Penetration Tester

You’ll deliver CHECK-accredited penetration testing for a growing UK Cyber Security consultancy, covering application, infrastructure, wireless and social engineering work. It’s fully remote, and you’ll work with an experienced offensive security team on a wide range of client engagements.

• Location: Fully remote, UK
• Level: CHECK Team Member

What you’ll do

• Deliver CHECK-accredited application and infrastructure penetration tests across a range of technologies and environments
• Plan and run social engineering campaigns, including phishing and vishing
• Write clear technical and non-technical reports with practical remediation advice
• Help with scoping and proposal drafting before engagements so the work matches what each client needs
• Manage your own testing projects to agreed deadlines
• Support report QA so reports meet client service levels

What you’ll need

• CTM status
• SC clearance
• Proven application and infrastructure testing experience across Windows and Linux, with strong Active Directory knowledge
• Experience with wireless testing and with running phishing and vishing campaigns
• A strong understanding of OWASP, PTES and how modern web applications are built and deployed
• The ability to script in your preferred language

Nice to have:

• Cloud and hybrid testing in AWS or Azure
• Mobile application testing for iOS or Android
• Hardware and embedded IoT testing

What’s in it for you

• 25 days’ annual leave plus your birthday off
• A learning allowance for your development
• Company pension
• Subsidised gym membership and an employee benefits platform
• A flexible working policy and regular team events