> Markdown version of [/jobs/ext/2813294-senior-penetration-tester-ctm](https://www.wearedevelopers.com/jobs/ext/2813294-senior-penetration-tester-ctm). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Penetration Tester - CTM

- **Company:** Instil
- **Location:** Leeds, UK
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Active Directory, Software System Penetration Testing, Cloud Computing Security, Linux, Python (Programming Language), Kali Linux, Nmap, Web Applications, Scripting, Cloud Platform System, SC Clearance, Nessus, Burpsuite
- **Published:** September 10, 2026
- **Apply:** https://www.collegerecruiter.com/job/2840587271-senior-penetration-tester-ctm

## About the Role

This is a hands-on role where your expertise will help identify and remediate security weaknesses, while contributing to the development of our methodologies and mentoring junior testers. If you're passionate about offensive security and want to work on varied, challenging projects in a supportive environment, we'd love to hear from you., * CHECK Team Member (CTM) status

 * Current UK Security Clearance
 * At least 2+ years of penetration testing experience
 * Strong experience with web application and network penetration testing methodologies
 * In-depth knowledge of operating systems (Linux, Windows, Active Directory)
 * Familiarity with cloud environments and ability to perform cloud security reviews
 * Proficiency with tools such as BurpSuite Pro, Nmap, Nessus, and Kali Linux
 * Knowledge of scripting languages (Python, Shell, etc.), * CHECK Team Lead (CTL) status (Infrastructure or Applications)
 * Relevant certifications (OSCP, Cyber Scheme)
 * Experience with Hack the Box or Capture the Flag simulations



## Related Videos

- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker)
- [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders)
- [Capture the Flag 101](https://www.wearedevelopers.com/videos/416-capture-the-flag-101)
- [Discover the open source trio you didn’t expect: .NET and PostgreSQL on Linux](https://www.wearedevelopers.com/videos/2042-discover-the-open-source-trio-you-didn-t-expect-net-and-postgresql-on-linux)

## Related Articles

- [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Should senior developers refuse interview coding challenges?](https://www.wearedevelopers.com/magazine/29-should-senior-developers-refuse-interview-coding-challenges)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)