Mid-Level Penetration tester

JR United Kingdom; City Of London; On-site; GBP 40,000 - 70,000; Full time

Job summary

A dynamic security consultancy in City of London is seeking a Mid-Level Penetration Tester. Ideal candidates will possess a proactive mindset and broad experience in security testing. The role offers ownership in testing engagements, professional development opportunities, and a supportive team environment. Responsibilities include conducting diverse penetration tests, client interaction, and mentoring juniors.

Benefits

Ongoing professional development

Access to industry events

Flexible working post-probation

Qualifications

• Strong security testing experience across applications, networks, and cloud platforms.
• Excellent verbal and written communication skills for client engagements.

Responsibilities

• Conduct various types of penetration testing.
• Create detailed reports and provide consultancy.
• Mentor junior team members and support project delivery.

Skills

Knowledge of OWASP methodologies

Offensive testing

Burp Suite

Kali

Nmap

Nessus

Qualys

Metasploit

Cloud platform security testing

Mobile security

Networking protocols

OSI model

Communication skills

Organizational skills

Job description

Social network you want to login/join with:

Mid-Level Penetration tester, london (city of london)

col-narrow-left

Client:

Location:

london (city of london), United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

2

Posted:

28.06.2025

Expiry Date:

12.08.2025

col-wide

Job Description:

Job Title:

Role:

An exciting opportunity for a mid-level Penetration Tester to join a dynamic and collaborative security consultancy based in London. This role is ideal for a proactive individual with a hacker’s mindset and broad security testing experience across applications, networks, cloud platforms, and more.

You'll be a key player in delivering high-quality penetration tests while also supporting client advisory, team development, and process improvement.

What’s in it for you?

Autonomy and ownership in conducting diverse penetration testing engagements.

Ongoing professional development with access to industry events and training.

A positively charged work environment with flexibility for hybrid working post-probation.

Responsibilities:

Conduct web, mobile, API, infrastructure, cloud, and wireless penetration testing.

Create detailed technical reports and deliver test findings directly to clients.

Provide remediation advice and post-assessment consultancy.

Contribute to internal testing methodologies and Red Team/social engineering activities.

Mentor junior team members and support collaborative delivery of projects.

Occasionally support the creation of marketing materials such as research papers and articles.

Skills / Must have:

Strong knowledge of OWASP methodologies and offensive testing across black/grey/white-box approaches.

Proficiency in tools like Burp Suite, Kali, Nmap, Nessus, Qualys, Metasploit.

Familiarity with cloud platform security testing (AWS, Azure, GCP).

Understanding of mobile security (Android & iOS), networking protocols, and the OSI model.

Excellent verbal and written communication skills, especially for client-facing engagements.

Highly organised, analytical, and able to manage multiple projects independently.

Ability to explain technical risks to non-technical stakeholders and C-level executives.

Desirable (“nice to have”) Skills:

Experience with programming, databases, and IoT security.

Exposure to CI/CD security, Docker/container security, and AI/LLM testing.

Hands-on experience with Red Teaming tools (e.g., Cobalt Strike) and social engineering.

Familiarity with bug bounty platforms and vulnerability disclosure best practices.

Competitive salary with regular performance reviews

Annual training and personal development plan

Access to conferences and professional events

Supportive and knowledgeable team culture