Penetration Tester

Key Responsibilities

• Conduct hands-on penetration testing across enterprise networks, cloud environments (AWS, Azure, GCP), web applications, APIs and mobile platforms.
• Plan and execute red team and purple team exercises, aligned with frameworks such as MITRE ATT&CK.
• Identify vulnerabilities, develop proof-of-concept exploits and demonstrate potential security risks.
• Conduct Active Directory security assessments and exploitation testing.
• Support phishing simulations, social engineering and other adversary simulation activities.
• Produce detailed technical reports, communicate findings to customers and recommend remediation strategies.
• Work directly with enterprise customers and internal Professional Services teams.

Skills & Experience

• Strong hands-on experience in penetration testing, offensive security or red teaming.
• Practical experience with tools such as Burp Suite, Metasploit, Cobalt Strike, Nmap, BloodHound and Empire.
• Scripting experience using Python, PowerShell, Bash or Go.
• Good understanding of Active Directory, cloud security, container security and web/API vulnerabilities.
• Knowledge of MITRE ATT&CK and OWASP Top 10.
• Experience delivering customer-facing security assessments and presenting technical findings.
• Certifications such as OSCP, OSEP, OSWE, OSCE, GPEN, GWAPT or GPEN-equivalent qualifications would be advantageous.

Contract Details

Rate: £500 per day

IR35: Inside IR35

Duration: Initial 12 months

Location: Fully Remote

Client: Leading Global Cyber Security Vendor