Penetration Tester
Our client is a fast-growing cybersecurity services company helping SMEs achieve ISO 27001, GDPR compliance, and Cyber Essentials Plus. As they enter an exciting expansion phase, they're looking for a Penetration Tester to play a key role in their growth.
The Role
You'll lead penetration testing across web applications, networks, APIs, cloud environments, and mobile applications, as well as red team assessments and social engineering engagements. Working directly with clients, you'll assess risks, deliver tailored security solutions, produce clear and actionable reports, and mentor junior team members.
Experience
- Proven hands-on experience in penetration testing, ethical hacking, and red teaming
- Proficiency with tools such as Burp Suite, Metasploit, Nmap, Kali Linux, BloodHound, Cobalt Strike, and Wireshark
- Strong understanding of exploit development, privilege escalation, lateral movement, and post-exploitation techniques
- Scripting ability in Python, Bash, PowerShell, or Ruby
- Familiarity with cloud security testing (AWS, Azure, GCP) and container environments
- Knowledge of MITRE ATT&CK, OWASP Top 10, and NIST 800-53
- Excellent report writing and communication skills, able to engage both technical and non-technical stakeholders
- Relevant certifications such as OSCP, OSWE, OSEP, CREST, CISSP, or CEH are a plus
What's On Offer
- Competitive compensation including equity
- A genuinely autonomous role with real freedom to shape your approach
- A collaborative, innovative team culture
- Ongoing training and the tools you need to succeed
- The chance to directly influence the direction of a growing business
