Penetration Tester Job Trends

Penetration Tester
UK

The median Penetration Tester salary in the UK is £65,000 per year, according to job vacancies posted during the 6 months leading to 8 October 2026.

The table below compares current salary benchmarking and summary statistics with the previous two years.

6 months to
8 Oct 2026
Same period 2025 Same period 2024
Rank 643 621 697
Rank change year-on-year -22 +76 -6
Permanent jobs requiring a Penetration Tester 168 33 90
As % of all permanent jobs in the UK 0.14% 0.066% 0.12%
As % of the Job Titles category 0.15% 0.074% 0.13%
Number of salaries quoted 130 16 57
10th Percentile £45,000 £46,000 £50,000
25th Percentile £50,000 £49,000 £52,750
Median annual salary (50th Percentile) £65,000 £58,750 £75,000
Median % change year-on-year +10.64% -21.67% +11.11%
75th Percentile £80,000 £73,438 £90,000
90th Percentile £90,000 £81,875 -
UK excluding London median annual salary £52,500 £61,000 £90,000
% change year-on-year -13.93% -32.22% +44.00%

All Permanent IT Job Roles
UK

For comparison with the information above, the following table provides summary statistics for all permanent IT job vacancies. Most job vacancies include a discernible job title that can be normalized. As such, the figures in the second row provide an indication of the number of permanent jobs in our overall sample.

Permanent vacancies in the UK with a recognized job title 109,143 44,565 69,871
% of permanent jobs with a recognized job title 92.71% 89.75% 95.35%
Number of salaries quoted 74,344 25,695 40,313
10th Percentile £30,000 £28,250 £31,000
25th Percentile £40,825 £35,750 £41,250
Median annual salary (50th Percentile) £58,500 £54,500 £55,000
Median % change year-on-year +7.34% -0.91% -8.33%
75th Percentile £76,250 £73,750 £75,000
90th Percentile £98,750 £95,000 £93,750
UK excluding London median annual salary £55,000 £46,750 £50,000
% change year-on-year +17.65% -6.50% -4.76%

Penetration Tester
Job Vacancy Trend

Historical trend showing the proportion of permanent IT job postings featuring 'Penetration Tester' in the job title relative to all permanent IT jobs advertised.

Penetration Tester job vacancy trend in the UK

Penetration Tester
Salary Trend

Salary distribution trend for Penetration Tester job vacancies in the UK.

Salary distribution trend for Penetration Tester job vacancies in the UK

Penetration Tester
Salary Histogram

Salary distribution for jobs citing Penetration Tester over the 6 months to 8 October 2026.

Salary histogram for Penetration Tester in the UK

Penetration Tester
Top 13 Job Locations

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing Penetration Tester within the UK over the 6 months to 8 October 2026. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Jobs
England -29 120 £55,000 -4.35% 93
UK excluding London -57 76 £52,500 -13.93% 88
Work from Home -2 60 £80,000 +18.52% 47
London -15 53 £65,000 +15.56% 22
South West -47 27 £52,500 -32.26% 7
North of England -54 15 £45,000 -21.74% 20
Midlands -35 14 £50,000 -34.43% 11
South East -43 10 £67,500 +46.74% 20
Wales - 10 £80,000 - 10
East Midlands - 9 £50,000 - 6
Yorkshire -27 8 £45,000 -21.74% 10
North West - 7 £80,000 - 7
West Midlands -43 5 - - 5

Penetration Tester Skill Set
Top 30 Co-Occurring Skills & Capabilities

For the 6 months to 8 October 2026, Penetration Tester job roles required the following skills and capabilities in order of popularity. The figures indicate the absolute number of co-occurrences and as a proportion of all permanent job ads featuring Penetration Tester in the job title.

1 106 (63.10%) Penetration Testing
2 85 (50.60%) Cybersecurity
3 57 (33.93%) Security Cleared
4 56 (33.33%) CREST Certified
5 50 (29.76%) Security Testing
6 42 (25.00%) CHECK Team Member
7 41 (24.40%) Offensive Security
8 37 (22.02%) SC Cleared
9 35 (20.83%) Red Team
10 34 (20.24%) OSCP
11 25 (14.88%) CHECK Team Leader
12 24 (14.29%) Vulnerability Assessment
13 22 (13.10%) Information Security
14 21 (12.50%) Burp Suite
15 19 (11.31%) Application Security
15 19 (11.31%) Nmap
16 18 (10.71%) Metasploit
17 17 (10.12%) Linux
17 17 (10.12%) Windows
18 14 (8.33%) Android
18 14 (8.33%) Apple iOS
18 14 (8.33%) Cloud Security
18 14 (8.33%) Python
19 13 (7.74%) Firewall
19 13 (7.74%) ISO/IEC 27001
20 12 (7.14%) Cyber Scheme
21 11 (6.55%) GDPR
22 10 (5.95%) AWS
22 10 (5.95%) Degree
22 10 (5.95%) Nessus

Penetration Tester Skill Set
Co-Occurring Skills & Capabilities by Category

The following tables expand on the one above by listing co-occurrences grouped by category. They cover the same employment type, locality and period, with up to 20 co-occurrences shown in each category:

Cloud Services
1 10 (5.95%) AWS
2 8 (4.76%) GCP
3 4 (2.38%) Azure
4 1 (0.60%) Amazon EKS
4 1 (0.60%) AWS CloudFormation
4 1 (0.60%) Entra ID
4 1 (0.60%) SaaS
Communications & Networking
1 13 (7.74%) Firewall
2 7 (4.17%) Wireshark
3 6 (3.57%) Wireless
4 1 (0.60%) Network Security
4 1 (0.60%) TCP/IP
Development Applications
1 21 (12.50%) Burp Suite
2 18 (10.71%) Metasploit
3 4 (2.38%) Yeoman
General
1 36 (21.43%) Social Skills
2 23 (13.69%) Public Sector
3 17 (10.12%) Retail
4 15 (8.93%) Law
5 13 (7.74%) Finance
6 10 (5.95%) Aerospace
7 9 (5.36%) Banking
8 8 (4.76%) Inclusion and Diversity
8 8 (4.76%) Telecoms
9 7 (4.17%) Organisational Skills
10 4 (2.38%) Analytical Skills
11 3 (1.79%) Public Speaking
11 3 (1.79%) Publishing
12 1 (0.60%) Back Office
12 1 (0.60%) Financial Institution
Libraries, Frameworks & Software Standards
1 1 (0.60%) Terraform
Miscellaneous
1 19 (11.31%) Operational Technology
2 14 (8.33%) Mobile App
3 12 (7.14%) Security Posture
4 4 (2.38%) Cyber Defence
4 4 (2.38%) Cyber Threat
5 3 (1.79%) Management Information System
5 3 (1.79%) Self-Motivation
5 3 (1.79%) Web Conferencing
6 1 (0.60%) Cloud Native
Operating Systems
1 17 (10.12%) Linux
1 17 (10.12%) Windows
2 14 (8.33%) Android
2 14 (8.33%) Apple iOS
3 7 (4.17%) Mac OS
4 5 (2.98%) Kali Linux
5 2 (1.19%) Unix
Processes & Methodologies
1 106 (63.10%) Penetration Testing
2 85 (50.60%) Cybersecurity
3 50 (29.76%) Security Testing
4 41 (24.40%) Offensive Security
5 35 (20.83%) Red Team
6 24 (14.29%) Vulnerability Assessment
7 22 (13.10%) Information Security
8 19 (11.31%) Application Security
9 14 (8.33%) Cloud Security
10 10 (5.95%) OWASP
11 9 (5.36%) E-Commerce
11 9 (5.36%) Mentoring
11 9 (5.36%) Social Engineering
11 9 (5.36%) Validation
12 8 (4.76%) End-to-End Testing
13 7 (4.17%) Continuous Improvement
13 7 (4.17%) Process Improvement
13 7 (4.17%) Security Operations
13 7 (4.17%) Stakeholder Management
13 7 (4.17%) Vulnerability Management
Programming Languages
1 14 (8.33%) Python
2 9 (5.36%) Java
3 6 (3.57%) Go
4 5 (2.98%) PowerShell
5 3 (1.79%) C
5 3 (1.79%) C#
5 3 (1.79%) C++
5 3 (1.79%) Perl
5 3 (1.79%) Ruby
6 1 (0.60%) Bash
Qualifications
1 57 (33.93%) Security Cleared
2 56 (33.33%) CREST Certified
3 42 (25.00%) CHECK Team Member
4 37 (22.02%) SC Cleared
5 34 (20.24%) OSCP
6 25 (14.88%) CHECK Team Leader
7 12 (7.14%) Cyber Scheme
8 10 (5.95%) Degree
9 8 (4.76%) DV Cleared
10 7 (4.17%) BPSS Clearance
11 5 (2.98%) CEH
11 5 (2.98%) Computer Science Degree
12 3 (1.79%) CISA
12 3 (1.79%) CISSP
12 3 (1.79%) GPEN
12 3 (1.79%) GXPN
12 3 (1.79%) OSCE
13 2 (1.19%) CompTIA Security+
13 2 (1.19%) ECSA
13 2 (1.19%) Tigerscheme
Quality Assurance & Compliance
1 13 (7.74%) ISO/IEC 27001
2 11 (6.55%) GDPR
3 9 (5.36%) PCI DSS
4 4 (2.38%) QA
5 3 (1.79%) NCSC
6 2 (1.19%) GRC
7 1 (0.60%) Cyber Essentials
7 1 (0.60%) Cyber Essentials PLUS
7 1 (0.60%) IASME
7 1 (0.60%) NIST
System Software
1 6 (3.57%) Active Directory
Systems Management
1 19 (11.31%) Nmap
2 10 (5.95%) Nessus
3 5 (2.98%) Kubernetes
Vendors
1 3 (1.79%) Microsoft
2 2 (1.19%) Thales
3 1 (0.60%) Qualys