Cybersecurity – Senior Penetration Tester

About the role

Senior Penetration Tester – Application Security. The role is focused specifically on Application Security Penetration Testing at the application layer. You will conduct penetration testing across web, mobile, and thick-client applications, with Web Application Security Testing comprising the majority of the workload, Mobile Application Penetration Testing expected to account for approximately 20% of the workload, and Thick Client Security Testing also included.

Key responsibilities

• Conduct application security penetration testing across web, mobile, and thick-client applications
• Perform Web Application Security Testing, which will comprise the majority of the workload
• Conduct Mobile Application Penetration Testing, expected to account for approximately 20% of the workload
• Perform Thick Client Security Testing; prior experience is preferred but candidates with strong application security experience can be trained
• Identify, validate, and exploit security vulnerabilities within the agreed testing scope
• Execute penetration testing activities using established methodologies, test plans, frameworks, and processes
• Follow defined Rules of Engagement (RoE) and ensure testing is performed within the approved application-layer scope
• Document vulnerabilities with appropriate evidence, risk ratings, business impact, and remediation recommendations
• Prepare clear and detailed penetration testing reports for technical and business stakeholders
• Perform vulnerability retesting to validate remediation

About you

• Minimum 6+ years of hands-on penetration testing experience
• Strong experience in Web Application Security Testing
• Experience in Mobile Application Security Testing — approximately 20% of workload
• OSCP or CREST certification is mandatory
• Hands-on experience with Kali Linux and Burp Suite
• Strong understanding of OWASP application security principles and common web vulnerabilities
• Strong vulnerability identification, validation, exploitation, and reporting skills
• Ability to work independently and execute against existing penetration testing frameworks and methodologies
• Experience with Android/iOS penetration testing (preferred)
• Experience with API Security Testing (preferred)