills

• Penetration testing
• Web application security
• Network security
• AWS
• Azure
• Virtualisation technologies
• Red Team operations

What we offer

• Opportunity to work with world‑leading cybersecurity experts.
• Fast‑paced environment where security is a top priority.
• Professional growth within a global leader in cyber defence.