Welcome to the jungle logo
Cognisys
Cognisys

Penetration Tester

Job summary
Permanent contract
Leeds
Fully-remote
Salary: Not specified
Experience: > 3 years
Skills & expertise
Pentesting
Cybersecurity knowledge
Vulnerability scanning
Continuous improvement
Communication skills
+4
Apply

Cognisys
Cognisys

Interested in this job?

Apply
Questions and answers about the job

The position

Job description

  • As we continue to grow, you’ll have the opportunity to work alongside experienced cybersecurity professionals, contribute to challenging client engagements and help shape the way we deliver our services. We believe in giving our people the opportunity to develop, share ideas and make a genuine impact
  • Cognisys is growing rapidly, and we’re looking for a Pen Tester to join our team during an exciting period of innovation and expansion
  • As a Pen Tester, you’ll be responsible for delivering and supporting security assessments across a range of client environments, including networks, applications and cloud infrastructure
  • You’ll use a combination of automated tools and manual techniques to simulate real-world attack scenarios, identify meaningful vulnerabilities and help clients understand and address their security risks
  • This is a client-facing role where technical expertise is only part of the job. You’ll also need to communicate your findings clearly, produce high-quality reports and help both technical and non-technical stakeholders understand the risks and practical steps they can take to improve their security posture
  • Conduct penetration testing across networks, web applications, APIs, mobile applications and cloud environments
  • Simulate real-world attack scenarios to assess client resilience against cyber threats
  • Use a combination of automated vulnerability scanning tools and manual testing and exploitation techniques
  • Identify, analyse and exploit security vulnerabilities across diverse client environments
  • Assess the effectiveness of technical security controls and identify opportunities for improvement
  • Apply appropriate offensive security methodologies, tools and techniques throughout engagements
  • Stay up to date with emerging vulnerabilities, attack techniques and industry developments
  • Work directly with clients throughout penetration testing engagements
  • Present findings and recommendations clearly and professionally
  • Help clients understand the potential business and technical impact of identified vulnerabilities
  • Communicate complex technical concepts in a way that is accessible to non-technical stakeholders
  • Support clients in understanding and prioritising remediation activities
  • Build positive and professional relationships with client stakeholders
  • Produce high-quality technical reports following each engagement
  • Clearly document vulnerabilities, exploitation techniques, evidence, risk and remediation recommendations
  • Ensure technical findings are accurate, well-evidenced and easy for clients to understand
  • Translate technical detail into clear, practical recommendations for both technical and executive audiences
  • Maintain Cognisys’ high standards for quality, consistency and client service
  • Work collaboratively with the wider cybersecurity team
  • Share knowledge, techniques and lessons learned with colleagues
  • Contribute to the continued development of Cognisys’ penetration testing methodologies and ways of working
  • Take ownership of your continued technical and professional development
  • Support a culture of learning, collaboration and continuous improvement
  • Success in this role means becoming a trusted technical consultant who can independently deliver high-quality penetration testing engagements while providing an excellent client experience
  • Deliver thorough, accurate and professional penetration testing engagements across a variety of client environments
  • Confidently assess and exploit vulnerabilities using a combination of automated tools and manual testing techniques
  • Demonstrate a strong understanding of how technical controls can be assessed, bypassed and exploited in realistic attack scenarios
  • Produce clear, detailed and actionable technical reports that help clients understand their vulnerabilities and how to remediate them
  • Communicate technical findings effectively to both technical teams and non-technical stakeholders
  • Present findings and recommendations confidently to clients and support them in prioritising remediation
  • Take ownership of your engagements, managing your testing, documentation and deliverables effectively
  • Continue to develop your technical knowledge and stay current with evolving offensive security techniques, tools and threats
  • Contribute positively to the wider penetration testing team by sharing knowledge, supporting colleagues and continuously looking for ways to improve our approach
  • At Cognisys, you will be part of a collaborative and innovative team that values your input and shares support
  • You’ll have the opportunity to work on challenging projects that make a real impact for our clients

Preferred experience

  • Are you ready to make an impact in the fast-paced world of cybersecurity?
  • We’re looking for someone with a strong technical foundation in offensive security who is equally comfortable working with clients and communicating technical findings
  • CREST-related certifications
  • Hands-on experience conducting penetration testing and security assessments
  • A strong grasp of how to assess and break technical controls, with the ability to explain the findings clearly to clients
  • Cloud security testing
  • Excellent written and verbal communication skills
  • Web application testing
  • CRT
  • The following certifications are highly regarded:
  • Other relevant penetration testing or offensive security certifications
  • Experience using vulnerability scanning tools alongside manual testing and exploitation techniques
  • Network penetration testing
  • Strong analytical and problem-solving skills
  • A proactive approach to learning and keeping up to date with developments in offensive security
  • The ability to communicate technical vulnerabilities and risks in a clear, non-technical format
  • Mobile application testing
  • OSCP
  • Industry-recognised certifications are preferred and may include:
  • API testing
  • The ability to manage your workload effectively and deliver work to agreed deadlines
  • Strong client engagement skills and a professional approach to customer service
  • Experience across one or more of the following areas:
  • CPSA
  • Relevant practical experience will also be considered alongside formal certifications
  • A strong understanding of offensive security methodologies, tools and techniques

These job openings might interest you!

These companies are also recruiting for the position of “Security”.

Apply