Penetration Tester – App & Cloud Security (London)

Capital One; Nottingham; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A leading financial services company is seeking a Penetration Tester to uncover vulnerabilities in their enterprise systems. The successful candidate will perform penetration testing on applications, networks, and cloud services, while collaborating with teams to enhance security standards. This role offers a hybrid working model with flexibility to work from home and office. Candidates should have strong knowledge of application security practices and familiarity with penetration testing tools. Join a dynamic environment committed to evolving cybersecurity defenses.

Benefits

Pension scheme

Generous holiday entitlement

Private medical insurance

Flexible benefits including season-ticket loans

Cycle to work scheme

Qualifications

• Experience in red teaming, penetration testing, application security, or network security.
• Strong knowledge of application security best practices including OWASP Top 10.
• Experience coding in interpreted languages such as Python, Bash, or PowerShell.

Responsibilities

• Perform penetration testing of APIs, web applications, networks, and cloud services.
• Assess development practices and help drive corporate security standards.
• Present findings and conclusions to technical and non-technical audiences.

Skills

Red teaming

Penetration testing

Application security

Network security

Web application security testing

Familiarity with penetration testing tools

Education

Bachelor's Degree or equivalent certification

Tools

BurpSuite

OWASP Zap

SoapUI

Job description

A leading financial services company is seeking a Penetration Tester to uncover vulnerabilities in their enterprise systems. The successful candidate will perform penetration testing on applications, networks, and cloud services, while collaborating with teams to enhance security standards. This role offers a hybrid working model with flexibility to work from home and office. Candidates should have strong knowledge of application security practices and familiarity with penetration testing tools. Join a dynamic environment committed to evolving cybersecurity defenses.