Penetration Tester – Vulnerability Researcher

Thales

Penetration Tester identifying vulnerabilities in various platforms for Thales’ cybersecurity capabilities. Engage in high-impact projects for national infrastructure and defense security.

Posted 7/29/2026full-timeRemote • 🇬🇧 United KingdomMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in penetration testing across various platforms, including Windows, Linux, mobile, and cloud environments, while producing high-quality technical reports and supporting compliance-driven activities. Possesses strong knowledge of security testing methodologies and frameworks, along with the ability to advise on security controls and mitigation strategies.

Highest-signal resume keywords

Penetration TestingSecurity Testing MethodologiesTechnical Report WritingIndustry Certifications (CREST, OSCP, CEH, GPEN, GXPN)Compliance-Driven Environments

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Penetration TestingSecurity Vulnerability IdentificationRisk CommunicationTechnical Report WritingSecurity Controls AdvisoryGovernance FrameworksSecure Operating ProceduresAccreditation SupportExploit DevelopmentSecurity Testing Frameworks

Soft Skills

CollaborationCommunicationAdvisory SkillsStakeholder EngagementProblem-Solving

Certifications & Qualifications

CRESTOSCPCEHGPENGXPN

Industry Keywords

DefenceAerospaceGovernmentNuclearTransportRegulated IndustriesComplianceSecure System Accreditation

Tech Stack

Tools & technologies

AndroidCloudCyber SecurityiOSLinux

About the role

Key responsibilities & impact

Conduct penetration testing across Windows, Linux, mobile (iOS/Android), web applications, and cloud environments
Identify, exploit, and clearly communicate security vulnerabilities and risks
Support accreditation and assurance activities on complex, high-security programmes
Advise on security controls and mitigation strategies aligned to customer needs
Contribute to governance frameworks, policies, and secure operating procedures
Produce high-quality technical reports and through-life security documentation
Act as a cybersecurity SME across projects, staying aligned with evolving regulations and standards
Collaborate with internal teams, customers, and external stakeholders at all levels
Support bid activities, including technical input and effort estimation

Requirements

What you’ll need

Hands-on penetration testing experience across diverse platforms (IT and/or OT environments)
Strong understanding of security testing methodologies and frameworks
Experience producing clear, actionable technical reports
Degree in Computer Science, Engineering, or equivalent experience
Industry certifications such as CREST, OSCP, CEH, GPEN, GXPN (or similar)
Background in Defence, Aerospace, Government, Nuclear, Transport, or other regulated industries (Desirable)
Familiarity with compliance-driven environments and secure system accreditation (Desirable)

Benefits

Comp & perks

Performance-related bonus
Half day every Friday, usually finishing around 13:00
28 days annual leave (plus bank holidays) with opportunity to buy up to 40 hours/year (pro rata)
24 hours volunteering paid for
Private healthcare
Pension scheme
Life cover
24/7 Employee Assistance Program and access to mental wellbeing app
Employee discount shopping schemes on major brands and retailers
Gym membership discounts