Penetration Tester

• Conduct hands-on penetration testing across enterprise networks, cloud environments (AWS, Azure, GCP), web applications, APIs and mobile platforms.
• Plan and execute red team and purple team exercises, aligned with frameworks such as MITRE ATT&CK.
• Identify vulnerabilities, develop proof-of-concept exploits and demonstrate potential security risks.
• Conduct Active Directory security assessments and exploitation testing.
• Support phishing simulations, social engineering and other adversary simulation activities.
• Produce detailed technical reports, communicate findings to customers and recommend remediation strategies.
• Work directly with enterprise customers and internal Professional Services teams.

• Strong hands-on experience in penetration testing, offensive security or red teaming.
• Practical experience with tools such as Burp Suite, Metasploit, Cobalt Strike, Nmap, BloodHound and Empire.
• Scripting experience using Python, PowerShell, Bash or Go.
• Good understanding of Active Directory, cloud security, container security and web/API vulnerabilities.
• Knowledge of MITRE ATT&CK and OWASP Top 10.
• Experience delivering customer-facing security assessments and presenting technical findings.
• Certifications such as OSCP, OSEP, OSWE, OSCE, GPEN, GWAPT or GPEN-equivalent qualifications would be advantageous.

We are working with a leading global cyber security vendor looking for an experienced Offensive Security Consultant/Penetration Tester to join their Professional Services team on an initial 12-month contract.

This is an excellent opportunity to work on complex enterprise security engagements, delivering penetration testing, adversary simulations and red team exercises for customers across a range of industries.