Darktrace is a global leader in AI-driven cybersecurity, helping organizations stay ahead of evolving threats every day.
Darktrace was built on a genuinely differentiated idea: that Adaptive AI could detect and respond to novel, real-time cyber threats. That approach matters more than ever in the era of AI. Today, our customers depend on us to stay ahead.
At Darktrace, we are energized by that responsibility. We work across teams and rally around a shared goal. We own outcomes end to end - step in, step up and see things through without waiting to be asked. We make decisions with urgency, say the hard thing, and hold each other to high standards with care and directness. We move first and learn fast anticipating where our customers are going next, continuously challenging ourselves.
We invest in the skills, learning and opportunities that help people deliver at the level their roles demand, and reward the aptitude and curiosity to grow beyond them.
Our Values: Own It | Win as One | Raise Our Bar | Move First. Learn Fast
Job Description:
As a Penetration Tester within the internal cybersecurity team, you’ll play a key role in identifying and mitigating security risks across the organisation’s digital landscape. This position requires hands-on experience in offensive security and a deep understanding of network, application, and cloud-based vulnerabilities.
You’ll be responsible for conducting thorough penetration tests, simulating real-world attacks, and delivering actionable insights to both security and development teams. Collaboration and continuous learning are central to the role, ensuring our defences stay ahead of emerging threats.
Please note this is a hybrid role, with a compulsory attendance of 2 days a week in the London office.
What will I be doing:
- Performing penetration tests on web applications, networks, APIs, mobile apps, and cloud environments,
- Simulating real-world attack scenarios to assess system and infrastructure resilience,
- Producing detailed technical reports and executive summaries for stakeholders,
- Collaborating with internal teams to validate findings and support remediation efforts,
- Staying up to date with emerging threats, vulnerabilities, and offensive security techniques.
What experience do I need:
To succeed in this role, you’ll need a solid background in penetration testing or offensive security, along with hands-on experience using industry-standard tools and frameworks. A strong grasp of security principles and methodologies is essential, as is the ability to communicate findings clearly and effectively. Other qualifications and skills include:
- Proficiency with tools like Burp Suite, Nmap, Metasploit, Nessus, and Kali Linux, plus scripting skills in Python, Bash, or PowerShell,
- Strong understanding of OWASP Top 10, MITRE ATT&CK, CVSS scoring, and familiarity with cloud platforms (AWS, Azure, GCP) and container security,
- Relevant certifications such as OSCP, CREST CRT, or eCPPT are highly desirable, along with excellent written and verbal communication skills,
- The ability to mentor junior testers and contribute to internal tooling.
Benefits:
23 days’ holiday + all public holidays, rising to 25 days after 2 years of service,
Additional day off for your birthday,
Private medical insurance which covers you, your cohabiting partner and children,
Life insurance of 4 times your base salary,
Salary sacrifice pension scheme,
Enhanced family leave,
Confidential Employee Assistance Program,
Cycle to work scheme.
As a growing business strengthening its governance and controls, this role plays a part in supporting high standards of integrity and accountability.
Darktrace is an Equal Opportunity Employer. We consider all qualified applicants for employment without regard to race, color, religion, sex (including pregnancy, childbirth, and related medical conditions), sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, veteran or military status, or any other characteristic protected by applicable federal, state, or local law.
Darktrace is committed to providing reasonable accommodations to qualified individuals with disabilities in accordance with applicable laws. If you require a reasonable accommodation to participate in the application or interview process, please contact your Talent Partner.
Skills Required
- Hands-on penetration testing / offensive security experience
- Proficiency with Burp Suite
- Proficiency with Nmap
- Proficiency with Metasploit
- Proficiency with Nessus
- Experience using Kali Linux
- Scripting skills in Python
- Scripting skills in Bash
- Scripting skills in PowerShell
- Strong understanding of OWASP Top 10
- Familiarity with MITRE ATT&CK
- Knowledge of CVSS scoring
- Familiarity with cloud platforms (AWS, Azure, GCP)
- Familiarity with container security
- Excellent written and verbal communication skills
- Ability to produce detailed technical reports and executive summaries
- Ability to mentor junior testers and contribute to internal tooling
- Hybrid attendance: compulsory 2 days per week in London office
- Relevant certifications such as OSCP, CREST CRT, or eCPPT
Darktrace Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Darktrace and has not been reviewed or approved by Darktrace.
-
Healthcare Strength — Healthcare coverage is considered strong in the U.S., with employer-paid medical, dental, and vision noted alongside good networks. Plan quality stands out as a core strength of the package.
-
Leave & Time Off Breadth — Time off typically includes around 20–21 days of PTO plus paid holidays, with mentions of an additional birthday day. Parental and family leave are also described as part of the offering.
-
Affordable Benefits — Employer-paid health coverage for employees—often extended to dependents—reduces premium costs. This makes core medical benefits more financially accessible.
Darktrace Insights
What We Do
Darktrace, a global leader in cyber security AI, delivers world-class technology that protects over 5,500 customers worldwide from advanced threats, including ransomware and cloud and SaaS attacks. The company’s fundamentally different approach applies Self-Learning AI to enable machines to understand the business in order to autonomously defend it. Headquartered in Cambridge, UK, the company has 1,500 employees and over 30 offices worldwide. Darktrace was named one of TIME magazine’s ‘Most Influential Companies’ for 2021.
