Job Description
Lead Penetration TesterContract: Initial 6 monthsDay Rate: £700–£800 per dayIR35: Inside IR351 day per month on site, either Chesterfield or London.
About the RoleWe are looking for an experienced Lead Penetration Tester to take ownership of the end-to-end penetration testing process across applications, infrastructure and wider technology environments.
This is a hands-on role combining penetration testing expertise with the coordination and oversight of testing engagements, third-party suppliers, vulnerability remediation and security findings. You will be responsible for ensuring tests are appropriately scoped, executed to a high standard, and that resulting vulnerabilities are clearly documented, prioritised and driven through to resolution.
The role will involve working closely with internal engineering, DevOps, product and delivery teams, as well as third-party penetration testing providers and other stakeholders.
Key Responsibilities:
Lead the end-to-end penetration testing lifecycle, including scoping, planning, execution, reporting and remediation across applications, infrastructure and systems. Provide hands-on penetration testing expertise while coordinating and overseeing third-party testing providers.
Review and challenge penetration testing reports, assessing findings based on severity, exploitability, business impact and risk.
Work closely with engineering, DevOps, product and delivery teams to prioritise and drive vulnerabilities through to resolution within agreed SLAs.
Own the tracking and management of penetration testing findings in Jira, ensuring actions are assigned, monitored and closed.
Lead regular remediation discussions with internal stakeholders and third parties, escalating blockers and ensuring residual risks are appropriately recorded and accepted.
Ensure penetration testing and remediation activities align with relevant security standards, regulatory requirements and industry best practice, including OWASP, NIST, ISO 27001, PCI-DSS, GDPR and CAF.Ensure appropriate governance, documentation and evidence is maintained throughout the testing lifecycle.
Provide assurance over the quality and effectiveness of third-party penetration testing engagements.
Identify and implement improvements to penetration testing, vulnerability management and remediation processes.
Use testing outcomes, lessons learned and emerging threats to improve security controls and testing methodologies.
Essential ExperienceSignificant experience in penetration testing / offensive security, with the ability to lead complex testing engagements.
Strong hands-on understanding of penetration testing across applications, infrastructure and technology environments.
Proven experience managing the full penetration testing lifecycle, including scoping, planning, execution, reporting and remediation.
Experience overseeing and managing third-party penetration testing suppliers.
Strong ability to review, interpret and challenge penetration testing reports and technical findings.
Proven experience managing vulnerabilities and security defects through to remediation.
Experience working closely with engineering, DevOps, product and delivery teams. Strong stakeholder management skills, with the ability to translate technical vulnerabilities into clear business risks and required actions.
Experience using Jira or similar tooling to manage security findings and remediation activity.
Strong understanding of security risk assessment, vulnerability prioritisation and risk acceptance.
Knowledge of recognised penetration testing methodologies and security frameworks.
Desirable
ExperienceRelevant penetration testing/offensive security certifications such as CREST, OSCP, OSWE, GPEN or equivalent.
Experience operating within large, complex or highly regulated organisations.
Experience across cloud environments, particularly Azure and/or AWS.Experience with application, API, network, infrastructure and/or cloud penetration testing.
Familiarity with vulnerability management and security operations processes.
Experience working within environments subject to ISO 27001, PCI-DSS, GDPR or CAF requirements.
What We're Looking ForThe successful candidate will be someone who can combine strong technical penetration testing knowledge with excellent delivery and stakeholder management skills. You will be comfortable getting into the technical detail of penetration testing findings, while also taking ownership of the wider process, coordinating suppliers, challenging reports, managing Jira defects, engaging with delivery teams and ensuring vulnerabilities are driven through to closure.
This is particularly suited to a senior/lead-level penetration tester who wants ownership of the testing and remediation lifecycle, rather than someone focused solely on executing individual tests.
Lead Penetration Tester in London employer: Morson Edge
As a leading player in the Energy Sector, our company offers an exceptional work environment in Bridgwater, Somerset, where you can thrive as a Welding / NDT Field Engineer. We pride ourselves on fostering a collaborative culture that prioritises employee growth and development, alongside competitive daily rates and the potential for contract extensions until December 2026. Join us to be part of a dynamic team dedicated to making a meaningful impact in the energy industry.
