CodeWall
Penetration Tester
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Penetration Tester / Red Teamer
CodeWall | London | Hybrid, 3 days per week in the office
Find the weakness. Prove the impact. Help build agents that can do the same.
CodeWall is building autonomous offensive-security agents that find vulnerabilities and demonstrate how they can be exploited. We’re bringing together security researchers and engineers to change how organisations test and secure their systems.
We’re looking for a hands-on Penetration Tester / Red Teamer to run and support testing in customer environments, validate what our agents discover, and turn those findings into improvements across our product and research.
This is a mid-level role for someone who enjoys practical offensive-security work and wants to take on more responsibility alongside experienced researchers and engineers. Practical ability matters more than certifications.
You’ll work on real customer environments, investigate real vulnerabilities, and help answer a critical question: does this finding represent a security issue we can reproduce and prove?
Your work will include:
- Delivering penetration tests across customer applications, APIs and infrastructure, with support on more complex engagements.
- Supporting red-team exercises by investigating attack paths, testing weaknesses and contributing to exploitation.
- Validating agent-generated findings through manual testing, separating reproducible vulnerabilities from false positives.
- Developing clear proofs of concept that demonstrate exploitability, realistic impact and the conditions required for an attack.
- Writing concise technical reports with evidence and practical remediation guidance.
- Working with engineers to improve agent behaviour, testing coverage and the quality of findings.
- Turning useful discoveries into scripts, repeatable test cases and research inputs.
- Working carefully within agreed scopes, communicating clearly and exercising sound judgement in customer environments.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
We’d like to hear from you if you have:
- Hands-on experience in penetration testing, an internal offensive-security team or substantive bug-bounty research.
- A solid understanding of common vulnerabilities and how to exploit them manually, including access-control issues, authentication weaknesses and injection.
- Confidence investigating web applications and APIs, plus experience testing infrastructure or cloud environments.
- Familiarity with tools such as Burp Suite and Nmap, and the judgement to understand and challenge their results.
- The ability to write or adapt Python scripts to automate tasks and support testing.
- Clear written communication: you can explain what you found, how you reproduced it and why it matters.
- Curiosity, persistence and a willingness to ask for help when an unfamiliar problem needs a different approach.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Experience with Active Directory, privilege escalation, cloud security, adversary emulation or exploit development would be valuable. So would public research, useful tooling or technical write-ups. You don’t need experience in every area to apply.
Certifications such as OSCP are welcome, but they aren’t a requirement. We’re more interested in how you investigate a target, reason through a vulnerability and demonstrate its impact.
Previous AI experience isn’t required either; curiosity about how autonomous agents can support offensive-security work is.
At CodeWall, your testing will directly influence the product. You’ll work closely with people building the agents, see how your findings improve their capabilities, and develop your own skills through customer engagements and deeper technical investigation.
You’ll have meaningful responsibility in a small team, access to experienced offensive-security colleagues, and the opportunity to help shape how automated security testing works in practice.
Apply with your CV or LinkedIn profile.
If you have public tools, research or write-ups that show how you work, we’d love to see those too.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location