KEY REQUIREMENTS

• Bachelor’s or Master’s degree in Computer Science, Engineering, Management Information Systems, or a related field
• Minimum 10 years of experience in penetration testing, application security, or offensive security roles
• Hold a current OSCP (Offensive Security Certified Professional) in either Infrastructure or Web Applications or similar certification or be in a position and level to pass the exam for the certification
• Strong experience in Web Applications, APIs, Microservices, and Mobile Application Security (iOS / Android)
• Solid background in Infrastructure and Network Security testing
• Experience of working with applications that perform a wide range of business functions - ideally across multiple industries
• Ability to understand and assess applications from both a technical and business function perspective,
• Innovative and analytical in your approach to performing penetration testing, particularly of novel devices and environments
• Capable of working to strict deadlines and prioritising work appropriately
• Ability to assess security issues from both technical and business impact perspectives
• Strong written and verbal communication skills, with the ability to convey technical security findings
• Fluent in English

KEY RESPONSIBILITIES

• Lead and execute penetration testing engagements across web applications, mobile platforms (iOS / Android), APIs, and microservices
• Perform advanced network and host-layer vulnerability assessments
• Develop custom scripts, tools, and exploits to automate testing and perform bespoke attack scenarios
• Analyze security findings from both technical and business risk perspectives
• Produce high-quality, executive-ready penetration testing reports with clear, actionable, and environment-specific remediation guidance
• Communicate complex security issues effectively to non-technical stakeholders and senior business leaders
• Manage multiple engagements simultaneously, ensuring delivery within strict deadlines
• Mentor and guide junior and mid-level penetration testers, supporting their technical and professional development
• Contribute to the continuous improvement of internal testing methodologies, tools, and best practices