Security Penetration Tester / Senior Security Consultant

Job title: Security Penetration Tester / Senior Security Consultant

Role Overview

What does this role do? Conduct tactical assessments requiring expertise in application security (web and mobile), threat analysis, internal and external network architecture, and a wide array of commercial and custom products. Perform security research and publishing content to contribute to the information security community.

Configure and safely utilize attack tools and tactics against authorized targets. Develop scripts, automation frameworks, and security tools to enhance testing capabilities. Conduct AI-focused penetration testing and implement emerging security assessment methodologies.

Effectively communicate findings and strategic security recommendations to technical staff, executives, and legal counsel. Provide risk-appropriate guidance on vulnerability remediation and security best practices.

Support business units launching new applications and services by conducting comprehensive security assessments to identify risks of compromise or information leakage.

Write comprehensive formal security assessments using company standard reporting formats. Participate in client calls to review findings, discuss results, and provide remediation consultation and recommendations.

Retest resolved security vulnerabilities and update reports with verification results. Mentor junior pentesters on assessment methodologies, tools, technologies, and emerging security best practices. Drive process improvements, tool optimization, and automation

Skill 1Network penetration testing; Web application penetration testing; Thick client application security assessment; Mobile penetration testing (iOS and Android); Cloud penetration testing (AWS, Azure, GCP);; AI security testing and vulnerability assessment.

Skill 2Develop and modify exploits and security tools. Proficient in at least one programming language (Python, Java, Node.js). Proficient in scripting languages including Python, PowerShell, Bash. Experience building automationExperience

3Experience with Red, Blue, or Purple team exercises. Hands-on experience with network operating systems (Windows, Linux, macOS), network protocols, virtual environments, cloud platforms (AWS, Azure, GCP), containerized environments, and mobile operating systems (iOS, Android).

Competency 4Familiarity with defensive technologies including firewalls, IPS/IDS, SIEM, EPP, EDR, UEBA, data encryption. Understanding of AI/ML security controls, secure development practices. Strong communication and stakeholder management skills with ability to mentor junior staff and translate technical findings for non-technical audiences and executives.

Competency 5Understanding of OWASP, MITRE ATT&CK framework, software development lifecycle (SDLC). Knowledge of CI/CD pipelines, security automation, DevSecOps practices, and emerging security trends.

Experience and

Skills

• Qualifications1. High levels of collaboration, communication skills, stakeholder management and teamwork 2. Alignment with Experian’s purpose and core values, we look for ‘culture add’ 3. Knowledge of common pen test and application security tools, such as Kali Linux, Metasploit, Burp Suite, Wireshark, Web Inspect, Network Mapper (NMAP), Nessus and others 4. Ideally Industry certifications such as CEH, OSCP, OSCE, OSWE, GPEN, GCIH, GWAPT, or GXPN 5. Fluent and proficient in English to enable delivery of verbal and written reports and presentations to both technical and executive audiences

• About Experian

• Experian is a global data and technology company, powering opportunities for people and businesses around the world. We operate across a range of markets, from financial services to healthcare, automotive, agribusiness, insurance, and many more. Experian invests in people and new advanced technologies to unlock the power of data. We have an amazing team of 25,200 people in 32 countries.