Penetration Tester

Sophos

Penetration Tester enhancing security of Sophos cybersecurity solutions through rigorous assessments. Collaborating with teams to address vulnerabilities and bolster protection across applications and infrastructure.

Posted 4/27/2026full-timeRemote • 🇬🇧 United KingdomMid-LevelSeniorWebsite

Tech Stack

Tools & technologies

AWSAzureCyber SecurityEC2JavaScriptPHP

About the role

Key responsibilities & impact

Organize, plan and deliver penetration tests against Sophos web applications across a wide range of technologies
Organize, plan and deliver penetration tests against the Sophos infrastructure including on-premise networks, AWS/Azure and virtual environments
Use AI-assisted workflows (including internal agents/skills where available) to augment penetration testing activities and improve coverage and efficiency, with appropriate oversight and review
Assist in the scoping, planning and delivery of pentests by 3rd party vendors
Disseminate results to teams throughout the business
Work closely with the wider Cybersecurity team to develop common goals and outcomes

Requirements

What you’ll need

A solid background in both application and infrastructure penetration testing
Familiarity with common web technologies (PHP, Javascript, API etc)
Good knowledge of offensive techniques, OWASP & MITRE ATT&CK frameworks
Experience working with or assessing systems that incorporate AI or LLMs, including an understanding of common AI‑related security risks and abuse scenarios
Experience in delivery of security testing projects
Practical knowledge of AWS technologies (S3, EC2, IAM, Lambda etc)
Good interpersonal & networking skills
Industry recognised ethical hacking qualifications: OSCP, GPEN or equivalent

Benefits

Comp & perks

Sophos operates a remote-first working model
Our people – we innovate and create, all of which are accompanied by a great sense of fun and team spirit
Employee-led diversity and inclusion networks that build community and provide education and advocacy
Annual charity and fundraising initiatives and volunteer days for employees to support local communities
Global employee sustainability initiatives to reduce our environmental footprint
Global fitness and trivia competitions to keep our bodies and minds sharp
Global wellbeing days for employees to relax and recharge
Monthly wellbeing webinars and training to support employee health and wellbeing

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

penetration testingoffensive techniquesweb technologiesAI security riskssecurity testing projectsAWS technologiesinfrastructure testingapplication testingOWASPMITRE ATT&CK

Soft Skills

interpersonal skillsnetworking skillsorganizational skillscommunication skills

Certifications

OSCPGPEN