At a Glance
- Tasks: Conduct penetration testing and identify vulnerabilities in complex systems.
- Company: Join Thales, a global tech leader shaping the future of security.
- Benefits: Enjoy a performance bonus, half-day Fridays, and generous annual leave.
- Other info: Opportunities for international movement and clear pathways to leadership roles.
- Why this job: Make a real impact on national security while advancing your career.
- Qualifications: Hands-on experience in penetration testing and a degree in Computer Science or related field.
Location: Crawley, United Kingdom
Thales is a global technology leader with more than 83,000 employees on five continents. With over 7,500 people in the UK, operating across defence, space, aerospace, and digital security, we help build a future we can all trust. Thales supports the security and stability of our nation by providing extraordinary technology to our customers, as well as delivering social value to the UK with our products and services.
Join Thales at a pivotal time as we expand our Cyber Security capability across critical national infrastructure, defence, and aerospace programmes. As a Penetration Tester, you’ll play a key role in identifying vulnerabilities across complex systems and helping secure technologies that truly matter. From secure software to biometrics and encryption, our CDI technologies and services enable organisations to confidently authenticate identities and protect data with care and precision. We support businesses and governments in keeping people safe and enabling trusted services across personal devices, connected objects, the cloud and everything in between.
The Opportunity
You’ll work on high-impact projects, performing penetration testing across IT and OT environments while influencing secure design and risk mitigation strategies from early project stages through to delivery.
What You’ll Be Doing
- Conduct penetration testing across Windows, Linux, mobile (iOS/Android), web applications, and cloud environments
- Identify, exploit, and clearly communicate security vulnerabilities and risks
- Support accreditation and assurance activities on complex, high-security programmes
- Advise on security controls and mitigation strategies aligned to customer needs
- Contribute to governance frameworks, policies, and secure operating procedures
- Produce high-quality technical reports and through-life security documentation
- Act as a cybersecurity SME across projects, staying aligned with evolving regulations and standards
- Collaborate with internal teams, customers, and external stakeholders at all levels
- Support bid activities, including technical input and effort estimation
What We’re Looking For
- Hands‑on penetration testing experience across diverse platforms (IT and/or OT environments)
- Strong understanding of security testing methodologies and frameworks
- Experience producing clear, actionable technical reports
- Degree in Computer Science, Engineering, or equivalent experience
- Industry certifications such as CREST, OSCP, CEH, GPEN, GXPN (or similar)
Desirable Experience
- Background in Defence, Aerospace, Government, Nuclear, Transport, or other regulated industries
- Familiarity with compliance‑driven environments and secure system accreditation
Why Thales?
- Work on mission‑critical systems that protect national security and infrastructure
- Opportunities to move across domains, technologies, and international locations
- Clear pathways into technical leadership or people management
- Be part of a globally recognised engineering and technology organisation
Benefits
- Performance‑related bonus
- Half day every Friday, usually finishing around 13:00
- 28 days annual leave (plus bank holidays) with opportunity to buy up to 40 hours/year (pro rata)
- 24 hours volunteering paid for
- Private healthcare
- Pension scheme
Penetration Tester - Vulnerability Researcher employer: Thales
Thales is an exceptional employer, offering a dynamic work environment in Crawley where innovation meets social responsibility. With a strong commitment to employee development, you will have access to market-leading training and mentorship from industry experts, alongside competitive benefits such as private healthcare, a robust pension plan, and opportunities for career advancement within a diverse global organisation. Join us to contribute to cutting-edge projects in defence and aerospace while enjoying a supportive culture that values your growth and well-being.
StudySmarter Expert Advice🤫
We think this is how you could land Penetration Tester - Vulnerability Researcher
✨Get Involved in the Cybersecurity Community
Diving into the cybersecurity community is key for landing that full-time gig. Join forums like Reddit's r/cybersecurity or attend local meetups to connect with industry veterans and other job seekers. Networking is everything in this field—don’t just be a passive lurker!
✨Show Off Your Skills with Capture the Flag Competitions
Participate in Capture the Flag (CTF) competitions; these are not just a fun way to boost your skills but also a chance to showcase your talent to potential employers. Many companies, including Thales, love seeing candidates who actively engage in these challenges.
✨Tailor Your Online Presence
Make sure your LinkedIn and any professional profiles reflect your cybersecurity expertise. Share your projects, whether they’re personal or from a previous role, to catch the eye of hiring managers. This is how they’ll find your passion and commitment to the field!
✨Apply Directly Through Thales
Don’t forget to head straight to our website and check out any openings for cybersecurity roles at Thales. Applying directly can sometimes give you an edge, especially if you can mention that you've been following our work or engaging in the community.
We think you need these skills to ace Penetration Tester - Vulnerability Researcher
Some tips for your application 🫡
Show off your technical skills:In cybersecurity, it's crucial to highlight your technical prowess. Make sure your CV showcases specific skills like network security, penetration testing, or threat analysis. If you have relevant certifications (like CEH or CISSP), pop those on the front page to grab attention!
Tailor your portfolio for the role:Even for a full-time role, a portfolio can set you apart. If you've worked on any cybersecurity projects—be it CTF challenges, security assessments, or research papers—include these in your application. This demonstrates not just your skills, but also your hands-on experience!
Use real-world examples:When writing your cover letter, don’t just stick to your qualifications. Share real-world examples of how you’ve tackled security issues or vulnerabilities. This gives the hiring team at Thales insight into your practical problem-solving abilities and makes your application memorable.
Demonstrate your passion for cybersecurity:Cybersecurity is an ever-evolving field, so show us that you’re always learning! Mention any recent courses, webinars, or industry events you’ve attended. This not only exhibits your enthusiasm but also signals to Thales that you’re committed to staying ahead in the game.
How to prepare for a job interview at Thales
✨Sharpen Your Technical Skills
For a role in cybersecurity, it’s essential to be up-to-date with the latest tools and techniques. Brush up on your knowledge of firewalls, intrusion detection systems, and vulnerability assessment tools. Be ready to discuss specific scenarios where you’ve applied these skills, as hands-on experience can really set us apart in interviews.
✨Prepare for Scenario-Based Questions
Expect the interviewers at Thales to throw in some hypothetical situations to see how you’d handle them. Think about common security breaches or incidents and be prepared to explain how you would respond. This not only shows your problem-solving skills but also your understanding of real-world cybersecurity challenges.
✨Highlight Your Certifications
Certifications like CompTIA Security+, CISSP, or CEH can give you a significant edge in a full-time role in cybersecurity. Make sure to mention these during your interview and be prepared to discuss what you learned through those certifications and how they relate to the position at Thales.
✨Show Your Passion for Cybersecurity
Since you’re going for a full-time gig, showing genuine enthusiasm for the field can make all the difference. Share any personal projects, blogs, or communities you’re part of that relate to cybersecurity. This not only showcases your passion but also your commitment to staying engaged in this ever-evolving field.
