Penetration Tester Remote

Location: UK (Remote) Must be based in the UK.

Salary: Competitive Compensation

Cognisys is a global cybersecurity company specialising in Penetration Testing, GRC Consulting and Managed Security services. We work with organisations across more than 30 countries, helping them identify risk, strengthen their security posture and navigate an increasingly complex cybersecurity landscape.

We're a small but mighty team with ambitious plans for growth. We combine deep technical expertise with a strong focus on customer service, practical advice and delivering meaningful outcomes for our clients.

Our people are at the heart of what we do. We value Together, Ownership, Momentum and Excellence, and we want people who are curious, collaborative and willing to take ownership of their work.

As we continue to grow, you'll have the opportunity to work alongside experienced cybersecurity professionals, contribute to challenging client engagements and help shape the way we deliver our services. We believe in giving our people the opportunity to develop, share ideas and make a genuine impact.

Are you ready to make an impact in the fast-paced world of cybersecurity?

Cognisys is growing rapidly, and we're looking for a Pen Tester to join our team during an exciting period of innovation and expansion.

As a Pen Tester, you'll be responsible for delivering and supporting security assessments across a range of client environments, including networks, applications and cloud infrastructure.

You'll use a combination of automated tools and manual techniques to simulate real-world attack scenarios, identify meaningful vulnerabilities and help clients understand and address their security risks.

This is a client-facing role where technical expertise is only part of the job. You'll also need to communicate your findings clearly, produce high-quality reports and help both technical and non-technical stakeholders understand the risks and practical steps they can take to improve their security posture.

• Conduct penetration testing across networks, web applications, APIs, mobile applications and cloud environments.
• Simulate real-world attack scenarios to assess client resilience against cyber threats.
• Use a combination of automated vulnerability scanning tools and manual testing and exploitation techniques.
• Identify, analyse and exploit security vulnerabilities across diverse client environments.
• Assess the effectiveness of technical security controls and identify opportunities for improvement.
• Apply appropriate offensive security methodologies, tools and techniques throughout engagements.
• Stay up to date with emerging vulnerabilities, attack techniques and industry developments.

• Work directly with clients throughout penetration testing engagements.
• Present findings and recommendations clearly and professionally.
• Help clients understand the potential business and technical impact of identified vulnerabilities.
• Communicate complex technical concepts in a way that is accessible to non-technical stakeholders.
• Support clients in understanding and prioritising remediation activities.
• Build positive and professional relationships with client stakeholders.

• Produce high-quality technical reports following each engagement.
• Clearly document vulnerabilities, exploitation techniques, evidence, risk and remediation recommendations.
• Ensure technical findings are accurate, well-evidenced and easy for clients to understand.
• Translate technical detail into clear, practical recommendations for both technical and executive audiences.
• Maintain Cognisys' high standards for quality, consistency and client service.