At a Glance
- Tasks: Conduct penetration testing on web, mobile, and API applications for diverse clients.
- Company: Join Cytix, a dynamic team revolutionising application security.
- Benefits: Unlimited holiday, flexible hybrid work, private healthcare, and enhanced family leave.
- Other info: Opportunity to attend top security conferences and be part of a growing team.
- Why this job: Make a real impact in application security while shaping the future of software.
- Qualifications: 2+ years in Penetration Testing or Application Security with strong communication skills.
The predicted salary is between 63000 - 77000 £ per year.
In this role, you won't be confined to traditional "4+1" web applications.
We've broken away from the constraints of CHECK or CE+ standards, and we're not interested in producing lengthy PDF reports.
Instead, our focus is on seamlessly integrating continuous penetration testing into our customers' Software Development Life Cycle (SDLC).
What you'll do: Pentesting web applications, APIs, mobile applications, etc for our clients across a range of industries.
Acting as the subject matter expert on application security, working with stakeholders of both a technical and non-technical nature to assist in support in vulnerability remediation and prevention.
Acting as the go to point of contact for all things related to related to application security.
Working with our in-house development team to build a next generation Application Security product.
Helping to keep the Cytix platform secure by performing regular penetration testing.
Collaborating with other teams in the business to ensure our clients get the best product and service experience possible.
What you'll bring 2+ years in Penetration Testing, Application Security Engineering, or a similar offensive security role.
A passion for all things App Sec, you're great at finding vulnerabilities in applications and demonstrating their impact.
Ability to work independently and take ownership over service delivery for clients.
Comfortable working a smaller environment where decision are made quickly and pragmatically.
Solid communication and consulting skills.
What you'll get Time off that works for you: Unlimited holiday policy, including a guaranteed 33 days plus your birthday off Flexible hybrid working: Work in a way that helps you do your best work, while staying connected with the team.
A stake in what we're building: Eligible employees can participate in our EMI share option scheme.
Healthcare that goes further: After one year's service, access private healthcare through Vitality, including dental, optical, hearing and therapy cover.
More ways to get around: Access our company car salary-sacrifice scheme.
Support for growing families: Enhanced maternity and paternity leave.
Opportunities to attend security conferences including BSides, OWASP Chapters and Black Hat Europe / USA About Cytix Software never stops changing.
Teams ship new code every day, through tickets, pull requests, releases, and increasingly with AI in the mix, but the way security keeps up with all that change hasn't really moved on.
That's the problem we're solving.
Cytix helps organisations understand which software changes actually matter, what should happen next, and how to prove the right call was made.
Security understood, in other words.
We're a small team with big plans, so every person we hire genuinely shapes what Cytix becomes.
That's why we're upfront about our five values: we interview for all of them, and they matter to us more than a perfect CV.
They're things you do, not things you are, so have a read and see if they sound like you.
Make the first move.
When the goal is clear but the path isn't, you get moving rather than waiting for perfect instructions.
If you're blocked, you make a sensible call, say what you're assuming, and explain how you'd course-correct.
We'd rather you act and be slightly wrong than sit still.
Find the smarter path.
You ask why before how.
You dig into what the real problem is instead of just building what the spec says, and you're happy to question 'that's how it's always been done' when the reason behind it has gone stale.
See it through.
When something's yours, it lands.
No loose ends, no surprises for whoever picks it up next.
You keep people posted when things change, and if something falls between roles, you catch it.
Raise the bar.
You do the best job possible in the time you've got, whether that's a day or a month.
Sometimes that means deep craft; sometimes the smartest move is quick and scrappy.
It's about good judgement, and we hold each other to it without blame or politics.
Play to win.
You care about the mission but don't take yourself too seriously.
You say 'I' when things go wrong and 'we' when they go right, trust teammates to do things their own way, and bring a bit of humour when the pressure's on.
Sound like you on a normal working day?
We'd love to meet you. #J-18808-Ljbffr
Penetration Tester employer: Cytix Ltd
Cytix is an exceptional employer that fosters a dynamic and inclusive work culture, where innovation and collaboration are at the forefront. With unlimited holidays, share options, and a dog-friendly office, employees enjoy a supportive environment that prioritises well-being and personal growth. As part of a small yet ambitious team in Manchester, you'll have the unique opportunity to shape the future of application security while working on cutting-edge projects that truly make a difference.
StudySmarter Expert Advice🤫
We think this is how you could land Penetration Tester
✨Get Involved in the Cybersecurity Community
Diving into the cybersecurity community is key for landing that full-time gig. Join forums like Reddit's r/cybersecurity or attend local meetups to connect with industry veterans and other job seekers. Networking is everything in this field—don’t just be a passive lurker!
✨Show Off Your Skills with Capture the Flag Competitions
Participate in Capture the Flag (CTF) competitions; these are not just a fun way to boost your skills but also a chance to showcase your talent to potential employers. Many companies, including Cytix Ltd, love seeing candidates who actively engage in these challenges.
✨Tailor Your Online Presence
Make sure your LinkedIn and any professional profiles reflect your cybersecurity expertise. Share your projects, whether they’re personal or from a previous role, to catch the eye of hiring managers. This is how they’ll find your passion and commitment to the field!
✨Apply Directly Through Cytix Ltd
Don’t forget to head straight to our website and check out any openings for cybersecurity roles at Cytix Ltd. Applying directly can sometimes give you an edge, especially if you can mention that you've been following our work or engaging in the community.
We think you need these skills to ace Penetration Tester
Some tips for your application 🫡
Show off your technical skills:In cybersecurity, it's crucial to highlight your technical prowess. Make sure your CV showcases specific skills like network security, penetration testing, or threat analysis. If you have relevant certifications (like CEH or CISSP), pop those on the front page to grab attention!
Tailor your portfolio for the role:Even for a full-time role, a portfolio can set you apart. If you've worked on any cybersecurity projects—be it CTF challenges, security assessments, or research papers—include these in your application. This demonstrates not just your skills, but also your hands-on experience!
Use real-world examples:When writing your cover letter, don’t just stick to your qualifications. Share real-world examples of how you’ve tackled security issues or vulnerabilities. This gives the hiring team at Cytix Ltd insight into your practical problem-solving abilities and makes your application memorable.
Demonstrate your passion for cybersecurity:Cybersecurity is an ever-evolving field, so show us that you’re always learning! Mention any recent courses, webinars, or industry events you’ve attended. This not only exhibits your enthusiasm but also signals to Cytix Ltd that you’re committed to staying ahead in the game.
How to prepare for a job interview at Cytix Ltd
✨Sharpen Your Technical Skills
For a role in cybersecurity, it’s essential to be up-to-date with the latest tools and techniques. Brush up on your knowledge of firewalls, intrusion detection systems, and vulnerability assessment tools. Be ready to discuss specific scenarios where you’ve applied these skills, as hands-on experience can really set us apart in interviews.
✨Prepare for Scenario-Based Questions
Expect the interviewers at Cytix Ltd to throw in some hypothetical situations to see how you’d handle them. Think about common security breaches or incidents and be prepared to explain how you would respond. This not only shows your problem-solving skills but also your understanding of real-world cybersecurity challenges.
✨Highlight Your Certifications
Certifications like CompTIA Security+, CISSP, or CEH can give you a significant edge in a full-time role in cybersecurity. Make sure to mention these during your interview and be prepared to discuss what you learned through those certifications and how they relate to the position at Cytix Ltd.
✨Show Your Passion for Cybersecurity
Since you’re going for a full-time gig, showing genuine enthusiasm for the field can make all the difference. Share any personal projects, blogs, or communities you’re part of that relate to cybersecurity. This not only showcases your passion but also your commitment to staying engaged in this ever-evolving field.
