Penetration Tester - Cloud Security, Active Directory, APIs

Market Rate (Inside IR35)

6 Months initially
Hybrid in London

A client of mine is looking for a hands-on Penetration Tester to support their cybersecurity function, with some responsibilities across security operations and incident response. The right candidate will have experience conducting infrastructure, Web Application, API, Cloud and Active Directory penetration tests within complex environments.

Key Requirements:

• Proven commercial experience as a Penetration Tester, within a large enterprise environment.
• Strong hands-on Penetration Testing experience across Web Applications, APIs, infrastructure, Active Directory and cloud environments.
• Proven experience conducting End-to-End Penetration Testing including scoping, execution, reporting and retesting.
• Comfortable identifying, exploiting and validating vulnerabilities and providing remediation recommendations.
• Knowledge of technologies such as Pentera, AppCheck, Microsoft Defender, Splunk, CrowdStrike or similar.
• Exposure to vulnerability management and working with technical teams to remediate findings.
• Comfortable supporting incident response activities, including triage, investigation and containment.
• Experience using SIEM and security monitoring tools for alert analysis and threat detection.
• Strong communication skills with the ability to explain technical findings to technical and non-technical stakeholders.