Penetration Tester

Penetration Tester – CHECK Team Member

Salary: Up to £80,000

Location: UK-wide

Working pattern: Hybrid, predominantly home-based with UK client-site travel when required

Security requirements: Current SC clearance and sole UK nationality

Are you a hands-on Penetration Tester who enjoys finding the weaknesses others miss—and explaining them in a way clients can actually understand?

We’re looking for an experienced CHECK Team Member/CTM to join a well-established cybersecurity practice delivering technical assurance services to a varied portfolio of clients. You’ll test applications, networks and infrastructure, combining manual techniques with industry-standard tools to uncover genuine security risks.

This isn’t just about running scans and producing a list of vulnerabilities. You’ll investigate findings, demonstrate their real-world impact and provide practical recommendations that help clients strengthen their security.

What you’ll be doing

• Delivering penetration tests, security assessments and IT Health Checks
• Testing web applications, networks and wider IT infrastructure
• Using manual and automated techniques to simulate real-world attacks
• Producing clear technical reports, executive summaries, scopes and proposals
• Explaining findings to both technical and non-technical stakeholders
• Providing practical, risk-based remediation advice
• Keeping pace with emerging threats, vulnerabilities and testing methodologies
• Sharing knowledge and contributing to the development of the wider team
• Travelling to client sites across the UK when required

What we’re looking for

• At least three years’ commercial penetration-testing experience
• Current CHECK Team Member status
• Current SC clearance
• Sole UK nationality
• Strong hands-on experience with tools such as Burp Suite, Metasploit and Nmap
• Good knowledge of Windows and Linux/Unix operating systems
• Experience with network devices, firewalls, IDS/IPS and wireless technologies
• Understanding of standards and regulations such as ISO 27001, PCI DSS and GDPR
• Strong report-writing and client communication skills
• A collaborative approach and willingness to share knowledge
• Flexibility to travel to UK client locations when needed

Experience testing AI or large language model systems would be useful, but it isn’t essential.

If you’re looking for varied technical work, interesting client challenges and the opportunity to keep developing alongside an experienced security team, we’d be keen to hear from you.