> Markdown version of [/jobs/ext/3667396-penetration-tester](https://www.wearedevelopers.com/jobs/ext/3667396-penetration-tester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Penetration Tester

- **Company:** BAE Systems
- **Location:** Preston, UK
- **Experience:** Expert
- **Salary:** £55,000.0
- **Contract:** Permanent contract
- **Skills:** Software System Penetration Testing, Burp Suite, Nmap, Red Team (Cyber Security), Metasploit, Purple Team (Cyber Security), Cyber Warfare, Vulnerability Analysis
- **Published:** October 10, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=2b81eb5cc23066f4

## About the Role

* Demonstrable experience in penetration testing
 * Proficient in penetration testing tools such as Burp Suite, Nmap, Metasploit etc
 * Either Crest CRT or Cyber Scheme Team Member (CSTM) qualifications
 * The ability to clearly communication both verbally and written

## Description

This role will sit under the Active Defence, Red Team who are responsible for delivering the following capabilities in support of Cyber Operations: Red Teaming, Purple Teaming, Security Critical Control Testing, Threat Advisory Simulation and Penetration Testing.Conducting both a combination of Infrastructure and Web Application Penetration testing across BAE System.

Core duties:

 * Develop comprehensive and accurate reports for internal audiences, ensuring the grading of vulnerabilities within the context of BAE Systems, and passing onto resolver groups for resolution
 * Ensuring resolution is being conducted in line with documented process
 * Conduct simulated attacks and vulnerability assessments to support Red and Purple Team operations, identifying security weaknesses and enhancing defensive capabilities
 * Contributes to the development of Active Defence, Red Team capabilities through people, process, and technology where appropriate
 * Maintains a broad understanding of the external threat environment and attacker tactics, techniques, and procedures