Penetration Tester

3 days ago


Edinburgh, Edinburgh, United Kingdom NatWest Group Full time £60,000 - £100,000 per year

Join our digital revolution in NatWest Digital X

In everything we do, we work to one aim. To make digital experiences which are effortless and secure.

So we organise ourselves around three principles: engineer, protect, and operate. We engineer simple solutions, we protect our customers, and we operate smarter.

Our people work differently depending on their jobs and needs. From hybrid working to flexible hours, we have plenty of options that help our people to thrive.

This role is based in the United Kingdom and as such all normal working days must be carried out in the United Kingdom.

Job Description
Join us as a Penetration Tester

  • Take on a new challenge and use your specialist knowledge to support the wider organisation in building and operating secure services that protect both colleagues and customers
  • You'll act as a subject matter expert as a Penetration Tester, this will involve identifying vulnerabilities across the bank's systems helping to keep our customers, staff, and data secure
  • You'll be joining an exciting and fast-paced area of the bank, where you can expect great exposure both for you and your work
  • You'll work from home the majority of the time, but you'll also spend a minimum of 2 days per month working from the Edinburgh office

What you'll do

As a Penetration Tester, you'll be responsible for conducting Web Application tests, looking for vulnerabilities with real business impact. NatWest Group have a wide range of systems and services ensuring a variety of test scenarios.

You'll also be:

  • Conduct Web Application and API testing independently and as part of a team for larger projects
  • Provide accurate reports with well-evidenced issues demonstrating the full impact of any identified vulnerabilities
  • Scope and refine requirements to deliver value for money and meaningful testing
  • Offer a high level of service to bank's internal project teams to assist with getting projects into production securely
  • Maintain a high level of skill and keep up to date with vulnerabilities in modern web application systems
  • Carry out tests on Networks, Mobiles, Thin Clients, and Cloud

The skills you'll need

To be successful in this role, you'll need knowledge of one or more security subject areas.

Additionally, you'll need:

  • Experience of OSCP/OSWA or CRT/CSTM or CWES/CPTS or Burp Suite Certified Practitioner
  • Demonstrable understanding of the OWASP Top Ten vulnerabilities, how to identify and exploit them
  • Familiarity with testing tools like Burp Suite and common bApp store extensions, plus Metasploit, nmap, and Nessus
  • Excellent verbal and written communication skills with the ability to adapt for technical and non-technical audiences
  • The ability to work independently while recognising when to collaborate or escalate


  • Edinburgh, Edinburgh, United Kingdom NatWest Group Full time £60,000 - £100,000 per year

    Join us as a Senior Security Penetration TesterTake on a new challenge and use your specialist knowledge to support the wider bank in building and operating secure services that protect both colleagues and customersYou'll act as a subject matter expert in a security related field, making sure that the security implications of the backlog are understood in...


  • Edinburgh, Edinburgh, United Kingdom RBS Full time £60,000 - £120,000 per year

    Join us as a Senior Security Penetration TesterTake on a new challenge and use your specialist knowledge to support the wider bank in building and operating secure services that protect both colleagues and customersYou'll act as a subject matter expert in a security related field, making sure that the security implications of the backlog are understood in...

  • Head of Test

    1 week ago


    Edinburgh, Edinburgh, United Kingdom AEGON Full time £848,800 - £1,267,200 per year

    Job Description SummaryJob DescriptionHead of TestPermanentLocation: Edinburgh, Witham or Peterborough (We believe in the power of in-person collaboration, and our hybrid model requires colleagues to be in the office a minimum of 40% of their time)Salary: A competitive salary from £84,480-£126,720 depending on the experience you can bringClosing date: 26th...


  • Edinburgh, Edinburgh, United Kingdom BlackRock Full time £45,000 - £60,000 per year

    About this roleAt BlackRock, information security is a top priority. The Information Security department is dedicated to maintaining the highest standards of security and compliance. We continuously evolve our practices to stay ahead of emerging threats and ensure the safety of our clients' information.The Edinburgh Information Security Internships has...


  • Edinburgh, Edinburgh, United Kingdom BlackRock Full time £40,000 - £80,000 per year

    Location:Edinburgh, ScotlandTeam:Information SecurityJob Requisition #: R257714Date posted: Nov. 03, 2025Job descriptionAbout this roleAt BlackRock, information security is a top priority. The Information Security department is dedicated to maintaining the highest standards of security and compliance. We continuously evolve our practices to stay ahead of...

  • Penetration Tester

    1 week ago


    Edinburgh, United Kingdom Royal London Group Full time

    **Job Title: Penetration Tester** **Contract Type: Permanent** **Location: Edinburgh/Alderley Edge** **Working style: Hybrid 50% home/office based** **Closing date: 1st June 2025** Over the last few years, we’ve been on a continuous improvement journey and are looking to expand the security and resilience team. These new roles will allow us to fully...


  • City of Edinburgh, United Kingdom Instil Full time

    Instil, Edinburgh, United KingdomOverviewWe are looking for a Senior Penetration Tester with CHECK to join our growing team. You will play a critical role in delivering high-quality penetration testing engagements across infrastructure, cloud, web, and mobile applications for a diverse range of clients, including software, fintech, manufacturing,...


  • Edinburgh, United Kingdom Phoenix Group Full time

    We have an incredible opportunity to join us here at Phoenix Group as a Senior Penetration Tester to join our Threat Led Pen-Testing Team within our Information Security Department. **Job Type**:Permanent **Location**:This role could be based in either our Telford or Edinburgh Office, with hybrid working, **Flexible working**:All of our roles are open to...


  • City of Edinburgh, United Kingdom Instil Full time

    A software engineering firm in Edinburgh is seeking a Senior Penetration Tester to deliver high-quality penetration testing across multiple environments. The role emphasizes identifying security weaknesses, developing methodologies, and mentoring junior testers. Ideal candidates should have at least two years of experience and a strong grasp of web and...


  • City of Edinburgh, United Kingdom NatWest Group Full time

    A leading financial institution in the UK is seeking a Senior Security Penetration Tester to perform penetration testing and security assessments. The successful candidate will have extensive experience in penetration testing, a strong understanding of security controls, and excellent communication skills. You'll work closely with project teams to ensure...