Junior Penetration Tester - Fully Remote

• Supporting and delivering penetration tests across infrastructure, web applications and cloud environments
• Identifying, validating and documenting vulnerabilities
• Writing clear, professional reports that explain technical findings and recommended fixes to both technical and non-technical audiences
• Learning from senior consultants through mentoring, shadowing and knowledge sharing
• Keeping up to date with the latest tools, techniques and threats in offensive security

• At least one year’s experience in a security-focused IT role, or two years in a broader IT role with a genuine passion for cybersecurity
• A solid grasp of networking fundamentals, operating systems (Windows and Linux) and common security concepts
• Strong written communication skills and an eye for detail
• A curious, self-driven mindset and a real desire to learn

Bonus points for

• Exposure to offensive security, ethical hacking or vulnerability testing
• Experience with tools such as Burp Suite, Nmap or Metasploit
• Home lab, CTF or bug bounty experience
• Working towards or already holding a certification like CREST Registered Tester or OSCP
• Familiarity with cloud platforms such as AWS or Azure

• Salary up to £45,000 depending on experience
• Fully remote working
• Structured training and certification support
• A genuine route to progress in a growing consultancy

A growing, CREST-accredited cloud security consultancy is looking for a Junior Penetration Tester to join their team. They work with a varied mix of clients, helping them find and fix real security weaknesses before attackers do. It’s a close-knit, curiosity-driven team that genuinely invests in your development, with a supportive, expert-led environment where your voice matters.