Penetration Tester

Location: Remote – UK

Job Type: Permanent, Full-Time

We are recruiting for an experienced Penetration Tester / Offensive Security Consultant to join a growing cyber security business delivering professional penetration testing and security assessment services across the UK.

This is an excellent opportunity for a Penetration Tester with CTM status and commercial experience across application and infrastructure penetration testing to join an established offensive security team.

The successful Penetration Tester will conduct security assessments across applications, infrastructure, networks and operating systems, identify vulnerabilities and provide clients with clear technical findings and remediation recommendations.

As a Penetration Tester, you will be responsible for:

• Performing application penetration testing
• Performing infrastructure and network penetration testing
• Conducting vulnerability assessments
• Identifying security vulnerabilities and recommending remediation actions
• Assessing Windows and Linux environments
• Testing Active Directory environments
• Producing detailed technical and non-technical penetration testing reports
• Managing penetration testing projects from initial scoping through to completion
• Supporting client scoping and pre-engagement activities
• Working within agreed project deadlines and service levels
• Supporting quality assurance of penetration testing reports

The role involves delivering comprehensive penetration testing engagements and providing clients with practical, actionable security recommendations.

We are looking for a Penetration Tester with:

• Proven commercial penetration testing experience
• Application penetration testing experience
• Infrastructure penetration testing experience
• CTM status
• Strong Windows and Linux security knowledge
• Strong Active Directory knowledge
• Knowledge of wireless security technologies
• Understanding of OWASP and PTES penetration testing methodologies
• Web application security knowledge
• Network and operating system security knowledge
• Vulnerability assessment experience
• Scripting or programming experience
• Strong technical report writing skills

Relevant cyber security qualifications such as OSCP, CEH or GPEN would also be beneficial.

Experience in any of the following would be advantageous:

• AWS security testing
• Azure security testing
• Cloud and hybrid environment penetration testing
• Mobile application security testing
• iOS or Android application testing
• IoT and embedded device security testing
• Social engineering assessments
• Phishing and vishing campaigns

The successful Penetration Tester will receive a comprehensive benefits package including:

• 25 days annual leave
• Birthday leave
• Private healthcare
• Company pension
• Learning and development allowance
• Subsidised gym membership
• Employee benefits platform
• Regular team events
• Flexible working policy

If you are an experienced Penetration Tester, Offensive Security Consultant, Ethical Hacker or Cyber Security Consultant with CTM status and strong application and infrastructure penetration testing experience, apply today to discuss the opportunity.