Information Security Engineer (Penetration Tester)

About the role

Foresight Tech Group Limited is an enterprise cyber security services provider. You will join its Offensive Security Practice as a hands-on tester, working under the mentorship of senior engineers on authorised penetration tests. The role suits someone with solid fundamentals, genuine technical curiosity and the discipline that testing regulated financial systems demands.

Key responsibilities

• Execute authorised penetration tests across web applications, APIs, mobile applications and internal and external network infrastructure.
• Perform vulnerability assessments and secure configuration reviews of servers, network devices, databases and cloud workloads.
• Conduct remediation validation and retesting, confirming that fixes hold rather than merely suppressing symptoms.
• Write clear, reproducible findings explaining what was done, what happened, why it matters to the client and how to fix it.
• Map findings to client frameworks such as OWASP, MITRE ATT&CK and PCI DSS.
• Maintain engagement notes, evidence handling and chain of custody.
• Contribute to internal methodology, testing checklists and the knowledge base, build and maintain lab environments for skills development, and track relevant vulnerability disclosures.

Required profile

• 1+ year of hands-on professional experience in penetration testing or offensive security.
• Bachelor's degree in Computer Science, Information Technology, Information Security or a related field, or equivalent demonstrable practical skill.
• Willingness to travel.

Required skills

• Working knowledge of the OWASP Top 10, the OWASP Web Security Testing Guide and the OWASP API Security Top 10.
• Solid networking fundamentals: TCP/IP, DNS, HTTP and HTTPS, TLS, VPNs, firewalls and Active Directory.
• Scripting in at least one of Python, Bash or PowerShell, enough to automate a repetitive task and adapt existing tooling.

To apply, send your CV and a short technical write-up (no more than two pages) of something you have tested or broken by email to the company's HR team, with the subject line Penetration Tester. Only shortlisted candidates will be contacted.