Ethical Hacker / Penetration Tester – Offensive Security | Red Team | Vulnerability Assessment
Salary: £70,000 – £95,000 per year (Depending on Experience)
Location: United Kingdom (Remote or Hybrid – London / Manchester preferred)
Type: Full-Time
Industry: Cybersecurity / Information Security / Penetration Testing
Job Owner: Tariq Masood
Job Description
We are seeking a certified Ethical Hacker / Penetration Tester to join our client’s elite cybersecurity team, helping to safeguard critical systems through offensive security testing, red team operations, and vulnerability assessments.
You will simulate real-world cyberattacks to identify security gaps across networks, applications, and cloud infrastructure, providing actionable recommendations that strengthen organizational resilience.
This is an exceptional opportunity for security professionals with deep offensive security experience, a strong grasp of exploitation techniques, and a passion for staying ahead in an ever-evolving cyber threat landscape.
Experience
3–5+ years of experience in penetration testing, red teaming, or offensive security.
Key Responsibilities
- Plan, execute, and document penetration tests across networks, web apps, APIs, mobile, and cloud environments.
- Conduct red team exercises including social engineering, phishing simulations, and physical security assessments.
- Identify, document, and prioritize vulnerabilities and misconfigurations.
- Utilize both manual testing and automated tools (e.g., Burp Suite, Metasploit, Nmap, Wireshark).
- Collaborate with defensive (blue) teams to improve detection and response capabilities.
- Produce detailed technical reports and concise executive summaries for stakeholders.
- Stay up to date with the latest vulnerabilities (CVEs), attack vectors, and threat actor techniques.
Required Skills
- Strong proficiency in penetration testing tools (Kali Linux, Burp Suite, Metasploit, Nmap, Wireshark).
- Experience testing against OWASP Top 10, and familiarity with vulnerability scanning and exploit development.
- Knowledge of MITRE ATT&CK and red team methodologies.
- Solid understanding of TCP/IP, firewalls, DNS, HTTP/HTTPS, and encryption protocols.
- Excellent report writing, presentation, and communication skills.
- At least one recognized certification such as OSCP, CEH, or CREST CRT.
Desired Skills
- Scripting experience with Python, PowerShell, or Bash.
- Experience with cloud security testing (AWS, Azure, GCP).
- Familiarity with CI/CD pipelines and DevSecOps practices.
- Exposure to purple teaming or adversary emulation.
- Understanding of physical security and social engineering tactics.
Job Benefits
- Competitive salary with performance-based bonus
- Funded training and certification reimbursement (OSCP, CREST, etc.)
- 25 days holiday + bank holidays
- Private healthcare and mental wellness support
- Remote or hybrid working flexibility
- Company-funded conference attendance (e.g., DEF CON, Black Hat)
Education
- Degree not essential – relevant technical certifications strongly preferred.
Additional Details
- Experience Required: 3–5 years in Ethical Hacking or Penetration Testing
- Work Mode: Remote or Hybrid (UK-based)
- Sponsorship: Not considered
