# Senior IS Tester

**Company**: Sainsbury's
**Location**: London, Greater London
**Experience**: senior
**Job type**: full-time
**Salary**: Competitive Plus Benefits
**Category**: Security
**Industry**: Retail

**Apply**: https://hdhe.fa.em3.oraclecloud.com/hcmUI/CandidateExperience/en/sites/CX/job/400046121?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_ae1a7bd7-c40

## Description

We are seeking a Senior Information Security Tester to join our Data Governance & Information Security team at Sainsbury's. As a Senior IS Tester, you will be responsible for delivering penetration testing and related services to protect the organisation's systems, data, and people.

The ideal candidate will have extensive experience performing web application penetration tests, knowledge of OWASP vulnerabilities, tools, and methodologies, and strong technical writing ability to write penetration test reports.

Key responsibilities include:

- Scoping penetration testing for internal and external facing systems

- Performing a wide range of penetration tests in line with internal standards and SLAs

- Providing expert feedback on technical vulnerabilities and processes

- Improving internal vulnerability database write-ups

- Assisting other teams in understanding security vulnerabilities and implications

- Participating in reviewing bug bounty findings and providing feedback

- Providing mentorship to others within the team

In return, you will receive a competitive salary plus benefits, including colleague discount, holiday allowance, bonus scheme, pension plan, and special offers on gym memberships, restaurants, holidays, and more.

## Skills

### Required
- Web Application penetration tests
- OWASP vulnerabilities
- Infrastructure penetration tests
- Technical writing
- Quality Assurance
- Information security testing certifications (OSWE, OSCP, GIAC or CREST)

### Nice to have
- AI & LLM penetration testing
- Mobile penetration testing
- Red Team activities
- AV & EDR Evasion
- Scripting and programming languages (C, CPP, C#, Python)
- PCI, ASV and SSDLC
- Industry respected certifications (CISSP, CISM, CRISC, CEH)
- Static Application Security Testing (SAST) analysis tools

---

Source: [Apply at hdhe.fa.em3.oraclecloud.com](https://hdhe.fa.em3.oraclecloud.com/hcmUI/CandidateExperience/en/sites/CX/job/400046121?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)