Penetration Tester

Investigo; England; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

A cybersecurity firm is seeking a Penetration Tester to conduct security assessments across various platforms in a hybrid working environment. Candidates must have a strong background in penetration testing, ethical hacking, and familiarity with security tools such as Burp Suite and Metasploit. The role requires active SC Clearance and offers a competitive daily rate of £525. Candidates will support internal training initiatives and contribute to security policy development.

Qualifications

• Strong background in penetration testing, ethical hacking, or red teaming.
• Deep knowledge of OWASP Top 10, MITRE ATT&CK, and CVSS scoring systems.
• Proficiency with tools such as Burp Suite, Metasploit, Nmap, Wireshark, and Kali Linux.

Responsibilities

• Conduct manual and automated penetration tests on web applications, networks, APIs, and mobile platforms.
• Identify, exploit, and document vulnerabilities, delivering detailed risk assessments.
• Design and execute red team exercises and threat simulations.
• Work closely with development and infrastructure teams to remediate findings.
• Produce comprehensive reports highlighting risks, impacts, and mitigation strategies.
• Stay up to date on emerging threats, tools, and techniques.
• Support internal security awareness training and initiatives.
• Contribute to the development of security policies and best practices.

Skills

Penetration testing

Ethical hacking

Red teaming

OWASP Top 10

MITRE ATT&CK

CVSS scoring systems

Burp Suite

Metasploit

Nmap

Wireshark

Kali Linux

Python

Bash

PowerShell

Education

Certifications such as OSCP, CEH, GPEN, or CRTP

Job description

Penetration Tester (SC Cleared)

Location: Wokingham – Hybrid working (50/50 split)
Contract Duration: Until 26/12/2025 initially – with a view to extend
Daily Rate: 525/day Inside IR35 – Candidates will need to work through an Umbrella Company
Clearance Required: Active SC Clearance

We are looking for an experienced Penetration Tester to join a cybersecurity team. This role offers the opportunity to work on a hybrid basis, engaging in high–impact security assessments across various platforms and environments.

Responsibilities

• Conduct manual and automated penetration tests on web applications, networks, APIs, and mobile platforms
• Identify, exploit, and document vulnerabilities, delivering detailed risk assessments
• Design and execute red team exercises and threat simulations
• Work closely with development and infrastructure teams to remediate findings
• Produce comprehensive reports highlighting risks, impacts, and mitigation strategies
• Stay up to date on emerging threats, tools, and techniques
• Support internal security awareness training and initiatives
• Contribute to the development of security policies and best practices

Required Skills & Experience

• Strong background in penetration testing, ethical hacking, or red teaming
• Deep knowledge of OWASP Top 10, MITRE ATT&CK, and CVSS scoring systems
• Proficiency with tools such as Burp Suite, Metasploit, Nmap, Wireshark, and Kali Linux
• Scripting experience with Python, Bash, or PowerShell
• Understanding of network protocols, operating systems, and cloud platforms
• Certifications such as OSCP, CEH, GPEN, or CRTP (highly desirable)
• Excellent analytical, communication, and reporting skills

If you are interested and looking for your next role, please apply with a copy of your CV