Insight Global
Senior Penetration Tester
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Senior Penetration Tester
Insight Global are seeking a Senior Penetration Tester for a leading global technology organisation, supporting the security and resilience of cutting-edge cybersecurity products.
This position requires 3 days onsite in Cambridge, UK for a 12-month contract and is Inside IR35.
About the Role
The Senior Penetration Tester will join a Cybersecurity Architecture & Security Engineering team focused on validating the security of enterprise-grade security products and ensuring they meet the highest standards of cybersecurity excellence. Working closely with security architects, engineering teams, and product stakeholders, you will become embedded within the product development lifecycle, identifying security risks early and helping deliver secure products at scale.
Day-to-Day Responsibilities
- Conduct penetration testing across cloud environments, APIs, web applications, Windows applications, endpoints, and supporting infrastructure.
- Work closely with engineering teams to understand product architecture, functionality, and potential attack surfaces before formal testing begins.
- Perform manual penetration testing and vulnerability assessments using industry-leading tools and methodologies.
- Identify, validate, and document vulnerabilities, providing clear remediation guidance and risk assessments.
- Collaborate with development teams to verify fixes and ensure security issues are effectively resolved.
- Support release readiness activities by ensuring security testing remains efficient and scalable.
- Investigate emerging threats and proactively assess potential security concerns.
- Contribute to security best practices across the software development lifecycle.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Must-Have Requirements
- Strong penetration testing experience across cloud environments, web applications, APIs, and Windows applications.
- Expertise in manual penetration testing and vulnerability assessment methodologies.
- Experience using tools such as Burp Suite, Veracode, and similar security testing platforms.
- Strong understanding of application security principles, OWASP Top 10, and secure software development practices.
- Experience identifying, documenting, and communicating security vulnerabilities and remediation recommendations.
- Strong scripting or programming experience with Python.
- Excellent stakeholder management and communication skills, with the ability to influence engineering teams and communicate technical risks clearly.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Plusses
- Experience testing endpoint security or EDR products.
- Azure, AWS, or GCP security testing expertise.
- Knowledge of Windows endpoint technologies and operating systems.
- Understanding of MITRE ATT&CK, threat modelling, and secure design reviews.
- Experience working within CI/CD pipelines and DevSecOps environments.
- CREST, OSCP, OSEP, CRTO, CHECK, or equivalent cybersecurity certifications.
- Experience leveraging AI-assisted security testing tools.
- Previous experience within a product-led technology or enterprise software organisation.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London