Penetration Tester

Damia Group Ltd; England; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

A leading IT consultancy in the UK is seeking an experienced Penetration Tester with active SC clearance for a hybrid role in Wokingham. You will conduct penetration tests and collaborate with teams to address security vulnerabilities. Ideal candidates will have relevant certifications and strong skills in ethical hacking. Competitive pay at around £400 per day, with a commitment expected for 2 to 3 months.

Qualifications

• Proven experience in penetration testing, ethical hacking, or red teaming.
• Strong understanding of OWASP Top 10, MITRE ATT&CK, and CVSS scoring.
• Excellent analytical, communication, and report writing skills.

Responsibilities

• Conduct manual and automated penetration tests on web applications, networks, APIs, and mobile platforms.
• Identify, exploit, and document security vulnerabilities with detailed risk assessment.
• Collaborate with development and infrastructure teams to remediate findings.

Skills

Penetration testing

Ethical hacking

Security vulnerability assessment

Tools proficiency (Burp Suite, Metasploit)

Scripting languages (Python, Bash, PowerShell)

Education

Relevant certifications (e.g., OSCP, CEH)

Tools

Burp Suite

Metasploit

Nmap

Wireshark

Kali Linux

Job description

Penetration Tester – Hybrid (Wokingham) – Circa 400 per day inside ir35 – 2/3 months+

All applicants must hold an active SC clearance.

My client is a global leading IT consultancy. They are on the hunt for an SC cleared PEN Tester to join them on an assignment until the end of the year.

Key Responsibilities

• Conduct manual and automated penetration tests on web applications, networks, APIs, and mobile platforms
• Identify, exploit, and document security vulnerabilities with detailed risk assessment
• Develop and execute red team exercises and threat simulations
• Collaborate with development and infrastructure teams to remediate findings
• Prepare comprehensive reports outlining findings, impact, and mitigation strategies
• Stay current with latest attack vectors, tools, and security trends
• Assist in security awareness training and internal education efforts
• Contribute to security policies and best practices development

Required Skills & Qualifications

• Proven experience in penetration testing, ethical hacking, or red teaming
• Strong understanding of OWASP Top 10, MITRE ATT&CK, and CVSS scoring
• Proficiency with tools like Burp Suite, Metasploit, Nmap, Wireshark, Kali Linux
• Familiarity with scripting languages (Python, Bash, PowerShell)
• Knowledge of network protocols, operating systems, and cloud environments
• Relevant certifications (e.g., OSCP, CEH, GPEN, CRTP) are highly desirable
• Excellent analytical, communication, and report writing skills

Damia Group Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept our Data Protection Policy which can be found on our website.

Please note that no terminology in this advert is intended to discriminate on the grounds of a person's gender, marital status, race, religion, colour, age, disability or sexual orientation. Every candidate will be assessed only in accordance with their merits, qualifications and ability to perform the duties of the job.

Damia Group is acting as an Employment Business in relation to this vacancy and in accordance to Conduct Regulations 2003.