Penetration Tester

Overview

As a Penetration Tester in the Active Defence, Red Team, you’ll help simulate attacks, identify weaknesses and drive defensive improvements. You will produce actionable reports and work with resolver groups to ensure timely remediation, aligning with established processes. You’ll contribute to Red and Purple Team capabilities and maintain awareness of evolving attacker TTPs. This role sits within a global cyber operations function that protects critical assets and supports a safer future. It offers hybrid working and a chance to shape cutting-edge security testing at scale.

Pay / Benefits

• hybrid/flexible working
• career development and lifelong learning
• rewards and wellbeing support for you and family
• balanced lifestyle
• inclusive workplace
• employee recognition

Responsibilities

• Create comprehensive vulnerability reports and prioritize remediation within BAE Systems’ context
• Ensure fixes follow documented processes and governance
• Perform simulated attacks and vulnerability assessments to support Red and Purple Team operations
• Identify security weaknesses and strengthen defensive capabilities
• Contribute to the development of Active Defence, Red Team capabilities across people, processes, and technology
• Maintain broad awareness of external threat landscape and attacker TTPs

Key requirements

• Demonstrable experience in penetration testing
• Proficiency with Burp Suite, Nmap, Metasploit (and similar tools)
• Crest CRT or Cyber Scheme Team Member (CSTM) qualifications
• Strong verbal and written communication skills

• Clear verbal and written communication
• Collaborative mindset in cross-functional teams
• Analytical and problem-solving abilities
• Penetration testing
• Burp Suite
• Nmap

…