Ethical Hacker

London, United Kingdom

• Salary £70,000 – £95,000 / year (Depending on Experience)
• City London
• Province City of London
• Country United Kingdom
• Postal Code EC1A

About Us

MastarRec is a specialist recruitment and staffing agency supporting high-growth and technology-driven industries across the United Kingdom, the United States, and global markets . We partner with organizations to deliver tailored staffing solutions focused on quality, integrity, and long-term value for both clients and candidates.

Job Description

Job Description

We are looking for a certified Ethical Hackertojoin our client’s cybersecurity team and help safeguard critical systemsthrough simulated attacks and red team assessments. You’ll be responsible foridentifying vulnerabilities across networks, applications, and cloudinfrastructure and providing actionable insights to reduce risk exposure.

Ideal candidates have deep experience in offensive security.Testing, a strong understanding of exploits and security protocols, and a driveto continuously evolve with today’s fast-moving threat landscape.

Job Responsibilities

• Plan,execute, and report on across networks, webapplications, APIs, mobile, and cloud environments
  
• Conduct red team engagements , including simulated phishing, socialengineering, and physical security assessments
  
• Identify,document, and prioritise vulnerabilities and misconfigurations
  
• Useboth manual techniques and automated tools (e.g., Burp Suite, Metasploit,Nmap)
  
• Collaboratewith blue team and remediation teams to harden systems
  
• Produce detailed technical reports and executive summaries for stakeholders
  
• Stayup to date with the latest exploits, vulnerabilities (CVEs), and threatactor tactics
  

Requirements

Required Skills

• Strongproficiency in penetration testing tools (e.g., Kali Linux, BurpSuite, Metasploit, Nmap, Wireshark)
  
• Experiencewith OWASP Top 10 , vulnerability scanning, and exploit development
  
• Familiaritywith MITRE ATT&CK framework and red team methodology
  
• Solidknowledge of TCP/IP, firewalls, DNS, HTTP/HTTPS, and encryptionprotocols
  
• Strongreporting and communication skills
  
• Atleast one industry certification (OSCP, CEH, CREST CRT, or similar)
  

Desired Skills

• Scriptingskills in Python, PowerShell, or Bash
  
• Experiencewith cloud security testing (AWS, Azure, GCP)
  
• Familiaritywith CI/CD environments and DevSecOps
  
• Exposureto purple teaming or adversary emulation
  
• Knowledgeof physical security and social engineering tactics
  
• Competitivesalary + performance bonus
  
• Paidtraining and certification reimbursement (OSCP, CREST, etc.)
  
• 25days holiday + bank holidays
  
• Fullyremote or hybrid working options
  
• Company-fundedattendance at security conferences (DEF CON, Black Hat, etc.)