Penetration Tester

LHH; United Kingdom; Hybrid; GBP 60,000 - 90,000; Full time

Job summary

LHH is seeking an experienced Penetration Tester to join its cybersecurity team. You will conduct rigorous testing across IT infrastructure, applications and networks, identifying vulnerabilities and simulating real-world attacks to help clients improve their security posture.

You will combine manual and automated techniques, keep up to date with threats, and communicate complex findings clearly to technical and non-technical stakeholders.

Qualifications

• Proven experience in penetration testing across IT infrastructure, applications and networks.
• Excellent ability to report findings clearly to technical and non-technical stakeholders.
• Willingness to obtain or hold Security Clearance (SC) where required.

Responsibilities

• Produce accurate documentation including technical reports, executive summaries, scopes and proposals.
• Engage with stakeholders to explain work and findings to a non-technical audience.
• Maintain high quality work while meeting client standards and confidentiality requirements.
• Keep up to date with emerging threats and penetration testing methodologies.
• Support development of security testing capabilities and services.
• Share knowledge with the team and contribute to research initiatives.
• Collaborate with colleagues and clients to deliver high-quality security outcomes.

Skills

Penetration testing

Communication

Security reporting

Tools

Burp Suite

Metasploit

Nmap

Job description

Our client is looking for an experienced Penetration Tester to join their cybersecurity team. This is an opportunity to play a key role in helping clients identify, understand and manage their security risks across IT infrastructure, applications and networks.

You will be responsible for undertaking rigorous penetration testing, identifying vulnerabilities and simulating real-world attacks to help clients assess their security posture against potential threats.

You will use a combination of manual and automated techniques and will be expected to keep your knowledge of the evolving threat landscape, vulnerabilities and attack methodologies up to date.

As well as strong technical capability, you will need excellent communication skills and the ability to explain complex technical findings clearly to both technical and non-technical stakeholders.

The role will involve a blend of home working, company offices and client sites. You will be required to attend client locations when necessary and this is not a 100% remote position.

Your role

Being certified as a CHECK Team Member (CTM) is a prerequisite for this role.

As a Penetration Tester, you will deliver high-quality penetration testing and consultancy services, as well as a range of security assessments, including specialist assessments and IT Health Checks.

Your responsibilities will include:

• Producing accurate and concise documentation, including technical reports, executive summaries, scopes and proposals.
• Engaging with a variety of stakeholders, including both technical and non-technical audiences, to ensure they understand the work delivered and its findings.
• Ensuring the quality, relevance and confidentiality of all work undertaken while meeting client expectations and required standards.
• Maintaining strong technical expertise and keeping up to date with emerging threats, technologies, vulnerabilities and penetration testing methodologies.
• Contributing to the development of security testing capabilities and services.
• Sharing knowledge across the wider team and contributing to research and initiatives that enhance technical capability.
• Working collaboratively with colleagues and clients to deliver high-quality security outcomes.

Your skills and experience

• Proven experience working in a Penetration Testing role.
• Strong knowledge of penetration testing tools including Burp Suite, Metasploit, Nmap and similar tools.
• Good knowledge of multiple operating systems, including *Windows and NIX environments.
• Ability to configure and assess network devices, firewalls, IDS/IPS devices and wireless technologies.
• Good understanding of common security standards and regulatory compliance, including GDPR, ISO 27001 and PCI DSS.
• Experience of testing AI / LLMs is desirable but not essential.
• Excellent written and verbal communication skills, including the ability to produce detailed reports and provide clear recommendations for remediation.
• Strong organisational skills, including the ability to work under pressure, manage competing priorities and deal with ambiguity.
• Ability and willingness to work effectively as part of a team, including sharing knowledge and technical expertise.
• Willingness to travel to client locations across the UK.

Security clearance and pre-employment checks

If successfully offered the position, you will be required to complete a series of pre-employment checks. These may include identity, nationality or immigration status, employment history covering the previous three continuous years, and an unspent criminal record check.

To be successfully appointed to this role, you will be required to obtain Security Check (SC) clearance.

To obtain SC clearance, candidates will normally need to have resided continuously in the UK for the last 5 years, alongside meeting the other relevant security vetting criteria.

During the recruitment process, you may be asked questions regarding your eligibility for security clearance, including your country of residence and nationality.

Some positions may be restricted to sole UK nationals for security reasons, so candidates may be asked to confirm their citizenship during the recruitment process.

The opportunity

This is an opportunity to join a team working on challenging cybersecurity assignments across a range of clients and environments.

You will have the opportunity to apply your technical expertise to real-world security challenges, work alongside experienced cybersecurity professionals and continue developing your penetration testing and consultancy skills.

If you are a CHECK-certified Penetration Tester looking for your next opportunity and have a strong technical background combined with the ability to communicate effectively with clients, we would be interested in hearing from you.