Penetration Tester

Penetration Testing Specialist |
South Wales | Hybrid | £71,000 - £81,000 + bonus + excellent benefits

The Role

Working as part of an established cyber security function, you'll be responsible for planning and delivering penetration testing across a diverse technology estate, including traditional IT infrastructure, business applications and Operational Technology.

Alongside hands‑on testing, you'll work closely with technical teams and third‑party security partners to prioritise remediation, improve security controls and provide expert guidance on emerging threats.

This is a varied technical role offering exposure to modern enterprise environments as well as industrial control systems and critical infrastructure.

What You’ll Be Doing:

• Deliver infrastructure, web application and internal penetration testing
• Assess Operational Technology (OT) and industrial environments using safe testing methodologies
• Research new vulnerabilities, exploits and attacker techniques
• Identify weaknesses across people, processes and technology, including social engineering and information leakage
• Produce clear technical reports with practical remediation advice
• Support vulnerability management and technical risk assessment
• Manage external penetration testing providers where required
• Work closely with security, infrastructure and engineering teams to improve resilience

What We're Looking For:

You'll ideally have experience in several of the following:

• Commercial penetration testing experience
• Infrastructure and application security testing
• Strong knowledge of attacker TTPs and offensive security methodologies
• Vulnerability assessment and security risk management
• Experience working with or assessing OT,ICS or industrial environments
• Excellent technical reporting and stakeholder communication skills

What's on Offer?

• Competitive salary
• Annual bonus
• Excellent pension
• Hybrid working
• Ongoing technical training and certification support
• Exposure to enterprise-scale and Operational Technology environments
• Long-term career progression within a growing cyber security function