> Markdown version of [/jobs/ext/1634934-penetration-tester-check-team-member-ctm-web-app-infra](https://www.wearedevelopers.com/jobs/ext/1634934-penetration-tester-check-team-member-ctm-web-app-infra). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Penetration Tester | Check Team Member | Ctm | Web App | Infra

- **Company:** gb
Optimal IT Recruitment Ltd
- **Location:** London, UK (Remote available)
- **Salary:** £45,000.0 - £55,000.0
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Software System Penetration Testing, Microsoft Azure, Cyber Security, Comptia Pentest+ CE, Red Team (Cyber Security), Web Applications, Google Cloud, Cloud Platform System
- **Published:** July 22, 2026
- **Apply:** https://www.totaljobs.com/job/penetration-tester/optimal-it-recruitment-ltd-job107724262

## About the Role

* British passport holder or Indefinite Leave to Remain (ILR) -no sponsorship available
 * SC Eligible (must be able to obtain Security Clearance)
 * No right to work restrictions

Certifications & Status:

 * Current or previous CHECK Team Member (CTM / CSTM) status
 * Relevant industry certifications (OSCP, CRTO, PenTest+, or equivalent)

Experience:

 * Hands-on commercial penetration testing experience (web application and/or infrastructure)
 * Proven ability to scope, conduct, and report on engagements independently
 * Strong written English - you must be able to produce clear, client-ready reports
 * Comfortable working remotely and managing your own time and workload, * Experience with red team operations or adversarial simulation
 * Additional certs: CRTP, CRTO, CSTL, or similar advanced qualifications
 * Exposure to cloud environments (AWS, Azure, GCP)
 * Experience across a range of sectors (finance, public sector, healthcare, etc.)

??Important Notes

 * UK-based candidates only - fully remote but must be able to work UK hours
 * British passport or ILR required - no sponsorship under any circumstances
 * Must be SC Eligible - ability to obtain Security Clearance is a hard requirement

## Description

We're working with a well-regarded, specialist cyber security consultancy with a strong reputation in the UK market. This isn't a box-ticking operation - these are real practitioners, led by technical people, doing high-quality work for serious clients.

They're growing their pentesting team and need a strong mid-level tester who can hit the ground running. If you're currently CTM-certified (or previously held the status), comfortable across web app and infrastructure engagements, and want to work somewhere that actually invests in your development - this is worth a conversation.

At the top of the band, they're looking for someone currently active in CHECK work with a strong track record. If that's you, this will move fast.

What You'll Be Doing

 * Conducting web application and infrastructure penetration tests across a varied client base
 * Producing high-quality, client-facing reports that clearly communicate risk and remediation
 * Supporting CHECK-scope engagements where appropriate
 * Contributing to methodology, tooling, and internal knowledge sharing
 * Working collaboratively with a team of technically sharp, certified consultants


## Related Videos

- [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Developer Tools for Microsoft Azure](https://www.wearedevelopers.com/videos/450-developer-tools-for-microsoft-azure)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Cloud Run- the rise of serverless and containerization](https://www.wearedevelopers.com/videos/106-cloud-run-the-rise-of-serverless-and-containerization)
- [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders)

## Related Articles

- [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)
- [Best Job Boards for Remote Work for Developers](https://www.wearedevelopers.com/magazine/290-best-job-boards-for-remote-work-for-developers)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)
- [The Best Job Search Websites of 2025](https://www.wearedevelopers.com/magazine/368-the-best-job-search-websites-of-2025)
- [Guide for Expats Living in the UK](https://www.wearedevelopers.com/magazine/355-guide-for-expats-living-in-the-uk)