Lead Penetration Tester — Cloud & Web Security

CyberNorth; United Kingdom; Remote; GBP 70,000 - 110,000; Full time

Job summary

RMT Accountants & Business Advisors Ltd is seeking a Lead Penetration Tester with 5+ years of experience to lead client engagements and advance our Cyber Security practice. You will oversee penetration testing across infrastructure, web apps and cloud, deliver assessments and high-quality reports, and mentor junior consultants.

You’ll work with clients on security reviews aligned to recognised frameworks and help shape service offerings while staying ahead of emerging threats and best practices.

Qualifications

• Minimum five years’ experience delivering penetration testing engagements.
• Experience with external, internal and web app penetration testing.
• Ability to produce high-quality technical and executive reports.

Responsibilities

• Lead and deliver infrastructure, web app and cloud security penetration testing engagements.
• Conduct Cyber Essentials and Cyber Essentials Plus assessments.
• Deliver technical security reviews and vulnerability assessments.
• Produce high-quality reports with remediation guidance.
• Mentor and support junior consultants to develop technical capability.
• Develop testing methodologies, tools and service offerings.
• Support pre-sales activities and client presentations.

Skills

Penetration testing

External/internal/web app tests

Security assessments

Report writing

Communication skills

Client relations

Threat awareness

Education

CREST CRT

OSCP

CHECK Team Member

CSTM

Tools

Burp Suite Pro

Nessus

Qualys

OpenVAS

Nmap

Metasploit

Kali Linux

Job description

RMT Accountants & Business Advisors Ltd is seeking a Lead Penetration Tester with 5+ years of experience to lead client engagements and advance our Cyber Security practice. You will oversee penetration testing across infrastructure, web apps and cloud, deliver assessments and high-quality reports, and mentor junior consultants.

You’ll work with clients on security reviews aligned to recognised frameworks and help shape service offerings while staying ahead of emerging threats and best practices.