City of London, London, United Kingdom Hybrid/Remote Options
Advanced Resource Managers
Penetration Tester Permanent – up to £85k per annum London based – hybrid working – 2-3 days office based Must have CHECK CTL and certified Role Overview: We are seeking a highly skilled and experienced Offensive Security Consultant with a strong focus understanding on threat intelligence and attack methods. The ideal candidate will be responsible for managing and conducting advanced penetrationtesting engagements, leveraging threat intelligence to simulate real-world attacks across a variety of environments, including OT, IT, web applications, cloud infrastructure, and APIs. This role requires a deep understanding of adversarial approaches, excellent communication skills, and the ability to provide strategic and actionable recommendations to significantly enhance our clients' security posture. Responsibilities: Lead and manage the full … lifecycle of complex penetrationtesting engagements, applying a strong threat intelligence-led approach. Execute advanced penetration tests across a broad range of environments (applications, infrastructure, web, APIs, O365, Azure, AWS, OT), directly applying your knowledge of current threat landscapes and attacker TTPs. Develop and maintain sophisticated test plans, execution plans, and targeted use cases directly informed by More ❯
Penetration Tester Permanent – up to £85k per annum London based – hybrid working – 2-3 days office based Must have CHECK CTL and certified Role Overview: We are seeking a highly skilled and experienced Offensive Security Consultant with a strong focus understanding on threat intelligence and attack methods. The ideal candidate will be responsible for managing and conducting advanced penetrationtesting engagements, leveraging threat intelligence to simulate real-world attacks across a variety of environments, including OT, IT, web applications, cloud infrastructure, and APIs. This role requires a deep understanding of adversarial approaches, excellent communication skills, and the ability to provide strategic and actionable recommendations to significantly enhance our clients' security posture. Responsibilities: Lead and manage the full … lifecycle of complex penetrationtesting engagements, applying a strong threat intelligence-led approach. Execute advanced penetration tests across a broad range of environments (applications, infrastructure, web, APIs, O365, Azure, AWS, OT), directly applying your knowledge of current threat landscapes and attacker TTPs. Develop and maintain sophisticated test plans, execution plans, and targeted use cases directly informed by More ❯
Stoke-On-Trent, Staffordshire, West Midlands, United Kingdom Hybrid/Remote Options
Searchability (UK) Ltd
Vulnerability Management & PenetrationTesting Specialist Hands on technical specialist role, the chance to spearhead a technical red team operation. Working Hybrid within one of the most innovative and fastest growing technological companies in the country in the West Midlands. £80,000 p/a + 15% bonus and car scheme. Perfect for candidates that like a challenge and … understanding is also needed. You will bring your Cyber Security and InfoSec knowledge to a point and spearhead a new 'red team' function by being the go to for penetrationtesting and vulnerability management. What do you need? Hands on vulnerability testing and evaluations, as well as the 'hands off' ability to discuss this with peers. PCI … DSS Pen testing specialist skills. Application development/engineering background Working alongside multi disciplined teams to meet security and lifecycle deadlines. What would be nice to have? Experience of having created Technical Documentation Auditing Evidence of keeping up with Governance and Risk trends Superb well rounded technologist who genuinely is interested in most recent technologies across all fields. To More ❯
Portsmouth, England, United Kingdom Hybrid/Remote Options
ProCheckUp (PCU)
CISSP, CEH, or similar) are a plus Bachelor's degree in Cybersecurity, Computer Science, or related field is preferred The successful candidate will have demonstrable knowledge and experience of penetrationtesting, preferably supported by industry leading qualifications. In addition they will have: SPECIALITIES • Web Application Security (Implementation, detection, mitigation and education) • PenetrationTesting and Vulnerability Assessment … Network, SCADA and Web Application) • Mobile phone/Application PenetrationTesting (Android/iPhone/iPad) • Computer and Network Forensics (including e-Discovery) • Delivery of Enterprise Wide Security Programs • Operational Security (Incident Response) • Infrastructure Security and Risk assessments • Network Security (border control devices) • Social Engineering • Good client facing skills. • Drive and ambition to provide support the UK business … development executives. In addition the successful candidate may have: • The successful candidate may have published vulnerabilities and white papers. • The successful candidate may have experience in testing Web Services. • The successful candidate may have experience testing mobile applications. CERTIFTICATION & MEMBERSHIPS Core qualifications:- • Current CREST CCT-INF or CREST CCT-APP certifications • Current Check Team Leader (CTL) at NCSC More ❯
City of London, London, United Kingdom Hybrid/Remote Options
Circle Group
Principal Offensive Security Consultant £100k Location: Hybrid (2 days per month in London) Salary: £80,000 - £100,000 + benefits Are you a Senior Offensive Security Consultant or Principal Penetration Tester ready to take the next step into Red Teaming and Adversarial Simulation ? This is your opportunity to join an agile, rapidly growing UK cyber security consultancy where you … to research and tooling that truly make an impact. About the Role As a Senior/Principal Offensive Consultant , you'll lead complex technical engagements that go beyond standard penetrationtesting - focusing on advanced exploitative infrastructure testing , Active Directory compromise , and assumed breach assessments . You'll work directly with clients to scope, plan, and deliver high … impact projects, while helping to expand the organisation's Red Team and adversarial simulation services . Key Responsibilities: Lead and deliver high-level infrastructure and Active Directory penetrationtesting engagements. Conduct advanced exploitative testing , lateral movement analysis, and privilege escalation within real-world environments. Support presales activity - crafting scopes, proposals, and technical solutions aligned with client objectives. More ❯
London, South East, England, United Kingdom Hybrid/Remote Options
Circle Recruitment
Principal Offensive Security Consultant £100k Location: Hybrid (2 days per month in London) Salary: £80,000 - £100,000 + benefits Are you a Senior Offensive Security Consultant or Principal Penetration Tester ready to take the next step into Red Teaming and Adversarial Simulation This is your opportunity to join an agile, rapidly growing UK cyber security consultancy where you … to research and tooling that truly make an impact. About the Role As a Senior/Principal Offensive Consultant , you'll lead complex technical engagements that go beyond standard penetrationtesting - focusing on advanced exploitative infrastructure testing , Active Directory compromise , and assumed breach assessments . You'll work directly with clients to scope, plan, and deliver high … impact projects, while helping to expand the organisation's Red Team and adversarial simulation services . Key Responsibilities: Lead and deliver high-level infrastructure and Active Directory penetrationtesting engagements. Conduct advanced exploitative testing , lateral movement analysis, and privilege escalation within real-world environments. Support presales activity - crafting scopes, proposals, and technical solutions aligned with client objectives. More ❯
Poole, Dorset, England, United Kingdom Hybrid/Remote Options
Mexa Solutions LTD
Poole, Dorset (Hybrid – 3 days/week in the office) You don’t just spot vulnerabilities, you close them before they become a problem. Whether it’s penetrationtesting, access controls, or a misconfigured firewall, you’ve got the mindset and the method to lock things down. You understand the bigger picture of what security means in a … Dorset (hybrid - 3 days/week in the office) Scope : Work across IT, application, cloud, and physical security, no siloed remits here Responsibility : Be the go-to person for penetrationtesting, compliance audits, and vulnerability management Environment : Modern SaaS product environment, working alongside DevOps, engineering, and IT Growth : Get stuck into a wide variety of work, with support … from leadership and autonomy to make a real impact What you’ll be doing: Leading vulnerability assessments and coordinating regular penetrationtesting across systems and products Owning risk remediation actions, from security audits to PCI scans and compliance reporting Working across cloud (AWS), infrastructure, and software environments to ensure security best practices are embedded throughout Supporting the secure More ❯
Greater Bristol Area, United Kingdom Hybrid/Remote Options
Maxwell Bond
Junior Penetration Tester (Career Switch Opportunity) Location: Hybrid – Bristol/Cheltenham area (travel a couple of times per month, expenses covered) Salary: £30,000 – £40,000 (depending on experience) Clearance: Must be eligible for SC and DV clearance (British citizenship required) About the Role Our client, a specialist cybersecurity consultancy, is seeking technically skilled professionals who are ready to … transition into a hands-on PenetrationTesting role. This position is ideal for candidates currently working in roles such as Network Engineer , Systems Administrator , SOC Analyst , or similar, who are looking to move into offensive security and ethical hacking. As a Junior Penetration Tester, you’ll work alongside experienced security consultants on a variety of client engagements … across sectors including defence, government, and critical infrastructure. You’ll gain exposure to a broad range of testing activities — from infrastructure and web application assessments to red teaming and vulnerability research. Key Responsibilities Assist in the delivery of penetration tests and vulnerability assessments. Support senior testers in scoping, executing, and reporting on client engagements. Develop and document exploits More ❯
City of London, London, United Kingdom Hybrid/Remote Options
Vanquish Technologies Limited
Simulation (BAS) platforms to build and validate threat scenarios. Strong understanding of adversary tactics, techniques, and procedures (TTPs), MITRE ATT&CK framework, and threat modeling. Hands-on experience with penetrationtesting tools such as Metasploit Framework, Burp Suite, Kali Linux, and Pentera. Experience producing threat reports and briefings. Certifications Required or Preferred: Years of relevant experience: 8+ years … of experience in threat intelligence, cybersecurity operations, or penetration testing. Proven ability to collaborate across technical teams, including Red/Blue teams and SO Industry Experience Required or Preferred: Key Soft Skills (e.g Communication, leadership, stakeholder management): Analytical and detail-oriented with a strong sense of curiosity. Collaborative and team-focused, with a proactive approach to cross-functional engagement. … and analyze the global threat landscape to identify emerging risks, adversary tactics, and trends relevant to the organizations business and technology environment. Collaborate with Red Team, Blue Team, and PenetrationTesting teams to integrate threat intelligence into testing scenarios using Breach & Attack Simulation (BAS) platforms and enhance defensive strategies. Act as a liaison between threat intelligence and More ❯
North West London, London, United Kingdom Hybrid/Remote Options
SCALERS GROUP LIMITED
effective security controls and countermeasures. Conduct threat modelling exercises to identify potential security risks and vulnerabilities early in the development lifecycle. Conduct in-depth security assessments, code reviews, and penetrationtesting of applications to identify and mitigate security vulnerabilities. Utilise industry-standard tools and methodologies to assess the security posture of applications and provide actionable recommendations for remediation … person, with the ability to educate and influence on Application Security matters Basic experience in Software Development with any programming language Security Test Management Application Security Assessments Security Assurance PenetrationTesting Security Evaluation & Functional Testing Application Security Testing If the above is of interest, please apply with an updated copy of your CV and a member More ❯
City, London, United Kingdom Hybrid/Remote Options
The Bridge IT Recruitment
and resolve cyber incidents promptly and effectively. Implement and manage security measures including firewalls, encryption, and endpoint protection. Maintain clear documentation of breaches, assessments, and remediation actions. Conduct vulnerability testing, penetrationtesting, and risk assessments. Collaborate with the IT Security Manager to identify and mitigate network vulnerabilities. Analyse logs from multiple sources to detect and respond to More ❯
London, Fleet Street, United Kingdom Hybrid/Remote Options
The Bridge IT Recruitment
and resolve cyber incidents promptly and effectively. Implement and manage security measures including firewalls, encryption, and endpoint protection. Maintain clear documentation of breaches, assessments, and remediation actions. Conduct vulnerability testing, penetrationtesting, and risk assessments. Collaborate with the IT Security Manager to identify and mitigate network vulnerabilities. Analyse logs from multiple sources to detect and respond to More ❯
Newcastle Upon Tyne, England, United Kingdom Hybrid/Remote Options
KO2 Embedded Recruitment Solutions Ltd
apps that sync with the client’s hardware devices Drive DevOps best practices across CI/CD pipelines, monitoring, and deployment Design and maintain a cybersecurity-first architecture, including penetrationtesting Optimise an Azure-based infrastructure for high availability and cost efficiency Collaborate with cross-functional teams to deliver impactful new features Shape the design of future products … Tech Stack Web: ASP.NET Core, C#, JavaScript, HTML/CSS PC: C#, XAML, USB-MTP Mobile: Cordova (iOS & Android) Cloud: Microsoft Azure, CI/CD pipelines, version control, automated testing Security: Secure coding, authentication, penetrationtesting Hardware: Industry-leading devices, digitally integrated What They are Looking For KO2’s client is seeking a creative, forward-thinking developer More ❯
Tyne And Wear, United Kingdom Hybrid/Remote Options
KO2 Embedded Recruitment Solutions Ltd
apps that sync with the client's hardware devices Drive DevOps best practices across CI/CD pipelines, monitoring, and deployment Design and maintain a cybersecurity-first architecture, including penetrationtesting Optimise an Azure-based infrastructure for high availability and cost efficiency Collaborate with cross-functional teams to deliver impactful new features Shape the design of future products … Tech Stack Web: ASP.NET Core, C#, JavaScript, HTML/CSS PC: C#, XAML, USB-MTP Mobile: Cordova (iOS & Android) Cloud: Microsoft Azure, CI/CD pipelines, version control, automated testing Security: Secure coding, authentication, penetrationtesting Hardware: Industry-leading devices, digitally integrated What They are Looking For KO2's client is seeking a creative, forward-thinking developer More ❯
Newcastle upon Tyne, Tyne and Wear, Dunston, Gateshead, Tyne & Wear, United Kingdom Hybrid/Remote Options
KO2 Embedded Recruitment Solutions Ltd
apps that sync with the client's hardware devices Drive DevOps best practices across CI/CD pipelines, monitoring, and deployment Design and maintain a cybersecurity-first architecture, including penetrationtesting Optimise an Azure-based infrastructure for high availability and cost efficiency Collaborate with cross-functional teams to deliver impactful new features Shape the design of future products … Tech Stack Web: ASP.NET Core, C#, JavaScript, HTML/CSS PC: C#, XAML, USB-MTP Mobile: Cordova (iOS & Android) Cloud: Microsoft Azure, CI/CD pipelines, version control, automated testing Security: Secure coding, authentication, penetrationtesting Hardware: Industry-leading devices, digitally integrated What They are Looking For KO2's client is seeking a creative, forward-thinking developer More ❯
SP800 series, CSF). Conduct risk assessments and vulnerability management activities. Maintain robust security controls across enterprise assets, software, networks, and applications. Support incident response and recovery processes, including penetrationtesting and audit log management. Deliver training and awareness programs to enhance the organizations security posture. Collaborate with internal and external stakeholders to maintain compliance and manage third … analytical mindset with strong problem-solving skills. Technical Skills: Comprehensive knowledge of security controls, including: Data Protection, Account Management, and Access Control Management. Continuous Vulnerability Management and Incident Response. PenetrationTesting and Security Awareness Training. Secure Configuration and Network Monitoring. More ❯
Paddington, Sheldon Square, Greater London, United Kingdom Hybrid/Remote Options
Morson Edge
SP800 series, CSF). Conduct risk assessments and vulnerability management activities. Maintain robust security controls across enterprise assets, software, networks, and applications. Support incident response and recovery processes, including penetrationtesting and audit log management. Deliver training and awareness programs to enhance the organizations security posture. Collaborate with internal and external stakeholders to maintain compliance and manage third … analytical mindset with strong problem-solving skills. Technical Skills: Comprehensive knowledge of security controls, including: Data Protection, Account Management, and Access Control Management. Continuous Vulnerability Management and Incident Response. PenetrationTesting and Security Awareness Training. Secure Configuration and Network Monitoring. More ❯
Experience with security and compliance tools such as ISMS Online, Qualys VMDR, and Cofense phishing simulation would be highly advantageous. The role requires strong proficiency in vulnerability management, coordinating penetrationtesting, supplier security assurance, and incident response. A thorough understanding of legal and procedural obligations relating to data protection and information governance is essential. Excellent communication and stakeholder … and Experience Proven experience managing an enterprise ISMS and leading ISO 27001 audits. Strong understanding of cyber threats, cloud security (Azure, M365), and regulatory compliance. Experience with supplier assurance, penetrationtesting, and vulnerability management. Excellent stakeholder engagement and communication skills. Ability to work independently and influence cross-functional teams. Familiarity with Cofense phishing simulation tool, ISMS Online, Qualys More ❯
Theale, England, United Kingdom Hybrid/Remote Options
Cornerstone
Experience with security and compliance tools such as ISMS Online, Qualys VMDR, and Cofense phishing simulation would be highly advantageous. The role requires strong proficiency in vulnerability management, coordinating penetrationtesting, supplier security assurance, and incident response. A thorough understanding of legal and procedural obligations relating to data protection and information governance is essential. Excellent communication and stakeholder … and Experience Proven experience managing an enterprise ISMS and leading ISO 27001 audits. Strong understanding of cyber threats, cloud security (Azure, M365), and regulatory compliance. Experience with supplier assurance, penetrationtesting, and vulnerability management. Excellent stakeholder engagement and communication skills. Ability to work independently and influence cross-functional teams. Familiarity with Cofense phishing simulation tool, ISMS Online, Qualys More ❯
Greater London, England, United Kingdom Hybrid/Remote Options
Oliver Bernard
to create and deliver security strategies, an information security framework and risk mitigation plans for the company. You’ll be involved in everything from security assessments, threat modelling and penetrationtesting to triage of security events, ownership of policies and procedures and even working with development and engineering teams to drive application security and DevSecOps. This is the … expert. Requirements: Proven experience as an Information/Cyber Security Analyst (or equivalent) Broad cyber and information security (InfoSec) experience Knowledge of concepts such as ethical hacking, network security, penetrationtesting and cryptography etc Good understanding of Windows, Cloud (AWS) and IT infrastructure Excellent communication skills More ❯
Birmingham, West Midlands, United Kingdom Hybrid/Remote Options
Mac Recruit Group
of the most lucrative commission structures in the industry, uncapped & paid monthly designed to truly recognise top performance. A complete cybersecurity portfolio: Offer clients end-to-end solutions spanning penetrationtesting, offensive security, managed SOC, cloud security, and compliance, empowering you to sell with confidence and deliver real value. What Were Looking For Proven success in cyber security … sales, ideally within penetrationtesting, managed SOC, threat intelligence or Cyber Essentials Strong experience in new business B2B sales The ability to engage senior stakeholders at UK SMEs and mid-market organisations A collaborative, driven mindset with exceptional organisational and communication skills Whats In It For You: The role offers a base salary of £40,000 to More ❯
Penetration Tester – UK (Hybrid/Remote) Salary: Competitive + Benefits We’re looking for an experienced Penetration Tester to join our growing cybersecurity team. You’ll conduct a wide range of security assessments — from web and network testing to red teaming and social engineering — helping clients strengthen their defenses against real-world threats. What You’ll Do … Perform penetration tests across web, network, mobile, and API environments. Identify, validate, and exploit vulnerabilities to demonstrate real-world risk. Produce clear, actionable reports and present findings to clients. Maintain tools, follow OWASP/PTES/NIST methodologies, and stay current with emerging threats. Collaborate with clients to scope tests and provide security guidance. What You’ll Bring CREST … Registered Penetration Tester (CRT) certification required. Additional certs (OSCP, GPEN, CEH) a plus. 3–5 years’ experience in penetrationtesting or offensive security. Strong communication skills and attention to detail. Bachelor’s degree in Cybersecurity, Computer Science, or related field. More ❯
City of London, London, United Kingdom Hybrid/Remote Options
Opus Recruitment Solutions
Senior Infrastructure Penetration Tester Location: London flexible hybrid Salary: £70,000 – £80,000 We’re hiring on behalf of our client, a growing PenetrationTesting Consultancy, for a Senior Infrastructure Penetration Tester to join their elite Testing team. This role is ideal for someone who thrives on deep technical challenges, values autonomy, and enjoys working … in a fast paced and growing environment. What You’ll Be Doing Leading infrastructure penetration tests across complex environments (on prem, cloud, hybrid). Identifying and exploiting vulnerabilities in networks, systems, and configurations. Developing custom tooling and scripts to support testing and reporting. Conducting technical research and publishing internal findings or blogs. Supporting threat modelling and contributing to … detection engineering efforts. Working closely with clients to provide solutions and deliver elite technical assessments. What You Bring Strong hands on experience in infrastructure penetration testing. Ability to work independently and think creatively. Strong consultative experience, ability to work closely with various clients and discuss on both technical and non technical levels. More ❯
Senior Infrastructure Penetration Tester Location: London flexible hybrid Salary: £70,000 – £80,000 We’re hiring on behalf of our client, a growing PenetrationTesting Consultancy, for a Senior Infrastructure Penetration Tester to join their elite Testing team. This role is ideal for someone who thrives on deep technical challenges, values autonomy, and enjoys working … in a fast paced and growing environment. What You’ll Be Doing Leading infrastructure penetration tests across complex environments (on prem, cloud, hybrid). Identifying and exploiting vulnerabilities in networks, systems, and configurations. Developing custom tooling and scripts to support testing and reporting. Conducting technical research and publishing internal findings or blogs. Supporting threat modelling and contributing to … detection engineering efforts. Working closely with clients to provide solutions and deliver elite technical assessments. What You Bring Strong hands on experience in infrastructure penetration testing. Ability to work independently and think creatively. Strong consultative experience, ability to work closely with various clients and discuss on both technical and non technical levels. More ❯
London, South East, England, United Kingdom Hybrid/Remote Options
Digital Waffle
Job Title: Senior Penetration Tester (Infrastructure Focus) Location: London (Hybrid/Flexible) Salary: Up to £80,000 + Bonus + Benefits Employment Type: Permanent Overview We are seeking an experienced Senior Penetration Tester with a strong background in infrastructure security testing to join a growing offensive security team. The ideal candidate will have deep technical expertise, the … role in strengthening the organisation's security posture by conducting infrastructure-focused assessments, mentoring junior testers, and influencing remediation strategies. Key Responsibilities Deliver internal and external network and infrastructure penetration tests , including on-premises and cloud-hosted environments Perform testing of Windows & Linux infrastructure, Active Directory, network services, and security appliances Conduct vulnerability exploitation , privilege escalation, and lateral … debriefs Contribute to tooling, methodology enhancement, and internal research initiatives Stay up-to-date with emerging vulnerabilities, exploits, and attacker techniques Required Skills & Experience 3-5+ years' professional penetrationtesting/offensive security experience Strong understanding of enterprise infrastructure, AD security, networking, and protocols Proficiency with tools such as Nmap, Nessus, Metasploit, BloodHound, Burp Suite, Kali/ More ❯