Penetration Tester

Overview

In this role you will perform hands-on penetration testing and security assessments across infrastructure, web apps, APIs, mobile apps, and cloud configurations within a collaborative assurance testing team. You will contribute to Cyber Essentials and related services while pursuing industry-recognised certifications. You’ll work closely with the sales and engineering teams to scope opportunities and deliver high-value engagements. This position offers growth through practical testing, knowledge sharing, and a supportive culture focused on continuous improvement.

Responsibilities

• Perform assurance testing and cybersecurity assessments across infrastructure, web apps, APIs, mobile apps, red team engagements, cloud reviews, and Cyber Essentials/Cyber Essentials Plus.
• Work under team leadership on internal projects, R&D, and service improvement initiatives.
• Assist with scoping of new business opportunities and contribute to proposals for penetration testing and assurance services.
• Manage customer engagements to ensure timely, high-quality deliverables.
• Deliver penetration testing and Cyber Essentials services as part of a team; support knowledge sharing and mentoring.
• Conduct QA reviews of reports and proposals to ensure accuracy and adherence to standards.
• Maintain and update the vulnerability database to stay accurate and comprehensive.
• Assist with scoping calls and provide technical input to account managers for seamless client delivery.

Key requirements

• Bachelor or 3 years of relevant experience (explicitly stated)
• Any reputable penetration testing qualification (OSCP, GPEN, Security+, CPSA, CEH, CRT)
• Cyber Essentials Assessor (desirable)
• 1 to 3 years penetration testing / security experience
• 1 year penetration testing consulting experience
• Ability to pass BPSS or HMG SC vetting
• Strong customer focus and outstanding verbal/written communication
• Excellent time management and ability to handle conflicting priorities
• Decision-making ability with some direction
• Willingness to learn, adapt, and continuously improve

• collaboration
• communication
• customer focus
• penetration testing
• security assessments across infrastructure, web apps, APIs, mobile apps, cloud configurations
• Cyber Essentials and Cyber Essentials Plus

…