{"id":3175307,"url":"https://alion.io/job/sainsburys-senior-is-tester","title":"Senior IS Tester","company":{"id":2631165,"name":"Sainsbury's","domain":"sainsburys.jobs","url":"https://alion.io/company/sainsburys-jobs","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"A","score":99,"open_postings":4,"ghost_share":0,"stale_share":0.25,"repost_share":0,"time_to_fill_p50_days":7,"computed_at":"2026-11-01T06:10:25Z"}},"role":"QA","role_family":"QA","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":65000,"max_usd":122000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":17},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"C#","optional":false},{"name":"Linux","optional":false},{"name":"LLM","optional":false},{"name":"OWASP","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"Windows","optional":false},{"name":"Agile","optional":true},{"name":"Checkmarx","optional":true},{"name":"Fortify","optional":true},{"name":"Scrum","optional":true},{"name":"Veracode","optional":true}],"status":"live","first_seen_at":"2026-10-23T15:41:46Z","employer_posted_date":"2026-10-23","last_verified_at":"2026-11-01T11:40:55Z","board_verified":true,"closed_at":null,"days_open":9,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":9},"description":"The big question: why on earth should a Tech professional like you work for a 150-year-old retail chain? Because we’re on a journey. Changing the way we operate. Learning to think nimble. Giving our teams the time and freedom they need to push boundaries. To create amazing systems and technologies. To give our colleagues and our customers even more incredible experiences.\nThere are thousands of experts to talk to and learn from. We’ve got data from billions of transactions for our teams to play with. Things get built here. They get made here. They hit customers and colleagues quickly. Welcome to the home of Sainsbury's Tech.\nAbout the Team\nOur Data Governance & Information Security team is at the heart of protecting the organisation’s systems, data, and people. We work across all areas of the business to identify risks, strengthen defences, and ensure compliance with industry standards and regulations.\nWe value accountability, curiosity, and continuous improvement, and we’re passionate about building a culture where security is second nature. Joining us means being part of a team that tackles evolving threats, drives awareness, and helps the organisation remain resilient and trusted.\nMore about the role:\nThe Senior Information Security Tester will be engaged in delivering Penetration Testing & related services and will:\nScope penetration testing for both internal and external facing systems\nTake ownership and perform a wide range of penetration tests in line with internal standards and SLAs, including detailed and actionable reporting through our reporting platform\nProvide expert feedback in several forums related to technical vulnerabilities and processes within and outside of the security testing team\nPerforming Quality Assurance on in-house reports, vulnerability database write-ups, and any related documentation related to the security testing team’s function\nImprove internal vulnerability database write-ups to increase overall quality of all reports\nBe able to assist other teams in understanding security vulnerabilities and implications through constructive conversations & meetings when engaged through security testing, or as part of the wider conversation\nPeriodically review external penetration tests as part of ongoing vendor evaluation, along with providing formal feedback for any issues and participating in resolution meetings\nProvide mentorship to others within the team, along with assisting to fill in any knowledge gaps when identified\nBe able to perform Purple Team activities as required, with Red Team capabilities a large advantage\nParticipate in reviewing bug bounty findings and providing feedback for issues which are of high severity, complexity, and exceeding a reward threshold\nHave the opportunity to provide advice and guidance associated with the planning, design, implementation and improvement of system security taking account of current best practice, legislation and regulation when necessary\nHelp shape the security testing process by providing feedback highlighting opportunities for improvement in efficiency and ways of working\nEssential:\nExtensive experience performing Web Application penetration tests\nExtensive knowledge of OWASP vulnerabilities, tools and methodologies\nStrong Experience performing Infrastructure penetration tests against Windows & Linux environments\nStrong Experience performing build reviews against Windows & Linux hosts, MacOS a bonus\nStrong technical writing ability to write penetration test reports for technical and non-technical audiences\nStrong reporting Quality Assurance skills \nAbility to work on their own with minimal supervision and deliver on time to budget\nDemonstrates extensive knowledge of good security practice covering the physical and logical aspects of information products, systems integrity and confidentiality\nAt least one of the following information security testing certifications OSWE, OSCP, GIAC or CREST (CRT or CCT)\nAbility to think methodically and logically through situations, problem solve and communicate well using both spoken and written word\nRemains visible to customers as the face of Security Testing to listen to their concerns and share these with others\nAbility to translate complex/technical issues clearly to meet the needs of the audience outside of a written report \nAbility to take responsibility, own the issue, resolve it (get the required result) and recognises how individual contributions impacts team delivery\nExperience performing Purple Team activities\nAdvantageous:\nExperience with AI & LLM penetration testing\nExperience performing Mobile penetration testing\nExperience performing Red Team activities such as phishing, social engineering, malware development and other offensive tooling development, along with knowledge of relevant frameworks\nExperience with AV & EDR Evasion\nExperience with scripting and programming languages such as C, CPP, C#, Python\nExtensive knowledge of PCI, ASV and SSDLC\nHolds industry respected certifications for any penetration testing or related functions for web applications, infrastructure, mobile, AI/LLM, Red Team, etc\nExpertise in defensive tools or systems which provides access security control (i.e. prevents unauthorised system access)\nCurrent Information Security qualifications/certifications e.g. CISSP, CISM, CRISC, CEH etc desirable but not essential\nExperience of using Static Application Security Testing (SAST) analysis tools such (e.g. HP Fortify, Veracode, Checkmarx)\nHas expert awareness of problem-solving procedures used for business-critical IT incidents, and a good awareness of their implications for a retail business\nAbility to balance the benefits of optimised security with the cost of providing it, to promote the best overall interests of the business\nMentoring experience assisting others in the team to improve their skills\nIn return you’ll get:\nColleague discount across the multi-brands - Sainsbury’s, Argos and Habitat\nHoliday allowance\nBonus scheme\nPension plan\nSpecial offers on gym memberships, restaurants, holidays, retail vouchers and more\nFlexible working and job share conversations are encouraged. Across our multi-brands, we’re proud to be an equal opportunities employer that champions a diverse and inclusive culture. If you’re reading this, even if you’re not 100% sure you’re there with your experience, we’d still love to hear from you. If you’d like to find out more head to Sainsbury's Tech\n We’d all like amazing work to do, and real work-life balance. That’s waiting for you at Sainsbury’s. Think about the scale it takes for us to feed the nation. The level of data, transactions and variety it involves. Then you’ll realise that ours is a modern software engineering environment because it has to be. We’ve made serious investment into a Tech Academy and into setting standards and principles. We iterate, learn, experiment and push ways of working such as Agile, Scrum and XP. So you can look forward to awesome opportunities in everything from AI to reusable tech.\n We are committed to being a truly inclusive retailer, so you’ll be welcomed whoever you are and wherever you work. Around here, there’s always the chance to try something new - whether that’s as part of an evolving team or somewhere else across the business - and we take development seriously and promise to support you. We also recognise and celebrate colleagues when they go the extra mile and, where possible, offer flexible working. When you join our team, we’ll also offer you an amazing range of benefits. Here are some of them:\nStarting off with colleague discount, you'll be able to get 10% off at Sainsbury's, Argos, TU and Habitat after 4 weeks. This increases to 15% off at Sainsbury’s every Friday and Saturday and 15% off at Argos every pay day. We've also got you covered for your future with our pensions scheme and life cover. You'll also be able to share in our success as you may be eligible for a performance-related bonus of up to 20% of salary, depending on how we perform.\nYour wellbeing is important to us too. You'll receive an annual holiday allowance, and you can buy additional holiday. We also offer other benefits that will help your money go further such as season ticket loans, interest free car loan of up to £10k, cycle to work scheme, health cash plans, pay advance (where you can access some of your pay before pay day) as well access to a great range of discounts from hundreds of other retailers. And if you ever need it there is also an Employee Assistance Programme, you will also be eligible for private healthcare too.\nMoments that matter are as important to us as they are to you which is why we give up to 26 weeks’ pay for maternity or adoption leave and up to 4 weeks’ pay for paternity leave.\nPlease see www.sainsburys.jobs for a range of our benefits (note, length of service and eligibility criteria may apply).","description_format":"text","description_chars":8880,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible schedule","Gym membership"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Transportation & Logistics","Logistics"],"lifecycle":[{"event":"open","at":"2026-10-23T19:46:27Z"}],"visa":[],"liveness":{"score":43,"band":"fade","label":"Fading","p_open":1,"p_active":0.79,"p_room":0.55,"age_days":8,"expected_fill_days":7,"reasons":["conf:3","velocity","win:tail","comp:brand"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/sainsburys-senior-is-tester","json_url":"https://alion.io/job/sainsburys-senior-is-tester.json","meta":{"generated_at":"2026-11-01T16:26:13Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":25384,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2631165},"rest":"https://alion.io/mcp/rest/get_company?id=2631165"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsainsburys-senior-is-tester"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsainsburys-senior-is-tester"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsainsburys-senior-is-tester"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sainsburys-senior-is-tester\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsainsburys-senior-is-tester"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3175307}},{"tool":"search_jobs","arguments":{"company":"sainsburys.jobs","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3175307},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}