This role involves delivering and supporting security assessments across various client environments, including networks, applications, and cloud infrastructure. The Penetration Tester will use automated tools and manual techniques to simulate real-world attack scenarios, identify vulnerabilities, and help clients understand and address their security risks. It is a client-facing position that requires strong communication skills to present findings and recommendations to both technical and non-technical stakeholders.
Responsibilities
Conduct penetration testing across networks, web applications, APIs, mobile applications, and cloud environments
Simulate real-world attack scenarios to assess client resilience against cyber threats
Use a combination of automated vulnerability scanning tools and manual testing and exploitation techniques
Identify, analyze, and exploit security vulnerabilities across diverse client environments
Assess the effectiveness of technical security controls and identify opportunities for improvement
Apply appropriate offensive security methodologies, tools, and techniques throughout engagements
Stay up to date with emerging vulnerabilities, attack techniques, and industry developments
Work directly with clients throughout penetration testing engagements
Present findings and recommendations clearly and professionally
Help clients understand the potential business and technical impact of identified vulnerabilities
Communicate complex technical concepts in a way that is accessible to non-technical stakeholders
Support clients in understanding and prioritizing remediation activities
Build positive and professional relationships with client stakeholders
Produce high-quality technical reports following each engagement
Clearly document vulnerabilities, exploitation techniques, evidence, risk, and remediation recommendations
Ensure technical findings are accurate, well-evidenced, and easy for clients to understand
Translate technical detail into clear, practical recommendations for both technical and executive audiences
Maintain Cognisys' high standards for quality, consistency, and client service
Work collaboratively with the wider cybersecurity team
Share knowledge, techniques, and lessons learned with colleagues
Contribute to the continued development of Cognisys' penetration testing methodologies and ways of working
Take ownership of your continued technical and professional development
Support a culture of learning, collaboration, and continuous improvement
Deliver thorough, accurate, and professional penetration testing engagements across a variety of client environments
Millions of jobs, with real people getting hired every day
200,000+
New jobs added daily
7,000,000+
Verified job listings
1,000,000+
Tailored applications submitted
Confidently assess and exploit vulnerabilities using a combination of automated tools and manual testing techniques
Demonstrate a strong understanding of how technical controls can be assessed, bypassed, and exploited in realistic attack scenarios
Produce clear, detailed, and actionable technical reports that help clients understand their vulnerabilities and how to remediate them
Communicate technical findings effectively to both technical teams and non-technical stakeholders
Present findings and recommendations confidently to clients and support them in prioritizing remediation
Take ownership of your engagements, managing your testing, documentation, and deliverables effectively
Continue to develop your technical knowledge and stay current with evolving offensive security techniques, tools, and threats
Contribute positively to the wider penetration testing team by sharing knowledge, supporting colleagues, and continuously looking for ways to improve our approach
Requirements
Strong technical foundation in offensive security
Hands-on experience conducting penetration testing and security assessments
Strong grasp of how to assess and break technical controls, with the ability to explain the findings clearly to clients
Experience using vulnerability scanning tools alongside manual testing and exploitation techniques
Strong analytical and problem-solving skills
Proactive approach to learning and keeping up to date with developments in offensive security
Ability to communicate technical vulnerabilities and risks in a clear, non-technical format
Ability to manage your workload effectively and deliver work to agreed deadlines
Strong client engagement skills and a professional approach to customer service
Strong understanding of offensive security methodologies, tools, and techniques
Excellent written and verbal communication skills
Relevant practical experience will also be considered alongside formal certifications
Experience across one or more of the following areas:
Cloud security testing
Web application testing
Network penetration testing
Mobile application testing
API testing
Industry-recognized certifications are preferred and may include:
CREST-related certifications
CRT
OSCP
CPSA
Other relevant penetration testing or offensive security certifications
About the Company
Cognisys is a rapidly growing company in the cybersecurity sector.
