Penetration Tester

Bytes Software Services; Leatherhead; On-site; GBP 42,000 - 62,000; Full time

Job summary

Bytes Software Services is seeking a penetration tester to deliver high-quality testing across infrastructure, web apps, APIs and cloud environments. You will provide actionable security recommendations and work with sales and account teams to scope opportunities.

You will be part of a CREST-certified Assurance Testing team, collaborating with security professionals to improve client security postures through testing, research and continuous learning.

Qualifications

• 1–3 years of experience in penetration testing, cybersecurity or security consulting.
• Experience delivering penetration testing services or supporting security assessment engagements.
• Strong understanding of cybersecurity principles, vulnerability assessment and penetration testing methodologies.
• Recognised security certification such as OSCP, GPEN, Security+, CPSA, CEH or CRT.
• Excellent verbal and written communication skills.
• Ability to pass BPSS or HMG Security Clearance requirements.

Responsibilities

• Conduct penetration testing engagements across infrastructure, web apps, APIs, mobile apps, cloud platforms and red team activities.
• Deliver high-quality testing services with meaningful, actionable recommendations.
• Collaborate with Assurance Testing leadership on internal projects and service improvements.
• Support sales teams in scoping new opportunities with technical input for proposals.
• Manage customer engagements to ensure timely delivery and excellent outcomes.
• Conduct quality assurance reviews of reports and proposals to ensure accuracy and standards compliance.
• Contribute to maintaining and updating the team’s vulnerability database.

Skills

Penetration testing

Cybersecurity concepts

Communication

Stakeholder engagement

Time management

Job description

Cyber threats continue to evolve at an unprecedented pace, making proactive security testing more important than ever. Organisations need confidence that their systems, applications and cloud environments can withstand real-world attacks before malicious actors have the opportunity to exploit them.

This role is about more than identifying vulnerabilities. It's about helping customers understand their security risks, strengthen their defences and improve their overall security posture. If you're passionate about cybersecurity and enjoy combining technical expertise with customer engagement, you'll have the opportunity to make a tangible impact while working across a diverse range of penetration testing engagements.

Mission

This role exists to deliver high-quality penetration testing and security consulting services to a broad range of customers, helping them identify, understand and remediate security weaknesses before they can be exploited.

Working as part of a CREST-certified Assurance Testing team, you will perform security assessments across infrastructure, web applications, APIs, cloud environments and other technologies while continuously developing your skills and expanding your expertise.

Working closely with team leaders, sales teams and customer stakeholders, you will contribute to successful client engagements while supporting the ongoing growth and development of our Assurance Testing practice.

What you will deliver within the role

• You will conduct penetration testing engagements across a variety of environments, including infrastructure, web applications, APIs, mobile applications, cloud platforms and red team activities.
• You will deliver high-quality testing services that provide meaningful and actionable security recommendations to customers.
• You will work closely with the Assurance Testing leadership team on internal projects, research initiatives and service improvement activities.
• You will collaborate with sales teams to support the scoping of new opportunities and contribute technical expertise to customer proposals.
• You will manage customer engagements to ensure timely delivery and excellent customer outcomes.
• You will conduct quality assurance reviews of reports and proposals, ensuring accuracy and adherence to professional standards.
• You will contribute to the maintenance and development of the team's vulnerability database, helping keep content accurate and up to date.
• You will support account managers and customers during scoping discussions, helping define testing requirements and delivery approaches.
• You will share knowledge and provide technical support to colleagues, contributing to a collaborative and supportive team environment.
• You will continuously develop your technical capabilities through self-study, certifications, research and on-the-job learning.
• Experience in penetration testing, cybersecurity or security consulting, typically gained over 1-3 years.
• Experience delivering penetration testing services or supporting security assessment engagements.
• Strong understanding of cybersecurity principles, vulnerability assessment and penetration testing methodologies.
• A recognised security certification such as OSCP, GPEN, Security+, CPSA, CEH or CRT.
• Excellent verbal and written communication skills, with the ability to communicate technical findings to a variety of audiences.
• Strong customer focus and commitment to delivering high-quality outcomes.
• Good time management and organisational skills, with the ability to manage competing priorities effectively.
• A proactive mindset with a passion for learning, continuous improvement and professional development.
• Ability to pass BPSS or HMG Security Clearance requirements.
• A collaborative approach with a strong code of ethics, professionalism and integrity.

Why Bytes

At Bytes, you'll join a growing, CREST-certified penetration testing practice with ambitious plans for expansion and development. You'll work alongside highly skilled security professionals, delivering real value to customers while gaining exposure to a wide range of technologies, industries and testing methodologies.

We invest heavily in the development of our people, providing dedicated time for training, research and industry-recognised certifications. Whether you're looking to broaden your testing expertise or deepen your specialism, you'll have the support and encouragement needed to continue progressing your cybersecurity career.

With a collaborative culture, strong technical leadership and opportunities to contribute to service innovation, you'll be part of a team that is passionate about security, continuous learning and delivering exceptional outcomes for customers.

Ready to apply?

If you're passionate about penetration testing, eager to continue developing your cybersecurity skills and want to work as part of a supportive and highly skilled security team, we'd love to hear from you.