Be at the heart of actionFly remote-controlled drones into enemy territory to gather vital information.

Apply Now

Penetration Tester

Tesco Technology
Welwyn Garden City
5 days ago
Create job alert
About the role

We are building an internal penetration testing function to strengthen our defensive security capabilities. This role uses offensive skills to discover and demonstrate vulnerabilities in our systems. Tesco Technology deploys solutions across a range of stacks, from on‑premise infrastructure to cloud‑centric deployments. You will work with developers to address findings at scale across Tesco, help application teams remediate issues, assist infrastructure teams, and contribute to detection and incident response with your offensive security knowledge.

We believe skilled, hard‑working people are our greatest asset in reducing cyber risk. We support continual development and keeping up with the evolving threat landscape.

Are you up for this challenge?

You will be responsible

You will be working in an offensively trained and defensively focused security team. Your primary responsibility is to deliver high‑quality security assessments in areas including web applications, APIs, mobile, and infrastructure. You will have access to internal knowledge, data sources, and tools to identify attack vectors and test hypotheses.

There are opportunities to stretch your skills, including:

  • Refining and developing our detections with security engineers
  • Participating in purple teaming exercises to assess broader security posture
  • Triaging and validating findings from our bug bounty program
  • Triaging and validating Tesco’s risk posture for newly released CVEs as part of vulnerability management

We support colleagues’ career development with time and opportunities for research, plus training to develop and innovate in offensive security.

You will need
  • Penetration testing experience performing authorised tests on computer systems, identifying weaknesses that could be exploited
  • GPEN, CREST, OSCP, OSEP or other industry certifications are helpful but not essential
  • Understanding of operating systems and networking fundamentals
  • Knowledge of preventative and detective controls (EDR, firewalls, IDS/IPS, anti‑virus, etc.)
  • Analytical and critical thinking, willingness to challenge the status quo
  • Good written and oral communication skills
  • Ability to work independently and collaboratively in a diverse team
What’s in it for you?

We offer a benefits package that takes care of you both in and out of work. Click here to find out more.

  • Annual bonus scheme of up to 20% of base salary
  • Holiday starting at 25 days plus a personal day plus Bank holidays
  • Private medical insurance
  • 26 weeks maternity and adoption leave (after 1 year’s service) at full pay, followed by statutory pay; fully paid paternity leave is also offered
  • Free 24/7 virtual GP service and Employee Assistance Programme (EAP) for you and your family
About Us

Tesco is on a mission to become every customer’s favourite way to shop. Our core purpose is to serve customers, communities, and the planet a little better every day. We are committed to an inclusive culture and providing equal opportunities. We are a Disability Confident Leader and offer an accessible recruitment process. We support flexible working patterns and a blended office/remote setup. Internal applicants should discuss arrangements with the Hiring Manager.


#J-18808-Ljbffr

Related Jobs

View all jobs

Penetration Tester

Penetration Tester

Penetration Tester

Penetration Tester

Penetration Tester

Penetration Tester

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Cyber Security Recruitment Trends 2025 (UK): What Job Seekers Must Know About Today’s Hiring Process

Summary: UK cyber security hiring has shifted from title‑led CV screens to capability‑driven assessments that emphasise incident readiness, cloud & identity security, detection engineering, governance/risk/compliance (GRC), measurable MTTR/coverage gains & secure‑by‑default engineering. This guide explains what’s changed, what to expect in interviews, & how to prepare—especially for SOC analysts, detection engineers, blue/purple teamers, penetration testers, cloud security engineers, DFIR, AppSec, GRC & security architecture. Who this is for: SOC & detection engineers, security operations leads, DFIR analysts, penetration testers/red teamers, purple teamers, AppSec/DevSecOps engineers, security architects, cloud security engineers, identity/IAM engineers, vulnerability managers, GRC/compliance specialists, product security & security programme managers targeting roles in the UK.

Why Cyber Security Careers in the UK Are Becoming More Multidisciplinary

Cyber security used to be viewed primarily as a technical discipline: firewalls, encryption, intrusion detection, penetration testing. In the UK today, it’s far broader. Organisations now face complex legal frameworks, ethical dilemmas, human-behaviour risks, communication challenges & usability hurdles. This shift means cyber security careers are becoming more multidisciplinary. From protecting NHS patient records to defending financial services, securing supply chains & safeguarding national infrastructure, cyber security now touches every sector. Employers increasingly want professionals who understand law, ethics, psychology, linguistics & design alongside traditional technical skills. In this article, we’ll explore why UK cyber security careers are expanding in this way, how these five disciplines shape the profession, and what job-seekers & employers need to know to thrive in this new landscape.

Cyber Security Team Structures Explained: Who Does What in a Modern Cyber Security Department

Cyber security has become a top priority for UK organisations of all sizes. From small businesses to financial institutions, healthcare providers, and government bodies, the risk of cyber attack is now a constant concern. Threats are more sophisticated, regulations more demanding, and customers more aware of data privacy than ever before. But defending against cyber threats isn’t simply about having the right tools — it’s about having the right team. A modern cyber security department relies on clearly defined roles and responsibilities to ensure that defences are proactive, incidents are managed swiftly, and compliance is maintained. This article explains the structure of a modern cyber security team, the roles you’ll typically find within it, how they collaborate, and what skills, qualifications, and salaries are expected in the UK job market.