Penetration Tester

Salary: £61, per year

• Were looking for someone who holds a CREST qualification or equivalent, or is working towards one.
• You should have experience delivering end-to-end penetration testing across web, network and mobile environments.
• We value experience engaging with stakeholders, contributing to Statements of Work (SoW) and producing clear, actionable security reports.
• Desirable experience includes participation in the penetration testing or wider security community, such as bug hunting, Hack The Box, CTFs or hackathons.
• Exposure to client or thick application testing and experience working to agreed project timelines are desirable.
• We welcome an interest in emerging areas such as AI security testing, and familiarity with scripting or programming; no specific languages are required.
• You may be assessed on relevant critical skills, including risk and controls, change and transformation, business acumen, strategic thinking, digital and technology, and job-specific technical skills.
• For this Assistant Vice President role, we expect well-developed professional knowledge and skills, sound risk and control awareness, and the ability to communicate complex information and influence stakeholders.
• If you have leadership responsibilities, we expect you to set objectives, coach colleagues and support performance and reward decisions. People Leaders are expected to demonstrate our LEAD behaviours:
  Listen and be authentic, Energise and inspire, Align across the enterprise, and Develop others.

• Identify, validate and clearly communicate security vulnerabilities before they can be exploited, through assessments of web, network, mobile and client applications.
• Develop and execute assessments, audits and threat models using penetration testing tools and techniques to identify vulnerabilities in our systems, applications and servers.
• Communicate findings, recommendations and remediation guidance to stakeholders, including senior stakeholders, through comprehensive reports and documents.
• Work with stakeholders and IT teams to identify emerging cyber-attack techniques, tools and technologies, and support the development of penetration testing methodologies.
• Work with stakeholders to understand security requirements and controls in business processes, applications and services, helping strengthen our overall security posture and assurance.
• Identify emerging vulnerabilities, exploit code and cyber-attacks to develop testing methodologies and assurance activities.
• Advise and influence decision-making, contribute to policy development, and take responsibility for operational effectiveness.
• Lead complex work or collaborative assignments, guide team members, and identify when additional areas of specialisation are needed.
• Consult on complex issues, advise People Leaders on escalated matters, and identify ways to mitigate risk and strengthen controls, policies and procedures.
• Analyse data from multiple internal and external sources to solve problems creatively and effectively, and communicate complex or sensitive information to stakeholders.
• Collaborate across functions and business divisions to support organisational objectives and stay informed about business activity and strategy.
• Demonstrate our values of Respect, Integrity, Service, Excellence and Stewardship, and our mindset to Empower, Challenge and Drive.

• AI
• Support
• Mobile
• Network
• Security
• Web

Were seeking a Penetration Tester to join our collaborative security testing team and help protect our organisation and clients. The role delivers high-quality assessments across a range of projects and works closely with stakeholders to turn findings into meaningful action. The position is based in Knutsford or Manchester. This is an Assistant Vice President role; depending on the positions leadership responsibilities, the work may involve leading a team or guiding colleagues through collaborative assignments.

last updated 40 week of 2026