Penetration Tester (Web App / Infrastructure) Remote, UK-wide

The role

I'm supporting an established penetration testing consultancy that's hiring a Penetration Tester to join its team. You'll specialise in either web application or infrastructure testing, across a varied mix of client engagements.

Most of the work is commercial. Only around 30% is CHECK, so you'll put your CTM status to use without being tied to government work all the time. The team is around 50 consultants, and the business has a strong record of developing its people, with many testers growing with the company from junior level upwards.

What you'll do

• Deliver web application or infrastructure penetration tests      (depending on your specialism) for a broad range of commercial clients

• Bring your CTM status to CHECK engagements, which make up around      30% of the workload

• Write clear, accurate technical reports with practical remediation      advice

• Talk clients through findings, from technical teams to      non-technical stakeholders

• Share knowledge with and support more junior testers as they      develop

What you'll bring

• Solid hands-on commercial penetration testing experience, in either      web application or infrastructure testing

• Active NCSC CHECK Team Member (CTM) status, ideally held for around      2 years. The Cyber Scheme CSTM qualification alone, without CHECK      accreditation, isn't enough

• Current SC clearance

• Based in the UK

Location, working pattern and package

• Remote first: fully      home-based, anywhere in the UK

• On site: around 1-2 days per month on      average.

• Salary: £45,000-£55,000, depending on experience

• On top: overtime and expenses paid where      relevant