Senior Penetration Tester

Job Description We have an incredible opportunity to join us here at Phoenix Group as a Senior Penetration Tester to join our Threat Led Pen-Testing Team within our Information Security Department. Job Type: Permanent Location: This role could be based in either our Telford or Edinburgh Office, with hybrid working, Flexible working: All of our roles are open to part-time, job-share and other types of flexibility. We will discuss what is important to you and balancing this with business requirements during the recruitment process. You can read more about Phoenix Flex here. Closing Date: 05 June 2025 Salary and benefits : £60,000 to £65,000 plus 16% bonus up to 32%, private medical cover, 38 days annual leave, excellent pension, 12x salary life assurance, career breaks, income protection, 3x volunteering days and much more Who are we? We want to be the best place that any of our 6,600 colleagues have ever worked. We’re the UK’s largest long-term savings and retirement business. We offer a range of products across our market-leading brands, Standard Life, SunLife, Phoenix Life and ReAssure. Around 1 in 5 people in the UK has a pension with us. We’re a FTSE 100 organisation that is tackling key issues such as transitioning our portfolio to net zero by 2050, and we’re not done yet. The role We are looking for a Senior Penetration Tester within our Threat led Pen-Testing team. In this role you will be conducting regular penetration tests ranging from web applications to infrastructure testing and purple teaming. You Will Also As a senior, lead penetration tests from scoping, through to delivery, reporting and debriefing. Contribute to Quality Assurance of internally issued pen test reports. Collaborate with the Defensive (Blue) team when conducting Purple Team exercises Maintain knowledge of Cyber Security Threat Landscape, Attacks & Adversary TTPs What are we looking for? Essential At least 2 years’ experience working in a full-time Penetration Testing role Clear and demonstrable understanding of the Penetration Testing process Willingness to stay up to date with the latest trends and attack paths Wide range of testing experience Strong Knowledge of commercial and the latest open-source industry standard tools Strong knowledge of common infrastructure and security architectures Understanding of the Cyber Kill Chain/MITRE ATT&CK framework At least two of the following or equivalent certs/qualifications: Crest CRT CCT APP/INF, CRTO CRTL, OSCP OSEP OSWE, GPEN, HTB CPTS CBBH CAPE, PNPT Strong demonstrated ability to take findings/vulnerabilities and articulate the actual business risk along with excellent reporting writing and client presentation skills to both technical and non-technical audiences Desirable Red Team/Purple Team experience Software/Tool Development skills such as C/C++, C#, Python, Java, Go, Nim, Rust We want to hire the whole version of you. We are committed to ensuring that everyone feels accepted and welcome applicants from all backgrounds. If your experience looks different from what we’ve advertised and you believe that you can bring value to the role, we’d love to hear from you. If you require any adjustments to the recruitment process, please let us know so we can help you to be at your best. Please note that we reserve the right to remove adverts earlier than the advertised closing date. We encourage you to apply at the earliest opportunity. Find out more about Guide for Candidates: thephoenixgroup.pagetiger.com/guideforcandidates Find or get answers from our colleagues: www.thephoenixgroup.com/careers/talk-to-us #J-18808-Ljbffr