Penetration Tester

WPP
United Kingdom
Workplace: HybridFull timeFunction: Administration & Executive AssistanceSkills: ["Communication","Stakeholder management","Pragmatism"]

Embed security across DTS products and platforms as a hands-on security engineering lead. Review product designs and APIs, run threat models and security design reviews, and coordinate offensive testing including penetration tests and red/purple team exercises. Own practical SDLC security adoption (SAST/DAST/SCA, scanning, vulnerability triage) and provide adversarial assurance for AI and agentic workflows, helping teams remediate issues without slowing delivery.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
WPP
WPP
2 months ago

Penetration Tester

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 16 hours agoStatus: Live

Job Summary

Embed security across DTS products and platforms as a hands-on security engineering lead. Review product designs and APIs, run threat models and security design reviews, and coordinate offensive testing including penetration tests and red/purple team exercises. Own practical SDLC security adoption (SAST/DAST/SCA, scanning, vulnerability triage) and provide adversarial assurance for AI and agentic workflows, helping teams remediate issues without slowing delivery.
Location: United Kingdom
Workplace: Hybrid
Employment Type: Full time
Job Function: Administration & Executive Assistance
Seniority: Sr. Manager level

Key Responsibilities

  • •Provide hands-on security support across DTS products and engineering teams, including reviewing designs, APIs, services, and integrations.
  • •Embed security into the SDLC by defining secure engineering standards and supporting secure coding and CI/CD security controls.
  • •Run threat modelling sessions and security design reviews, assessing authentication/authorization, API exposure, data flows, and abuse cases.
  • •Coordinate offensive and adversarial testing, including hands-on security testing and external penetration tests, and support red/purple team exercises.
  • •Perform vulnerability triage and remediation support, validating fixes and feeding material risks into governance and risk tracking.

Pay and Benefits

Schedule:4-Day Week

Key Requirements

  • •Strong hands-on experience in application security, product security, offensive security, security engineering, or penetration testing.
  • •Good understanding of modern software engineering, APIs, SaaS platforms, distributed systems, and cloud-native applications.
  • •Experience running threat modelling and secure design reviews.
  • •Practical knowledge of application and API security risks (authentication, authorization, tenant isolation, injection, data leakage, privilege escalation, supply chain risk).
  • •Experience using security testing tools and techniques across web applications, APIs, cloud services, and CI/CD pipelines, including SAST/DAST/SCA and scanning workflows.
Skills:CommunicationStakeholder managementPragmatism
Languages:English
Tech Stack:APIsCI/CDSASTDASTSCASecrets scanningDependency scanningContainer scanningSecurity design reviewsThreat modellingPenetration testingRed teamPurple teamAIAgentic workflows

Company Brief

WPP
Global marketing and communications services group offering advertising, media investment management, branding, public relations, and digital services to multinational clients across industries.
Industry: Advertising Media Groups
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: London, United Kingdom
Founded: 1971
WebsiteLinkedIn