Penetration Tester

About This Role

This is a fantastic opportunity for a technically strong and ambitious Penetration Tester to join a growing security team, working on a diverse range of projects for clients across multiple industries. You'll gain exposure to varied technologies, complex security challenges and interesting client environments, with the opportunity to develop your technical expertise and play an important role in the continued growth of the team. The business offers a collaborative environment where technical expertise is valued, alongside the opportunity to work directly with clients and make a genuine impact on their security posture.

Responsibilities

• Deliver penetration testing and vulnerability assessments across a range of client environments, systems and technologies
• Participate in red-team engagements and other offensive security assessments
• Identify, exploit where authorised, validate and document security vulnerabilities
• Analyse technical findings to assess their severity, business impact and associated risks
• Produce high-quality penetration testing reports with clear, actionable remediation recommendations
• Present technical findings to clients, translating complex vulnerabilities into understandable business risks
• Work closely with clients to understand their infrastructure, security challenges and assessment requirements
• Provide practical guidance on vulnerability remediation and security improvements
• Collaborate with other Penetration Testers and Security Consultants, sharing knowledge and developing testing methodologies
• Stay up to date with emerging threats, vulnerabilities, exploitation techniques and offensive security tools

Requirements

• Minimum 2 years' commercial experience in Penetration Testing, Offensive Security or technical Cyber Security Consulting
• Hands-on experience conducting penetration tests and technical security assessments
• Strong understanding of common vulnerabilities, exploitation techniques and penetration testing methodologies
• Solid knowledge of networking, protocols, operating systems and security technologies
• Experience working with Windows and Linux/Unix environments
• Scripting or programming experience to support testing, analysis or automation
• Strong analytical and problem-solving skills, with the ability to investigate complex security issues
• Experience working directly with clients and communicating technical findings to different audiences
• Excellent written communication skills, particularly when producing technical security reports
• Ability to obtain SC or DV Security Clearance, if required

Nice to have:

• CREST certifications, including CPSA, CRT or CCT