Penetration Tester

10Nex Consultancy; Greater London; On-site; GBP 65,000 - 90,000; Full time

Job summary

10Nex Consultancy in London is seeking a Security Testing Consultant to join its offensive security team. You’ll work on web app & API penetration testing, infrastructure and cloud security engagements, owning tests and client reporting.

Ideal candidates have 3–5 years of commercial pentesting, hands-on with Burp Suite, Kali, Nmap and Metasploit, and a track record of clear technical reporting. CREST/OSCP-like certs are a plus but not required.

Qualifications

• 3–5 years of commercial penetration testing experience.
• Experience across web application, infrastructure, AD and cloud environments.
• Proficient with Burp Suite, Kali Linux, Nmap and Metasploit.
• Familiar with OWASP methodologies and attack techniques.
• Clear technical reporting and client communication.

Responsibilities

• Web Application & API Penetration Testing.
• Infrastructure & Active Directory testing.
• Cloud Security testing across AWS, Azure and GCP.
• End-to-End Engagements – owning tests and producing reports for clients.
• Offensive Security Research – contributing to new methodologies and tooling.

Skills

Penetration testing

Reporting & client communication

Cloud security understanding

Threat modeling

Education

CREST CRT / OSCP / OSWE or similar certifications

Tools

Burp Suite

Kali Linux

Nmap

Metasploit

Job description

Security Testing Consultant | Offensive Security

Already working in penetration testing but feel like you've got more to offer than running the same tests every week?

I'm working with a growing London-based cybersecurity consultancy that's looking for a talented Security Testing Consultant to join its offensive security team.

This is a great opportunity for someone with a few years of hands-on experience who wants to take their technical skills to the next level.

The best part? You're not going to be stuck doing the same web app tests day in, day out.

You'll get exposure to a genuinely varied range of engagements, working with established businesses across regulated industries, complex infrastructure and modern cloud environments.

What you'll be getting involved in

• Web Application & API Penetration Testing – finding real vulnerabilities in modern applications.
• Infrastructure & Active Directory – testing internal networks, identifying weaknesses and exploring attack paths.
• Cloud Security – hands-on testing across AWS, Azure and GCP environments.
• End-to-End Engagements – owning your tests, producing reports and working directly with clients.
• Offensive Security Research – contributing to new methodologies, tooling and testing approaches.

Ideally, you'll have 3–5 years of commercial penetration testing experience and a solid foundation across:

• Web application and infrastructure penetration testing
• Burp Suite, Kali Linux, Nmap and Metasploit
• OWASP methodologies and common attack techniques
• Active Directory, networks and cloud environments
• Clear technical reporting and client communication

CREST CRT, OSCP, OSWE or similar certifications would be great, but they're not essential.

No degree requirement either. Your technical ability and what you've actually achieved matter far more.

Why this opportunity stands out

This is where things get interesting.

The business is actively investing in developing its consultants, with opportunities to move beyond traditional penetration testing into more advanced offensive security work.

You'll have access to:

• Red Team & Assumed Breach Engagements – develop your skills in realistic attack scenarios.
• AI & LLM Security Testing – gain exposure to one of the fastest-evolving areas of cybersecurity.
• Fully Funded Certifications – support towards OSCP, OSWE, OSEP, CRTO and CREST qualifications.
• Conferences & Training – ongoing professional development and opportunities to learn from experienced testers.
• Clear Progression to Senior – genuine room to grow without having to leave the business to take the next step.
• Competitive Salary + Bonus – with a team that values technical development.

You'll be surrounded by experienced offensive security professionals who genuinely enjoy what they do and are keen to share their knowledge.

If you're a Penetration Tester who's hungry to develop technically, explore Red Teaming and AI security, and work towards becoming a more rounded offensive security professional, this is worth a conversation.

Drop me a message or email [e-mail] for a confidential chat.