Penetration Tester

Job Description

Penetration Tester - Bristol - £40,000-45,000We're working with a well-established and highly regarded cyber security consultancy, known for delivering high-end penetration testing, vulnerability assessment and red teaming services to clients across critical sectors including telecoms, finance, defence, rail and aerospace. Their team has a strong track record of working on complex, high-stakes engagements ranging from national infrastructure projects through to global enterprise clients.They're now looking to bring in an experienced Penetration Tester to join their growing technical team, based out of their Bristol office with regular travel to client sites.What you'll be doing:Planning and delivering penetration tests across networks, systems and applications, identifying vulnerabilities and security weaknessesCarrying out detailed vulnerability assessments, security audits and risk analysis, producing clear reports with practical remediation guidanceWorking alongside the red team to run realistic attack simulations and evaluate client security controlsBuilding and using exploitation tools to demonstrate real-world impact and help clients understand their risk exposureWriting well-structured, client-ready reports covering findings, risk ratings and recommended fixesActing as a key point of contact for clients - scoping engagements, presenting results, and advising on how to strengthen their security postureKeeping up to date with emerging threats and testing techniques, and continually refining tools and methodologyTaking on elements of project and client management as part of engagement deliveryKey skills and experience needed:A degree in Computer Science, Cyber Security, Information Security or a related disciplineCHECK Team Member, CREST Registered Tester, or an equivalent recognised certificationAt least 2 years' hands-on experience in penetration testing and vulnerability assessmentSolid grounding in network protocols, operating systems and core security technologiesConfident use of tools such as Metasploit, Burp Suite and NmapStrong analytical and problem-solving skills, with genuine curiosity about current threats and attack techniquesComfortable communicating technical findings clearly to both technical teams and senior stakeholdersAble to work independently on client sites as well as collaboratively within a wider consulting teamConfident presenting and delivering training where requiredBeneificial (not essential):Code review experienceExposure to audit frameworks such as ISO 27001, CTAS or CAS(T)Experience mentoring or informally leading within a technical teamWhy this role:This is a genuine opportunity to work on varied, high-impact engagements across some of the most security-conscious sectors in the UK, rather than repetitive, low-value testing work. You'll be part of a collaborative technical team with real investment in your development - including funded certifications, access to modern tooling, and the chance to contribute to wider security research initiatives. Performance-based incentives sit on top of a competitive base salary.Oscar Associates (UK) Limited is acting as an Employment Agency in relation to this vacancy.To understand more about what we do with your data please review our privacy policy in the privacy section of the Oscar website.TPBN1_UKTJ