Senior Analyst – Penetration Tester

About the role

McGrathNicol is looking for a Senior Analyst with a strong offensive security background to deliver penetration testing engagements across infrastructure, web applications, cloud platforms and operational technology. You will work alongside experienced consultants, help clients understand security weaknesses and mentor junior team members.

Key responsibilities

• Conduct penetration testing, red‑team and threat‑emulation exercises for a variety of environments.
• Analyse technical weaknesses, validate risk and produce clear remediation recommendations.
• Perform code reviews and application security assessments, offering secure‑development guidance.
• Prepare high‑quality technical reports for both technical and non‑technical stakeholders.
• Collaborate with engagement managers to deliver projects on time and to high standards.

Required profile

• Minimum 3 years of hands‑on penetration testing or offensive security experience.
• Demonstrated ability in at least two testing domains such as web/API, mobile, infrastructure, cloud or red‑team operations.
• Strong written and verbal communication skills and the ability to work independently and within a team.

Required skills

• Offensive security methodologies and frameworks (MITRE ATT&CK, OWASP, NIST).
• Experience with Microsoft 365, Azure, AWS, GCP and hybrid infrastructures.
• Scripting/automation using Python, PowerShell or Bash.
• Relevant certifications (OSCP, OSWE, CRTP, CREST, etc.) are a plus.

What we offer

• Competitive annual bonus program and comprehensive training.
• Personalised mentorship, 26 weeks parental leave and additional leave options.
• Health, wellbeing and employee assistance programs.
• Opportunities for social and community engagement.