Penetration Tester - Vulnerability Researcher
Location: Crawley, United KingdomThales is a global technology leader with more than 83,000 employees on five continents. With over 7,500 people in the UK, operating across defence, space, aerospace, and digital security, we help build a future we can all trust. Thales supports the security and stability of our nation by providing extraordinary technology to our customers, as well as delivering social value to the UK with our products and services.Join Thales at a pivotal time as we expand our Cyber Security capability across critical national infrastructure, defence, and aerospace programmes. As a Penetration Tester, you’ll play a key role in identifying vulnerabilities across complex systems and helping secure technologies that truly matter.From secure software to biometrics and encryption, our CDI technologies and services enable organisations to confidently authenticate identities and protect data with care and precision. We support businesses and governments in keeping people safe and enabling trusted services across personal devices, connected objects, the cloud and everything in between.The Opportunity:You’ll work on high-impact projects, performing penetration testing across IT and OT environments while influencing secure design and risk mitigation strategies from early project stages through to delivery.What You’ll Be Doing:Conduct penetration testing across Windows, Linux, mobile (iOS/Android), web applications, and cloud environmentsIdentify, exploit, and clearly communicate security vulnerabilities and risksSupport accreditation and assurance activities on complex, high-security programmesAdvise on security controls and mitigation strategies aligned to customer needsContribute to governance frameworks, policies, and secure operating proceduresProduce high-quality technical reports and through-life security documentationAct as a cybersecurity SME across projects, staying aligned with evolving regulations and standardsCollaborate with internal teams, customers, and external stakeholders at all levelsSupport bid activities, including technical input and effort estimationWhat We’re Looking For:Hands-on penetration testing experience across diverse platforms (IT and/or OT environments)Strong understanding of security testing methodologies and frameworksExperience producing clear, actionable technical reportsDegree in Computer Science, Engineering, or equivalent experienceIndustry certifications such as CREST, OSCP, CEH, GPEN, GXPN (or similar)Desirable Experience:Background in Defence, Aerospace, Government, Nuclear, Transport, or other regulated industriesFamiliarity with compliance-driven environments and secure system accreditationWhy Thales?Work on mission-critical systems that protect national security and infrastructureOpportunities to move across domains, technologies, and international locationsClear pathways into technical leadership or people managementBe part of a globally recognised engineering and technology organisationBen...