Penetration Tester UK

Penetration Tester, Remote, £60K-£80K, Must be eligible for SC (5 years UK residency)

If you're passionate about penetration testing and eager to grow in a supportive and inclusive environment, we'd love to hear from you.

You'll play a vital role in helping clients detect, understand and manage their security risks. You'll be responsible for undertaking rigorous tests that identify vulnerabilities which are present in the IT infrastructure, applications and networks on which our client's businesses rely. You'll employ both manual and automated techniques to simulate real world attacks which help our clients assess their security posture against any potential threats to their business. You'll also be expected to keep your knowledge of the ever-evolving threat landscape up-to-date and adhere to ethical guidelines, especially when handling sensitive data.

As well as having proven technical skills, you'll also need to demonstrate the strong communication skills needed to describe complex findings to a range of different, often non-technical, stakeholders.

Your role

Being certified as a CHECK Team Member (CTM) or CHECK Team Leader is essential for this role. As a member of this team, you'll deliver high quality penetration testing and consultancy services as well as a full range of security assessments (including specialist areas and IT Health Checks) in line with company policies, core values, methodologies, and commercial expectations.

What You'll Need:

Technical Proficiencies: Strong working knowledge of testing platforms like Kali Linux, Burp Suite, Metasploit, Nmap.

Scripting Coding: Ability to read and write code in Scripting languages like Python or PowerShell

Communication: Exceptional verbal and written communication skills to translate complex cyber threats into business terms for non-technical leadership

Certifications Compliance: Relevant certifications (eg, OSCP, Crest, CTM)

Good knowledge of multiple Operating Systems (OS) including Windows.NIX.

Ability to configure network devices, Firewalls, IDS/IPS devices and wireless technologies.

Good understanding of common security standards and regulatory compliance such as GDPR, ISO27001 and PCI DSS.

Experience of testing AI/LLMs is desirable but not essential.

Excellent written and verbal communication skills (includes writing detailed reports and providing clear recommendations for remediation).

Proven organisation skills which include working under pressure and dealing with ambiguity to meet deadlines.

Ability and willingness to work effectively and positively within a team eg collaborating by sharing knowledge and skills

Willingness to travel to client locations across the UK.