Lead Penetration Tester

JR United Kingdom; City Of London; Hybrid; GBP 60,000 - 90,000; Full time

Job summary

A leading consultancy is seeking a Lead Penetration Tester to deliver critical infrastructure testing across sensitive environments. If you thrive in a high-trust culture and have the experience in hands-on testing, join a team that makes a real-world impact on security. This role requires deep technical expertise and the ability to communicate effectively with various stakeholders.

Qualifications

• 4+ years of penetration testing experience (infrastructure/internal focus).
• Strong hands-on expertise with Active Directory attacks and lateral movement.
• Familiarity with Windows and Linux command-line environments.

Responsibilities

• Deliver end-to-end infrastructure and internal network testing.
• Identify and exploit vulnerabilities across complex environments.
• Communicate technical findings through reports and debriefs.

Skills

Penetration Testing

Active Directory

Python scripting

Operational Technology networks

Tools

CrackMapExec

BloodHound

PowerView

Job description

Social network you want to login/join with:

Lead Penetration Tester, London (City of London)

Client: Anson McCade

Location: London (City of London), United Kingdom

Job Category: Other

EU work permit required: Yes

Job Views:

3

Posted:

16.06.2025

Expiry Date:

31.07.2025

Job Description:

Location: London preferred (Hybrid)

Level: Senior Consultant to Principal Consultant (SC–PC)

Flexible hybrid model | High-trust culture | Mission-critical work

The Opportunity

Join a high-impact consultancy at the forefront of innovation and digital transformation. You’ll be part of a specialist team delivering critical infrastructure penetration tests across some of the most sensitive environments in the UK — from defence and national security to critical infrastructure and operational technology.

This is not a web application role. We’re looking for an infrastructure-focused penetration tester with the technical confidence and consultancy mindset to work independently, lead engagements, and deliver real-world impact.

If you want to push beyond checklists and automated scans and into deep, hands-on testing — this is the place to do it.

What You’ll Be Doing

• Deliver end-to-end infrastructure and internal network testing (Active Directory, internal corporate networks, etc.)
• Identify and exploit vulnerabilities across complex environments with minimal documentation
• Communicate technical findings through clear written reports and debriefs to a range of stakeholders
• Support sensitive clients operating in production environments — where mistakes matter
• Contribute to tooling, methodologies, and continuous improvement of team capability
• Engage with a technical and non-technical audience, acting as a trusted security advisor

What You Bring

Core Skills:

• 4+ years of penetration testing experience (infrastructure/internal focus)
• Strong hands-on expertise with Active Directory attacks, lateral movement, and privilege escalation
• Experience navigating live and legacy production systems
• Comfortable in Windows and Linux command-line environments
• Python scripting or automation experience
• Familiarity with OT (Operational Technology) networks
• Experience with tools like CrackMapExec, BloodHound, PowerView, etc.

Certifications (a bonus, not a barrier):

• OSCP
• Lapsed certifications are fine if practical skills are strong