Ethical Hacker

Zohorecruit; Greater London; Hybrid; GBP 70,000 - 95,000; Full time

Benefits offered by this job

Fully remote work

Hybrid options

Conference attendance

Certification reimbursement

Paid training

25 days holiday

Job summary

MastarRec is recruiting an experienced Ethical Hacker to join a client’s cybersecurity team in London. You’ll conduct offensive security testing across networks, applications and cloud environments, identify vulnerabilities, and present actionable remediation guidance.

Ideal candidates have deep red team experience, exploit development, and familiarity with MITRE ATT&CK. Fully remote or hybrid options are available, with a competitive salary and ongoing training opportunities.

Qualifications

• Strong proficiency in penetration testing tools such as Kali Linux, Burp Suite, Metasploit, Nmap, and Wireshark.
• Experience with OWASP Top 10, vulnerability scanning, and exploit development.
• Familiarity with the MITRE ATT&CK framework and red team methodology.
• Solid knowledge of TCP/IP, firewalls, DNS, HTTP/HTTPS, and encryption protocols.
• Strong reporting and communication skills.
• At least one industry certification (OSCP, CEH, CREST CRT, or similar).

Responsibilities

• Plan, execute, and report on security tests across networks, web applications, APIs, mobile, and cloud.
• Conduct red team engagements, including simulated phishing, social engineering, and physical security assessments.
• Identify, document, and prioritise vulnerabilities and misconfigurations.
• Use both manual techniques and automated tools (e.g., Burp Suite, Metasploit, Nmap).
• Collaborate with blue team and remediation teams to harden systems.
• Produce detailed technical reports and executive summaries for stakeholders.
• Stay up to date with the latest exploits, CVEs, and threat actor tactics.

Skills

penetration testing tools

OWASP Top 10

MITRE ATT&CK

Networking security

reporting & comms

industry certifications

Tools

Kali Linux

Burp Suite

Metasploit

Nmap

Wireshark

Job description

London, United Kingdom

• Salary £70,000 – £95,000 / year (Depending on Experience)
• City London
• Province City of London
• Country United Kingdom
• Postal Code EC1A

About Us

MastarRec is a specialist recruitment and staffing agency supporting high-growth and technology-driven industries across the United Kingdom, the United States, and global markets. We partner with organizations to deliver tailored staffing solutions focused on quality, integrity, and long-term value for both clients and candidates.

Job Description

Job Description

We are looking for a certified Ethical Hackertojoin our client’s cybersecurity team and help safeguard critical systemsthrough simulated attacks and red team assessments. You’ll be responsible foridentifying vulnerabilities across networks, applications, and cloudinfrastructure and providing actionable insights to reduce risk exposure.

Ideal candidates have deep experience in offensive security.Testing, a strong understanding of exploits and security protocols, and a driveto continuously evolve with today’s fast-moving threat landscape.

Job Responsibilities

• Plan,execute, and report on across networks, webapplications, APIs, mobile, and cloud environments
  
• Conduct red team engagements, including simulated phishing, socialengineering, and physical security assessments
  
• Identify,document, and prioritise vulnerabilities and misconfigurations
  
• Useboth manual techniques and automated tools (e.g., Burp Suite, Metasploit,Nmap)
  
• Collaboratewith blue team and remediation teams to harden systems
  
• Produce detailed technical reports and executive summaries for stakeholders
  
• Stayup to date with the latest exploits, vulnerabilities (CVEs), and threatactor tactics
  

Requirements

Required Skills

• Strongproficiency in penetration testing tools (e.g., Kali Linux, BurpSuite, Metasploit, Nmap, Wireshark)
  
• Experiencewith OWASP Top 10, vulnerability scanning, and exploit development
  
• Familiaritywith MITRE ATT&CK framework and red team methodology
  
• Solidknowledge of TCP/IP, firewalls, DNS, HTTP/HTTPS, and encryptionprotocols
  
• Strongreporting and communication skills
  
• Atleast one industry certification (OSCP, CEH, CREST CRT, or similar)
  

Desired Skills

• Scriptingskills in Python, PowerShell, or Bash
  
• Experiencewith cloud security testing (AWS, Azure, GCP)
  
• Familiaritywith CI/CD environments and DevSecOps
  
• Exposureto purple teaming or adversary emulation
  
• Knowledgeof physical security and social engineering tactics
  
• Competitivesalary + performance bonus
  
• Paidtraining and certification reimbursement (OSCP, CREST, etc.)
  
• 25days holiday + bank holidays
  
• Fullyremote or hybrid working options
  
• Company-fundedattendance at security conferences (DEF CON, Black Hat, etc.)