We have an incredible opportunity to join us here at Phoenix Group as a Senior Penetration Tester to join our Threat Led Pen-Testing Team within our Information Security Department.
Job Type:Permanent
Location:This role could be based in either our Telford or Edinburgh Office, with hybrid working,
Flexible working:All of our roles are open to part-time, job-share and other types of flexibility. We will discuss what is important to you and balancing this with business requirements during the recruitment process.
Closing Date:05 June 2025
Salary and benefits: £60,000 to £65,000 plus 16% bonus up to 32%, private medical cover, 38 days annual leave, excellent pension, 12x salary life assurance, career breaks, income protection, 3x volunteering days and much more
Who are we?
We want to be the best place that any of our 6,600 colleagues have ever worked.
We’re the UK’s largest long-term savings and retirement business. We offer a range of products across our market-leading brands, Standard Life, SunLife, Phoenix Life and ReAssure. Around 1 in 5 people in the UK has a pension with us. We’re a FTSE 100 organisation that is tackling key issues such as transitioning our portfolio to net zero by 2050, and we’re not done yet.
The role
We are looking for a Senior Penetration Tester within our Threat led Pen-Testing team. In this role you will be conducting regular penetration tests ranging from web applications to infrastructure testing and purple teaming.
You will also:
As a senior, lead penetration tests from scoping, through to delivery, reporting and debriefing.
Contribute to Quality Assurance of internally issued pen test reports.
Collaborate with the Defensive (Blue) team when conducting Purple Team exercises
Maintain knowledge of Cyber Security Threat Landscape, Attacks & Adversary TTPs
What are we looking for?
Essential
At least 2 years’ experience working in a full-time Penetration Testing role
Clear and demonstrable understanding of the Penetration Testing process
Willingness to stay up to date with the latest trends and attack paths
Wide range of testing experience
Strong Knowledge of commercial and the latest open-source industry standard tools
Strong knowledge of common infrastructure and security architectures
Understanding of the Cyber Kill Chain/MITRE ATT&CK framework
At least two of the following or equivalent certs/qualifications: Crest CRT CCT APP/INF, CRTO CRTL, OSCP OSEP OSWE, GPEN, HTB CPTS CBBH CAPE, PNPT
Strong demonstrated ability to take findings/vulnerabilities and articulate the actual business risk along with excellent reporting writing and client presentation skills to both technical and non-technical audiences
Desirable
Red Team/Purple Team experience
Software/Tool Development skills such as C/C++, C#, Python, Java, Go, Nim, Rust
We want to hire the whole version of you.
We are committed to ensuring that everyone feels accepted and welcome applicants from all backgrounds. If your experience looks different from what we’ve advertised and you believe that you can bring value to the role, we’d love to hear from you.
If you require any adjustments to the recruitment process, please let us know so we can help you to be at your best.
Please note that we reserve the right to remove adverts earlier than the advertised closing date. We encourage you to apply at the earliest opportunity.
