Penetration Tester

Bonhill Partners; Greater London; On-site; GBP 80,000 - 110,000; Full time

Job summary

Bonhill Partners in London is seeking an experienced offensive security professional to join our red team on an initial six-month contract with a guaranteed conversion to permanent employment. You will simulate advanced attacker campaigns, establish footholds, maintain covert access, and perform attack simulations across applications, infrastructure, and user systems.

You will produce concise reports, security assessments, and operational documentation for senior stakeholders, translating

Qualifications

• At least 3 years of hands-on experience within offensive security or red team environments.
• Proven capability to emulate sophisticated attackers and establish footholds in enterprise networks.
• Strong awareness of adversary behaviour including insider threats and state-backed operations.
• Comprehensive knowledge of penetration testing methodologies and attack simulation techniques.
• Experience translating security weaknesses into actionable remediation recommendations.
• Understanding of advanced threat campaigns and how attackers plan, execute and adapt.
• Good knowledge of modern enterprise technology stacks and how apps, infrastructure and users interact.
• Understanding of defensive security capabilities including monitoring, detection engineering and SIEM platforms.
• Ability to investigate complex findings and communicate concise conclusions to senior stakeholders.

Responsibilities

• Emulate real-world attacker techniques and conduct red team exercises within enterprise environments.
• Establish footholds, maintain access, and perform covert activity to assess security controls.
• Translate findings into clear, actionable remediation recommendations for senior stakeholders.
• Produce concise security assessments, reports, and operational documentation.

Skills

Offensive security

Red team experience

Threat emulation

Penetration testing

Attack simulation

Remediation reporting

SIEM & monitoring

Executive communication

Enterprise tech stacks

Covert access techniques

Job description

Location: London, Bank: 3-4 days in office.

Details: Initial 6 month contract, with guaranteed conversion to perm within that period.

Initial Contract Rate: TBC

Skills & Experience

• At least 3 years of hands-on experience within offensive security or red team environments.
• Proven capability to emulate sophisticated attackers, including establishing footholds, maintaining access and operating covertly within enterprise networks.
• Strong awareness of real-world adversary behaviour, including insider threats, financially motivated groups and state-backed operations.
• Comprehensive knowledge of penetration testing methodologies, offensive tooling and attack simulation techniques.
• Experience translating technical security weaknesses into clear, actionable recommendations for remediation.
• Strong understanding of advanced threat campaigns, including how attackers plan, execute and adapt their techniques.
• Good knowledge of modern enterprise technology stacks and how applications, infrastructure and user-facing systems interact.
• Understanding of defensive security capabilities, including security monitoring, detection engineering and SIEM platforms.
• Able to investigate technically complex findings, identify key risks and communicate concise conclusions to senior stakeholders.
• Strong written communication skills, with experience producing technical reports, security assessments and operational documentation.