Penetration tester

Penetration tester

Posted 1 week ago by LA International

Apply
£550 Per day
Inside
Undetermined
London
Apply
Agile Methodology Certified Ethical Hacker (CEH) Cloud Computing Cloud Technology Computation Tree Logic Continuous Integration and Continuous Delivery Data Management Platforms International Trade JIRA Management Microsoft Azure Microsoft SharePoint NIST 800-53 Open Web Application Security Project (OWASP) Penetration Testing Security Clearance Security Testing SIPOC Process Stakeholder Engagement Stakeholder Management Vulnerability Vulnerability Management Workflows

Summary: The Penetration Tester will be integrated into a team to conduct agile and scenario-based security testing for digital services, focusing on internal assurance to minimize reliance on external suppliers. This role involves early identification of vulnerabilities during the development lifecycle and contributing to the enhancement of security testing capabilities within the department. Collaboration with stakeholders and development teams is essential for effective remediation and compliance with security standards. The position requires hands-on experience with penetration testing tools and a strong understanding of security frameworks and principles.

Key Responsibilities:

  • Conduct internal penetration testing across applications, infrastructure, and end user devices (EUDs).
  • Perform scenario-based testing aligned with principles and DSA security non-functional requirements.
  • Collaborate with development teams to integrate findings into JIRA workflows for rapid remediation.
  • Support the testing pipeline, including planning, execution, and reporting of penetration tests.
  • Maintain compliance with NCSC guidance and security standards.

Key Skills:

  • Hands-on experience with penetration testing tools.
  • Strong understanding of OWASP, NIST SP 800-53, ISO 27001, and CIS Benchmarks.
  • Familiarity with Secure-by-Design principles and CI/CD pipeline integration.
  • Experience testing EUDs under operational constraints (e.g. no destructive tools, CSOC coordination).
  • Ability to interpret and apply security NFRs across diverse environments.
  • Proficiency in JIRA, SharePoint, and vulnerability management platforms.

Salary (Rate): £550 per day

City: London

Country: United Kingdom

Working Arrangements: undetermined

IR35 Status: inside IR35

Seniority Level: undetermined

Industry: IT

Detailed Description From Employer:

Penetration Tester

The Penetration Tester will be embedded within team to deliver agile, scenario-based, and on-demand security testing across digital services. This role supports the strategic shift towards internal assurance, reducing reliance on external suppliers.
You will work closely with stakeholders to identify vulnerabilities early in the development lifecycle, contribute to the capability build, and help shape the future of security testing across the department.

Key Responsibilities
* Conduct internal penetration testing across applications, infrastructure, and end user devices (EUDs).
* Perform scenario-based testing aligned with principles and DSA security non-functional requirements.
* Collaborate with development teams to integrate findings into JIRA workflows for rapid remediation.
* Support the testing pipeline, including planning, execution, and reporting of penetration tests.
* Maintain compliance with NCSC guidance and security standards.
Desirable Qualifications
* Certifications: OSCP, CREST CRT, CTL Web/Inf, , CEH.
* Experience with cloud security (AWS, Azure) and containerised environments.
* Knowledge of Home Office testing standards and ITHC processes.
Essential Skills & Experience
* Hands-on experience with penetration testing tools.
* Strong understanding of OWASP, NIST SP 800-53, ISO 27001, and CIS Benchmarks.
* Familiarity with Secure-by-Design principles and CI/CD pipeline integration.
* Experience testing EUDs under operational constraints (e.g. no destructive tools, CSOC coordination).
* Ability to interpret and apply security NFRs across diverse environments.
* Proficiency in JIRA, SharePoint, and vulnerability management platforms.
Attributes
* Strong stakeholder engagement and communication skills.
* Ability to work independently and as part of cross-functional teams.
* Commitment to continuous improvement and knowledge sharing.


Due to the nature and urgency of this post, candidates holding or who have held high level security clearance in the past are most welcome to apply. Please note successful applicants will be required to be security cleared prior to appointment which can take a minimum 10 weeks. LA International is an award-winning partner of choice for many of the world's most influential companies and government organisations. Holding Enhanced Government Security Accreditation, we are recognised as the European market leader in the delivery of Security Cleared talent to organisations that demand the very highest levels of security, compliance and assurance.

An award-winning organisation, having secured the prestigious Queens Award for Enterprise: International Trade over multiple years. We are committed to fostering an inclusive, equitable and accessible workplace where everyone feels valued and supported. We welcome applications from all individuals, regardless of background or identity, and we encourage candidates who may not meet every listed requirement to still apply. If you require any adjustments or support during the recruitment process, please let us know and we will work with you to ensure a fair and accessible experience.

Please Note: If a high volume of applications is received, only candidates shortlisted will be contacted.

Apply
Similar Jobs
Loading data...