**Role & seniority: ** Web Application Penetration Tester (experienced; taking the “next step” in career)

**Location & work type: ** UK, Remote (primarily remote; some on-site work possible with travel)

**Stack/tools (implied/likely): **

Web app pentesting tooling & methodologies (not explicitly listed)
Certifications mentioned: CREST, OSCP
Top 3 responsibilities:
1. Deliver web application penetration testing engagements against defined scope; assess potential vulnerabilities thoroughly.
2. Collaborate on more complex engagements; document findings and process clearly for handover to other testers.
3. Produce customer-ready penetration testing reports: translate technical findings into impact, exploitability, and actionable recommendations.
Must-have skills:
- In-depth, practical knowledge of web application vulnerabilities and attack techniques.
- Ability to select and apply appropriate web pentesting tools/techniques/methodologies.
- Strong technical communication and report writing focused on customer impact.
- Capability to work both solo (smaller projects) and as a team player (larger projects).
Nice-to-haves:
- Penetration testing certifications such as CREST and OSCP.
- Interest in expanding skillset beyond web (e.g., other penetration testing types).

Full Description

Web Application Penetration Tester

Location: UK, Remote

Salary: £35,000 - £45,000

About Us Akimbo Core is a company in the Cyber security space with a strong focus on Penetration Testing and cybersecurity consultancy. Our offering is due to be expanded further with the advent of our unique security platform and various cybersecurity tools. The company culture is one of technical expertise, competence, and customer service. Our reputation is excellent and is something that we are keen to maintain. We are seeking to recruit an experienced Penetration Tester to a very exciting, dynamic, open-ended role with huge development opportunities. We’re looking to build the best team in the industry.

The Role We’re looking for an experienced web application penetration tester who is looking to take the next step in their career. Successful completion of our interview process hinges on your ability to showcase your knowledge of technical security vulnerabilities within web applications and a desire to expand your skillset to other types of penetration testing. You should possess in-depth knowledge and practical expertise in the tools, techniques, and methodologies relevant to web application penetration testing. Delivering Penetration Testing Engagements We’re looking for a penetration tester who can take a given scope and perform a thorough assessment of potential security vulnerabilities. Whilst we like to work on projects collaboratively, many smaller projects are performed solo. Collaborating on Complex Projects For more complex projects, especially those requiring a range of skills, we like to work collaboratively on the scope. So you’ll need to be a good team player and you’ll need to be able to document your work well so that it can be handed over to another tester. Producing Quality Reports to Customers Whilst exploiting vulnerabilities is the best part of our job, it’s useless to the customer unless you can effectively explain the potential impact and exploitability of all discovered vulnerabilities. A critical aspect of the role involves breaking down technical vulnerability information into concise and actionable reports.

What to Expect Akimbo deliver a range of security assessments for a diverse customer base, meaning that no two projects and no two weeks are alike. Whilst the majority of our work is conducted remotely, there are opportunities for on-site projects with customers if they desire and some travel will be required as part of the role. The variety of projects will ensure that you can continuously expand your skill set and adapt to evolving security landscapes.

About You We don't have hard requirements like needing a degree, but let us know if your application what sets you aside from the other candidates. If you hold certifications from organisations such as CREST and OSCP then that's great, let us know.