Lead Penetration Tester

Anson McCade; London; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

Anson McCade is seeking a Senior Recruitment Consultant specializing in IT recruitment for critical infrastructure penetration testing. The successful candidate will engage in hands-on security assessments in sensitive environments across the UK, contributing to significant digital transformation projects. This role demands a mix of technical confidence, independent working ability, and strong consultancy skills, suited for those eager to impact substantially in the cybersecurity realm.

Benefits

Flexible hybrid model

High-trust culture

Mission-critical work

Qualifications

• 4+ years of penetration testing experience with a focus on infrastructure.
• Experience navigating live and legacy production systems.
• Strong hands-on expertise in Active Directory.

Responsibilities

• Deliver end-to-end infrastructure and internal network testing.
• Identify and exploit vulnerabilities across complex environments.
• Support sensitive clients operating in production environments.

Skills

Penetration Testing

Active Directory Attacks

Lateral Movement

Privilege Escalation

Python Scripting

Operational Technology Networks

Education

Relevant IT Certifications

Tools

CrackMapExec

BloodHound

PowerView

Job description

Get AI-powered advice on this job and more exclusive features.

This range is provided by Anson McCade. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Base pay range

Direct message the job poster from Anson McCade

Senior Recruitment Consultant @ Anson McCade | IT Recruitment Specialist

Level: Senior Consultant to Principal Consultant (SC–PC)

Flexible hybrid model | High-trust culture | Mission-critical work

The Opportunity

Join a high-impact consultancy at the forefront of innovation and digital transformation. You’ll be part of a specialist team delivering critical infrastructure penetration tests across some of the most sensitive environments in the UK — from defence and national security to critical infrastructure and operational technology.

This is not a web application role. We’re looking for an infrastructure-focused penetration tester with the technical confidence and consultancy mindset to work independently, lead engagements, and deliver real-world impact.

If you want to push beyond checklists and automated scans and into deep, hands-on testing — this is the place to do it.

What You’ll Be Doing

• Deliver end-to-end infrastructure and internal network testing (Active Directory, internal corporate networks, etc.)
• Identify and exploit vulnerabilities across complex environments with minimal documentation
• Communicate technical findings through clear written reports and debriefs to a range of stakeholders
• Support sensitive clients operating in production environments — where mistakes matter
• Contribute to tooling, methodologies, and continuous improvement of team capability
• Engage with a technical and non-technical audience, acting as a trusted security advisor

What You Bring

Core Skills:

• 4+ years of penetration testing experience (infrastructure/internal focus)
• Strong hands-on expertise with Active Directory attacks, lateral movement, and privilege escalation
• Experience navigating live and legacy production systems
• Comfortable in Windows and Linux command-line environments
• Python scripting or automation experience
• Familiarity with OT (Operational Technology) networks
• Experience with tools like CrackMapExec, BloodHound, PowerView, etc.

Certifications (a bonus, not a barrier):

• OSCP
• Lapsed certifications are fine if practical skills are strong
• Tight-knit, high-performing team (2–3 people) with deep trust and autonomy
• Remote-first culture (approx. 80% remote) with flexibility for client needs (up to 2 days per week on-site if required)
• Fast-paced environment with complex technical challenges
• Expect to hit the ground running – support is there, but this is a role for a self-starter

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Full-time

Job function

• Job function

  Consulting

• Industries

  IT Services and IT Consulting

Referrals increase your chances of interviewing at Anson McCade by 2x

Get notified about new Penetration Tester jobs in London Area, United Kingdom.

Product Security Engineer (University Grad)

London, England, United Kingdom 2 weeks ago

Graduate Cybersecurity Analyst (Visa Sponsorship Available)

London, England, United Kingdom 3 weeks ago

London, England, United Kingdom 1 week ago

London, England, United Kingdom 1 month ago

London, England, United Kingdom 1 month ago

London, England, United Kingdom 6 months ago

Security Analyst, Security Operations and Incident Response

London, England, United Kingdom 1 week ago

London, England, United Kingdom 3 weeks ago

Greater London, England, United Kingdom 5 days ago

CHECK Certified Penetration Tester / Remote / Outside IR35

Greater London, England, United Kingdom 1 week ago

London, England, United Kingdom 4 days ago

London, England, United Kingdom 2 months ago

London, England, United Kingdom 4 weeks ago

London, England, United Kingdom 2 weeks ago

London, England, United Kingdom 1 week ago

Greater London, England, United Kingdom 2 months ago

London, England, United Kingdom 2 days ago

London, England, United Kingdom 1 month ago

Senior Cybersecurity Consultant (Penetration Tester)

Application Security Engineer, Amazon Application Security

London, England, United Kingdom 1 day ago

London, England, United Kingdom 1 week ago

Application Security Engineer, Amazon Application Security

London, England, United Kingdom 1 week ago

Offensive Security Specialist - Penetration Tester

London, England, United Kingdom 1 week ago

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.