> Markdown version of [/jobs/ext/3858899-penetration-tester](https://www.wearedevelopers.com/jobs/ext/3858899-penetration-tester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Penetration Tester

- **Company:** gb
83zero Limited
- **Location:** Cardiff, UK (Remote available)
- **Salary:** £130,000.0
- **Contract:** Temporary contract
- **Skills:** Kubernetes Security, Active Directory, Application Programming Interfaces (APIs), Amazon Web Services, Software System Penetration Testing, Microsoft Azure, Bash Shell, Burp Suite, Cloud Computing Security, Python (Programming Language), Nmap, Open Web Application Security, Windows PowerShell, Anti-Phishing, Red Team (Cyber Security), Web Applications, Scripting, Google Cloud, Cloud Platform System, Mitre Att&ck, GWAPT, Metasploit, Purple Team (Cyber Security)
- **Published:** October 22, 2026
- **Apply:** https://www.totaljobs.com/job/penetration-tester/83zero-limited-job108210520

## About the Role

* Strong hands-on experience in penetration testing, offensive security or red teaming.
 * Practical experience with tools such as Burp Suite, Metasploit, Cobalt Strike, Nmap, BloodHound and Empire.
 * Scripting experience using Python, PowerShell, Bash or Go.
 * Good understanding of Active Directory, cloud security, container security and web/API vulnerabilities.
 * Knowledge of MITRE ATT&CK and OWASP Top 10.
 * Experience delivering customer-facing security assessments and presenting technical findings.
 * Certifications such as OSCP, OSEP, OSWE, OSCE, GPEN, GWAPT or GPEN-equivalent qualifications would be advantageous.

## Description

* Conduct hands-on penetration testing across enterprise networks, cloud environments (AWS, Azure, GCP), web applications, APIs and mobile platforms.
 * Plan and execute red team and purple team exercises, aligned with frameworks such as MITRE ATT&CK.
 * Identify vulnerabilities, develop proof-of-concept exploits and demonstrate potential security risks.
 * Conduct Active Directory security assessments and exploitation testing.
 * Support phishing simulations, social engineering and other adversary simulation activities.
 * Produce detailed technical reports, communicate findings to customers and recommend remediation strategies.
 * Work directly with enterprise customers and internal Professional Services teams.