Senior Penetration Tester

We have an incredible opportunity to join us here at Phoenix Group as a Senior Penetration Tester to join our Threat Led Pen-Testing Team within our Information Security Department.  

Job Type:  Permanent  

Location: This role could be based in either our Telford or Edinburgh Office, with  hybrid working, 

Flexible working: All of our roles are open to part-time, job-share and other types of flexibility. We will discuss what is important to you and balancing this with business requirements during the recruitment process. You can read more about Phoenix Flex here. 

Closing Date: 05 June 2025

Salary and benefits:  £60,000 to £65,000 plus 16% bonus up to 32%, private medical cover, 38 days annual leave, excellent pension, 12x salary life assurance, career breaks, income protection, 3x volunteering days and much more 
 

Who are we?  

We want to be the best place that any of our 6,600 colleagues have ever worked. 
 
We’re the UK’s largest long-term savings and retirement business. We offer a range of products across our market-leading brands, Standard Life, SunLife, Phoenix Life and ReAssure. Around 1 in 5 people in the UK has a pension with us. We’re a FTSE 100 organisation that is tackling key issues such as transitioning our portfolio to net zero by 2050, and we’re not done yet. 

The role   

We are looking for a Senior Penetration Tester within our Threat led Pen-Testing team. In this role you will be conducting regular penetration tests ranging from web applications to infrastructure testing and purple teaming.  

You will also: 

As a senior, lead penetration tests from scoping, through to delivery, reporting and debriefing.  

Contribute to Quality Assurance of internally issued pen test reports.  

Collaborate with the Defensive (Blue) team when conducting Purple Team exercises 

Maintain knowledge of Cyber Security Threat Landscape, Attacks & Adversary TTPs 
 

What are we looking for? 

Essential  

At least 2 years’ experience working in a full-time Penetration Testing role 

Clear and demonstrable understanding of the Penetration Testing process 

Willingness to stay up to date with the latest trends and attack paths 

Wide range of testing experience 

Strong Knowledge of commercial and the latest open-source industry standard tools  

Strong knowledge of common infrastructure and security architectures 

Understanding of the Cyber Kill Chain/MITRE ATT&CK framework 

At least two of the following or equivalent certs/qualifications: Crest CRT CCT APP/INF, CRTO CRTL, OSCP OSEP OSWE, GPEN, HTB CPTS CBBH CAPE, PNPT 

Strong demonstrated ability to take findings/vulnerabilities and articulate the actual business risk along with excellent reporting writing and client presentation skills to both technical and non-technical audiences 

Desirable 

Red Team/Purple Team experience 

Software/Tool Development skills such as C/C++, C#, Python, Java, Go, Nim, Rust 

We want to hire the whole version of you. 

We are committed to ensuring that everyone feels accepted and welcome applicants from all backgrounds. If your experience looks different from what we’ve advertised and you believe that you can bring value to the role, we’d love to hear from you.  

 If you require any adjustments to the recruitment process, please let us know so we can help you to be at your best.  

Please note that we reserve the right to remove adverts earlier than the advertised closing date. We encourage you to apply at the earliest opportunity. 

Find out more about #LifeAtPhoenix  

Guide for Candidates: thephoenixgroup.pagetiger.com/guideforcandidates  

Find or get answers from our colleagues: www.thephoenixgroup.com/careers/talk-to-us