TECHOHANA
Penetration Tester
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Penetration Tester (App Sec) - Up to £73,000 - Remote / monthly travel to site
TechOhana is partnering with an established software company building secure remote connectivity technology, used by enterprise, industrial and regulated customers worldwide, to appoint a Penetration Tester.
This is a security testing focused role:
The mandate is to find what automated tooling and AI-assisted analysis miss, and to prove exploitability with hands-on technique, across web, API, desktop and mobile applications.
The role:
- You'll run manual penetration tests and vulnerability assessments across the application estate
- Execute DAST with a focus on XSS, SQL injection and broken access control
- Use IAST tooling such as Burp Suite, OWASP ZAP and Frida to validate and extend results beyond what scanners report on their own
- Findings feed directly into development and design decisions
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
What you'll bring:
- Hands-on experience with DAST, IAST and penetration testing tools, and the ability to manually identify and exploit vulnerabilities beyond automated or AI analysis
- 3 to 5 years' experience in a penetration testing, application security, or security-focused software engineering role
- Strong understanding of common vulnerability classes, including XSS, SQL injection and broken access control
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Nice to have (bonus, not required):
- Demonstrable independent technical ability through CTF, bug bounty, HackTheBox/TryHackMe, or a portfolio
- Exploit development experience, such as buffer overflows, shellcode or patch analysis
- Familiarity with SAST and SCA tools such as Blackduck, Mend/Whitesource or Snyk
You don't need to meet every point above. If your core testing experience and approach fit, or you know someone who would, we'd welcome a conversation.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location