Junior Offensive Security Consultant

WorkNest Secure (US); Leeds; On-site; GBP 21,000 - 32,000; Full time

Benefits offered by this job

25 days annual leave

Company pension

Subsidised gym membership

Employee benefits platform

Regular team events

Private healthcare

Learning allowance £100 per annum

Flexible working policy

Job summary

WorkNest Secure is seeking a Junior Offensive Security Consultant to join our 12-month graduate academy in Leeds. You will gain hands-on experience across web applications and infrastructure, delivering formal penetration testing assessments and written reports.

You will contribute to client pre-engagement activities, research vulnerabilities, and share findings with the team while developing technical and soft skills through mentoring, labs, and coaching.

Qualifications

• Candidates should have foundational knowledge of penetration testing techniques for applications and infrastructure.
• Understanding of OWASP, PTES and common testing methodologies.
• Awareness of how modern web apps are designed, developed and deployed.
• Ability to write concise technical reports in English.
• Nice to have security qualifications such as OSCP, CREST CRT or TIGER.

Responsibilities

• Perform formal penetration testing assessments for applications and infrastructure.
• Produce well-written reports in English within deadlines.
• Support pre-engagement activities and vulnerability research.
• Communicate findings and remediation actions clearly to clients.
• Contribute to ongoing learning and development within the team.

Skills

Penetration testing

OWASP/PTES

Web & infrastructure

Scripting

Networking basics

Education

Degree in Cybersecurity or related

Job description

WorkNest Secure is rapidly expanding, helping organisations strengthen their security posture through world‑class expertise. To support this growth, we are seeking Junior Offensive Security Consultants to join our 12‑month graduate academy.

Through a variety of learning methods such as workshops, observations, practice labs, paired work, live testing, mentoring, and coaching, you will quickly build a strong mix of technical and soft skills.

You will receive structured support from our Academy Manager and consultant team, enabling you to progress in a supportive and friendly environment with a strong focus on developing junior consultants.

Role Description

We provide a broad range of assessment services, including web applications and infrastructure, giving Junior OffSec Consultants the opportunity to build expertise across these areas.

As a Junior OffSec Consultant you will perform formal and comprehensive penetration testing assessments, including producing full written reports to appropriate standards and within agreed deadlines. In addition, you will support client pre‑engagement activities, as well as research application and infrastructure vulnerabilities, following responsible disclosure, and sharing such findings within the team.

Responsibilities

• Perform formal and comprehensive application, infrastructure and other penetration testing assessments where appropriate and required;
• Provide well‑written, concise, technical and non‑technical reports in English;
• Maintain excellent communication standards during your engagements & ensuring debriefs are offered following the process
• Maintain good communication standards with your OffSec Team lead & Academy Manager
• Perform vulnerability assessments and provide findings with remediation actions;
• Support with various client pre‑engagement interactions where appropriate and applicable
• Manage and deliver applicable project activities to deadlines;
• Research application and infrastructure components within the wider team to identify new vulnerabilities and follow responsible disclosure;
• Any other appropriate job duties in line with the associated skill and experience of the post holder.
• Work towards achieving industry certifications and developing new Penetration testing skillsets via research and shadowing.

Skills And Experience Required

• Good knowledge of application and infrastructure penetration testing;
• Strong understanding of OWASP, PTES and other penetration testing methodologies;
• Knowledge of how modern web apps are designed, developed and deployed across different platforms;
• Ability to program or script in your preferred language;
• (Nice to have) Relevant security qualifications (such as OSCP, CREST CRT, TIGER);
• Good knowledge and understanding of network and OS principles;
• Good knowledge of various operating systems;
• Good knowledge of virtualisation.
• A degree in Cybersecurity or related courses.

Personal Attributes

• Excellent spoken and written English communication skills with strong attention‑to‑detail and accuracy;
• A customer centric mindset & approach – Willing to go above and beyond when engaging with our customers
• A passion for security and networks;
• Analytical and problem‑solving skills with a can‑do attitude and the ability to think laterally and creatively;
• Self‑motivation with a commitment to continued development;
• Ability to work independently and as part of a team;
• Influencing and negotiation skills with the ability to build relationships at all levels;Willingness to learn.

Benefits

• 25 days annual leave plus birthday leave
• Company pension
• Subsidised gym membership
• Employee benefits platform
• Regular team events
• Private healthcare (individual cover)
• Learning allowance of £100 per annum for personal development
• Flexible working policy

In addition to the responsibilities listed above, the job holder may be required to perform other duties as assigned from time to time by their manager or a senior leader.

At WorkNest, we recognise the importance of having an engaged, healthy, diverse and inclusive culture. This is not only the right thing to do - it also strengthens our business.

We believe a talent‑driven organisation must also be a diverse one. We are committed to creating a culture of diversity, equity and inclusion across everything we do: how we serve our clients, develop our products and services, and support our colleagues.

Effective people management and engagement are integral to our business, both in terms of what we do and how we do it.

As part of this commitment, WorkNest and Axiom have signed up to the UN Sustainable Development Goals on Gender Equality (Goal 5) and Decent Work and Economic Growth (Goal 8). We report annually to our Board and investors on our progress.

The WorkNest group brings together 15+ specialist organisations, each with decades of experience supporting organisations worldwide with risk and compliance solutions.

Our WorkNest Secure suite brings together leading cyber security and compliance expertise to help organisations stay protected, resilient, and one step ahead of emerging threats.