Are you a hands-on Penetration Tester who enjoys finding the weaknesses others miss and explaining them in a way clients can actually understand?
We’re looking for an experienced CHECK Team Member to join a well-established cybersecurity practice delivering technical assurance services to a varied portfolio of clients. You’ll test applications, networks and infrastructure, combining manual techniques with industry-standard tools to uncover genuine security risks.
This isn’t just about running scans and producing a list of vulnerabilities. You’ll investigate findings, demonstrate their real-world impact and provide practical recommendations that help clients strengthen their security.
What you’ll be doing
- Delivering penetration tests, security assessments and IT Health Checks
- Testing web applications, networks and wider IT infrastructure
- Using manual and automated techniques to simulate real-world attacks
- Producing clear technical reports, executive summaries, scopes and proposals
- Explaining findings to both technical and non-technical stakeholders
- Providing practical, risk-based remediation advice
- Keeping pace with emerging threats, vulnerabilities and testing methodologies
- Sharing knowledge and contributing to the development of the wider team
- Travelling to client sites across the UK when required
What we’re looking for
- At least three years’ commercial penetration-testing experience
- Current CHECK Team Member status
- Current SC clearance
- Sole UK nationality
- Strong hands-on experience with tools such as Burp Suite, Metasploit and Nmap
- Good knowledge of Windows and Linux/Unix operating systems
- Experience with network devices, firewalls, IDS/IPS and wireless technologies
- Understanding of standards and regulations such as ISO 27001, PCI DSS and GDPR
- Strong report-writing and client communication skills
- A collaborative approach and willingness to share knowledge
- Flexibility to travel to UK client locations when needed
Experience testing AI or large language model systems would be useful, but it isn’t essential.
Salary and working pattern
- Up to £80,000
- Hybrid, predominantly home-based with UK client-site travel when required
- Permanent
If you’re looking for varied technical work, interesting client challenges and the opportunity to keep developing alongside an experienced security team, we’d be keen to hear from you.
