Penetration Tester – Hybrid, up to £60,000

About the role

We are looking for an experienced Penetration Tester to join our Cyber Defence team in Horsham. You will work in a hybrid setting, delivering hands‑on security testing across web applications, APIs, infrastructure and cloud environments while collaborating with seasoned security professionals.

Key responsibilities

• Conduct penetration testing of web applications, APIs, infrastructure and cloud platforms using recognised methodologies.
• Perform full testing cycles – reconnaissance, exploitation, post‑exploitation, validation and reporting.
• Produce clear, risk‑based reports with practical remediation advice for technical and non‑technical audiences.
• Manage external testing providers, review test quality and ensure consistent deliverables.
• Support vulnerability assessments, risk prioritisation, remediation tracking and re‑testing.
• Work closely with development and engineering teams to embed security testing into project lifecycles.
• Contribute to purple‑team exercises, incident investigations and broader Cyber Defence initiatives.

Required profile

• Proven hands‑on experience delivering penetration tests for web applications, APIs, infrastructure and cloud environments.
• Strong knowledge of common vulnerability classes, including OWASP Top 10, authentication/authorisation flaws, input validation and business‑logic issues.
• Familiarity with penetration testing frameworks such as OWASP, PTES and NIST.
• Ability to interpret vulnerability scan results, validate findings and communicate them effectively.
• Awareness of current attacker tactics, techniques and procedures.

Required skills

• Web application penetration testing
• API security testing
• Infrastructure and cloud security testing
• OWASP Top 10, PTES and NIST methodologies
• Offensive security tools (e.g., Burp Suite, Metasploit)

What we offer

• Hybrid working model (office and remote)
• Competitive salary up to £60,000 per year
• Opportunities to develop technical expertise with modern security tooling
• Clear progression path towards senior offensive security roles
• Collaborative environment with experienced security professionals