Senior Penetration Tester

What does this role do? 

Conduct tactical assessments requiring expertise in application security (web and mobile), threat analysis, internal and external network architecture, and a wide array of commercial and custom products. Perform security research and publishing content to contribute to the information security community.

  2

  Configure and safely utilize attack tools and tactics against authorized targets. Develop scripts, automation frameworks, and security tools to enhance testing capabilities. Conduct AI-focused penetration testing and implement emerging security assessment methodologies.

  3

Effectively communicate findings and strategic security recommendations to technical staff, executives, and legal counsel. Provide risk-appropriate guidance on vulnerability remediation and security best practices.

  4

Support business units launching new applications and services by conducting comprehensive security assessments to identify risks of compromise or information leakage.

  5

Write comprehensive formal security assessments using company standard reporting formats. Participate in client calls to review findings, discuss results, and provide remediation consultation and recommendations.

  6

Retest resolved security vulnerabilities and update reports with verification results. Mentor junior pentesters on assessment methodologies, tools, technologies, and emerging security best practices. Drive process improvements, tool optimization, and automation

Skill 1

Network penetration testing; Web application penetration testing; Thick client application security assessment; Mobile penetration testing (iOS and Android); Cloud penetration testing (AWS, Azure, GCP);; AI security testing and vulnerability assessment.

Skill 2

Develop and modify exploits and security tools. Proficient in at least one programming language (Python, Java, Node.js). Proficient in scripting languages including Python, PowerShell, Bash. Experience building automation

Experience 3

Experience with Red, Blue, or Purple team exercises. Hands-on experience with network operating systems (Windows, Linux, macOS), network protocols, virtual environments, cloud platforms (AWS, Azure, GCP), containerized environments, and mobile operating systems (iOS, Android).

Competency 4

Familiarity with defensive technologies including firewalls, IPS/IDS, SIEM, EPP, EDR, UEBA, data encryption. Understanding of AI/ML security controls, secure development practices. Strong communication and stakeholder management skills with ability to mentor junior staff and translate technical findings for non-technical audiences and executives.

Competency 5

Understanding of OWASP, MITRE ATT&CK framework, software development lifecycle (SDLC). Knowledge of CI/CD pipelines, security automation, DevSecOps practices, and emerging security trends.

Qualifications

• 1. High levels of collaboration, communication skills, stakeholder management and teamwork   2. Alignment with Experian’s purpose and core values, we look for ‘culture add’   3. Knowledge of common pen test and application security tools, such as Kali Linux, Metasploit, Burp Suite, Wireshark, Web Inspect, Network Mapper (NMAP), Nessus and others   4. Ideally Industry certifications such as CEH, OSCP, OSCE, OSWE, GPEN, GCIH, GWAPT, or GXPN   5. Fluent and proficient in English to enable delivery of verbal and written reports and presentations to both technical and executive audiences    

Experian is a global data and technology company, powering opportunities for people and businesses around the world. We operate across a range of markets, from financial services to healthcare, automotive, agribusiness, insurance, and many more. Experian invests in people and new advanced technologies to unlock the power of data. We have an amazing team of 25,200 people in 32 countries. 

Recruitment Fraud Awareness - Experian's recruitment process is conducted only through authorised channels. Recruitment communications will only be sent from an @experian.com email address. Experian will never ask candidates to make any payment as part of an application, interview, assessment, onboarding, or recruitment process. To apply for roles or verify opportunities, please visit experian.com/careers.

Our uniqueness is that we celebrate yours. Experian's people first, inclusive and purpose driven culture is multi award-winning; World's Best Workplaces™ 2025 (Fortune Global Top 25), Great Place To Work™ in 26 countries to name a few. Check out Experian Life on social or explore our Careers Site to understand why. Experian is also proud to be an Equal Opportunity and Affirmative Action employer. If you have a disability or special need that requires accommodation, please let us know at the earliest opportunity.

Experian Careers - Creating a better tomorrow together

Find out what its like to work for Experian by clicking here