If breaking things (ethically) and explaining calmly how to fix them is your idea of a good week, this role should feel familiar. This is a senior penetration testing position focused on protecting critical applications, data, and ultimately people’s financial futures.

About the organisation

This organisation operates at significant scale within financial services, supporting a wide range of products used by customers globally. Security is treated as a core responsibility rather than a checkbox exercise, with dedicated teams embedded across the business to proactively identify and reduce real-world risk.

What you’ll do

• Lead penetration testing engagements across web and mobile applications, using attacker-style techniques to model genuine external threats.
• Analyse findings, develop targeted exploit examples, and clearly communicate risk and remediation guidance to engineers, application owners, and security partners.
• Work closely with development and operations teams to ensure vulnerabilities are understood, prioritised, and properly addressed.
• Contribute to research, tooling, and continuous improvement of testing approaches, while collaborating across enterprise cybersecurity teams.

What you need

• Significant hands-on experience in web application penetration testing, with strong coverage of OWASP Top 10 categories.
• Solid understanding of application security concepts including authentication, authorisation, encryption, and secure data handling.
• Practical experience using industry-standard tools such as Burp Suite Pro, Metasploit, Kali, nmap, and similar assessment platforms.
• Ability to communicate technical risk clearly and credibly, adapting your message for developers, security teams, and non-security stakeholders.

The practical bits

• Salary: €80,000 base plus a 20% bonus.
• Location: Dublin.
• Work setup: hybrid, with one week per month in the office and the remainder remote.
• Work permit sponsorship is not available, so candidates must already have the right to work in Ireland.

Interview process

• First round focused on technical depth, testing approach, and real-world experience.
• Second round covering collaboration style, reporting, and scenario-based discussion.

This role plays a direct part in preventing real cyber incidents, not just writing reports that gather dust. You’ll be trusted to work independently, partner constructively with engineers, and keep standards high without theatrics. If you like your security work practical, thorough, and taken seriously, you’ll fit in just fine.