Junior Penetration Tester - Fully Remote

Harvey Nash Group; United Kingdom; Remote; GBP 27,000 - 45,000; Full time

Benefits offered by this job

Fully remote

Structured training and certification

Clear path to progression

Job summary

Harvey Nash Group is seeking a Junior Penetration Tester to join a CREST-accredited cloud security consultancy. The role offers fully remote work, with a salary up to £45,000 depending on experience, and a strong emphasis on hands-on learning and professional development.

You will gain exposure to infrastructure, web applications, and cloud environment testing, working with experienced consultants on real client engagements. The team values curiosity, growth, and clear reporting of findings.

Qualifications

• At least 1 year in a security-focused IT role, or 2 years in a broader IT role with cybersecurity interest.
• Solid grasp of networking fundamentals, Windows and Linux OS, and common security concepts.
• Strong written communication skills and attention to detail.
• Curious, self-driven mindset and a real desire to learn.

Responsibilities

• Support and deliver penetration tests across infrastructure, web applications and cloud environments.
• Identify, validate and document vulnerabilities.
• Write clear, professional reports explaining findings and fixes to technical and non-technical audiences.
• Learn from senior consultants through mentoring, shadowing and knowledge sharing.
• Keep up to date with the latest tools, techniques and threats in offensive security.

Skills

Networking fundamentals

Security concepts

Written communication

Curious/learn fast

Education

Security-related certification (optional)

Tools

Burp Suite

Nmap

Metasploit

Job description

Junior Penetration Tester
Fully remote | Up to £45,000 depending on experience

About the company

A growing, CREST-accredited cloud security consultancy is looking for a Junior Penetration Tester to join their team. They work with a varied mix of clients, helping them find and fix real security weaknesses before attackers do. It's a close-knit, curiosity-driven team that genuinely invests in your development, with a supportive, expert-led environment where your voice matters.

The role

You’ll get hands-on exposure across infrastructure and web application testing, working alongside experienced consultants on real client engagements. You’ll learn fast, and you’ll be trusted with meaningful work from early on.

What you’ll be doing

• Supporting and delivering penetration tests across infrastructure, web applications and cloud environments
• Identifying, validating and documenting vulnerabilities
• Writing clear, professional reports that explain technical findings and recommended fixes to both technical and non-technical audiences
• Learning from senior consultants through mentoring, shadowing and knowledge sharing
• Keeping up to date with the latest tools, techniques and threats in offensive security

What you’ll need

• At least one year's experience in a security-focused IT role, or two years in a broader IT role with a genuine passion for cybersecurity
• A solid grasp of networking fundamentals, operating systems (Windows and Linux) and common security concepts
• Strong written communication skills and an eye for detail
• A curious, self-driven mindset and a real desire to learn

Bonus points for

• Exposure to offensive security, ethical hacking or vulnerability testing
• Experience with tools such as Burp Suite, Nmap or Metasploit
• Home lab, CTF or bug bounty experience
• Working towards or already holding a certification like CREST Registered Tester or OSCP
• Familiarity with cloud platforms such as AWS or Azure

What’s on offer

• Salary up to £45,000 depending on experience
• Fully remote workingStructured training and certification support
• A genuine route to progress in a growing consultancy