> Markdown version of [/jobs/ext/2252484-penetration-tester](https://www.wearedevelopers.com/jobs/ext/2252484-penetration-tester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Penetration Tester

- **Company:** Colossus Recruitment
- **Location:** West Midlands, UK
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Artificial Intelligence, Software System Penetration Testing, Sound Recording and Reproduction, Bash Shell, Data Security, Linux, Python (Programming Language), Open Web Application Security, Windows PowerShell, Scripting, Mitre Att&ck, GWAPT, Information Technology
- **Published:** August 26, 2026
- **Apply:** https://www.collegerecruiter.com/job/2815153010-penetration-tester

## About the Role

* Experience in penetration testing across multiple domains.
 * Working at a cyber team consulting team delivering CREST-aligned security services
 * Strong knowledge of OWASP Top 10, PTES, MITRE ATT&CK.
 * Proficiency in Linux/Windows and scripting (Python, PowerShell, Bash).
 * Excellent communication and reporting skills.

Certifications

 * CREST CPSA or CRT, OSCP (essential)
 * OSEP, OSWE, GWAPT, GPEN, CHECK (desirable)

## Description

Overview

Penetration Tester - UK Remote Linux / Windows Python, PowerShell, Bash

Are you passionate about ethical hacking and ready to take your skills to the next level? We're hiring a Penetration Tester to join a growing cyber team delivering CREST-aligned security services. You'll simulate real-world attacks, uncover vulnerabilities, and help clients strengthen their defenses - all while working with cutting-edge tools and frameworks.

Responsibilities

 * Perform web, infrastructure, wireless & cloud penetration tests (OWASP, PTES).
 * Scope engagements and define testing objectives with clients.
 * Identify, exploit, and report vulnerabilities with clarity and precision.
 * Provide actionable remediation advice.
 * Stay ahead of emerging threats and tools.

Qualifications

 * Experience in penetration testing across multiple domains.
 * Working at a cyber team consulting team delivering CREST-aligned security services
 * Strong knowledge of OWASP Top 10, PTES, MITRE ATT&CK.
 * Proficiency in Linux/Windows and scripting (Python, PowerShell, Bash).
 * Excellent communication and reporting skills.

Certifications

 * CREST CPSA or CRT, OSCP (essential)
 * OSEP, OSWE, GWAPT, GPEN, CHECK (desirable)

Why Join?

 * Diverse, challenging projects
 * Career development aligned with SFIA Level 5
 * Supportive, collaborative team culture

Application details

All our roles are UK based. When submitting your application to Colossus, please ensure the following:

 * Your CV has your address and postcode.
 * You also have your correct phone number and email address so we can contact you asap regarding your application.
 * For confidentiality purposes, please remove any reference contact phone number's and email address details from your CV.

Seniority level

 * Associate

Employment type

 * Full-time

Job function

 * Information Technology

Industries

 * Sound Recording and Data Security Software Products

Referrals increase your chances of interviewing at Colossus Recruitment by 2x

Sign in to set job alerts for "Penetration Tester" roles.

We're unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [It's a (testing) trap! - Common testing pitfalls and how to solve them](https://www.wearedevelopers.com/videos/1193-it-s-a-testing-trap-common-testing-pitfalls-and-how-to-solve-them)
- [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script)
- [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 182: GPT5 Prompts, MCP Vulnerabilities, Code Traps](https://www.wearedevelopers.com/magazine/622-dev-digest-182-gpt5-prompts-mcp-vulnerabilities-code-traps)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)