Penetration Tester

• We deliver high-quality penetration testing and security consultancy services, including specialist assessments and IT Health Checks.
• We perform network, web and mobile application, API, and cloud environment penetration testing.
• We use manual and automated techniques to simulate real-world cyberattacks, including privilege escalation and social engineering.
• We produce accurate technical reports, executive summaries, scopes, and proposals.
• We engage with a range of stakeholders, both technical and non-technical, to ensure they understand our findings.
• We ensure our work remains relevant, confidential, aligned with QA standards, and meets client and company expectations.
• We keep our technical expertise current by staying up to date with emerging threats, technologies, vulnerabilities, and methodologies.
• We share knowledge across the team, participate in research, and contribute to initiatives that improve our capabilities.
• We plan, create, and implement new testing methods, scripts, and customised attack vectors.
• We document vulnerabilities, associated risk levels, and remediation steps, and present these findings to stakeholders.

Technologies:

• AI
• API
• Cloud
• Linux
• Mobile
• Network
• PowerShell
• Python
• Security
• Web
• Windows

More:

We are an expanding niche cyber consultancy offering a fully remote opportunity for a Penetration Tester with a salary of £60K to £80K. We provide a supportive and inclusive environment where you can grow your career while helping our clients detect, understand, and manage security risks. This is a security-cleared role requiring SC Clearance eligibility, and it includes the opportunity to work with a collaborative team, contribute to service development, and travel to client locations across the UK.

• We require you to be eligible for SC Clearance, as this is a security-cleared role.
• We require certification as a CHECK Team Member (CTM) or CHECK Team Leader.
• We require proven experience in a penetration testing role as a certified CTM.
• We would like you to have strong working knowledge of tools and platforms such as Kali Linux, Burp Suite, Metasploit, and Nmap.
• We require the ability to read and write code in scripting languages such as Python or PowerShell.
• We require excellent verbal and written communication skills to explain complex cyber risks in business terms to non-technical stakeholders.
• We value relevant certifications such as OSCP, CREST, or CTM.
• We need good knowledge of multiple operating systems, including Windows and *NIX.
• We need the ability to configure network devices, firewalls, IDS/IPS devices, and wireless technologies.
• We need a good understanding of security standards and regulatory compliance, including GDPR, ISO27001, and PCI DSS.
• Experience testing AI/LLMs is desirable but not essential.
• We need strong organisational skills, including the ability to work under pressure and deal with ambiguity to meet deadlines.
• We need the ability and willingness to work positively within a team and share knowledge.
• We need the willingness to travel to client locations across the UK.