Penetration Tester

Cognitive Group | Part of the Focus Cloud Group; United Kingdom; Hybrid; GBP 55,000 - 90,000; Full time

Benefits offered by this job

Annual performance bonus

Flexible and hybrid working

25 days annual leave

Employee share schemes

Job summary

Cognitive Group | Part of the Focus Cloud Group is expanding its specialist Cyber Security team with experienced Penetration Testers at Consultant and Senior Consultant levels in the UK. The role is hybrid with onsite requirements varying by client needs and a focus on diverse engagements across cloud, web, APIs, mobile, OT, and critical infrastructure.

You will deliver high-quality testing, produce professional reports, present findings to clients, and contribute to training and research

Qualifications

• Experience in penetration testing across multiple environments.
• Ability to produce clear technical and executive reports.
• Willingness to mentor colleagues and share knowledge.

Responsibilities

• Deliver penetration testing engagements independently or in teams.
• Conduct security assessments across cloud, web, mobile, OT, and networks.
• Produce clear, professional reports and present findings to clients.
• Mentor colleagues and contribute to security tooling and training initiatives.
• Support wider security projects requiring specialist expertise.

Skills

Penetration testing

Security reporting

Client engagement

Mentoring colleagues

Education

CHECK CTM/CSTM or CTL/CSTL

OSCP

CREST certifications

Cyber Scheme certifications

Job description

A leading technology and consulting organisation is looking to expand its specialist Cyber Security team with the addition of experienced Penetration Testers at Consultant and Senior Consultant level.

About the Role

• Location: UK (Hybrid)

Working across a diverse portfolio of public and private sector clients, you will deliver high-quality penetration testing engagements covering cloud environments, web applications, APIs, mobile applications, operational technology (OT), embedded systems, critical infrastructure, and enterprise networks. This role offers far more than traditional penetration testing. Alongside client engagements, consultants are encouraged to contribute to research, training, thought leadership, and broader cyber security initiatives, allowing you to develop your expertise and build your profile within the industry. Candidates must be based in the UK and have full right to work in the UK. Unfortunately, visa sponsorship is not available for this position. Applicants must also be willing to work in a hybrid environment, with onsite requirements varying depending on client needs.

Responsibilities

• Deliver penetration testing engagements independently and as part of larger project teams
• Conduct security assessments across a variety of technologies and environments
• Produce clear, professional technical and executive-level reports
• Present findings and recommendations to clients
• Share knowledge and mentor colleagues across the cyber security practice
• Support wider security projects where specialist technical expertise is required
• Contribute to team development, tooling, methodologies, and internal training initiatives

Qualifications

Candidates should have experience in penetration testing and hold, or be working towards, recognised industry certifications such as:

• CHECK Team Member (CTM/CSTM) or CHECK Team Leader (CTL/CSTL)
• OSCP
• CREST certifications
• Cyber Scheme certifications

Preferred Skills

Experience in one or more of the following areas would be highly advantageous:

• Cloud Security Testing
• Operational Technology (OT) Security
• Mobile Application Security Testing
• Web & API Security Testing
• Telecommunications
• Defence & Government Environments
• Maritime Security
• Critical National Infrastructure (CNI)

Pay range and compensation package

What's on Offer

• Support and funding for professional certifications
• Assistance in achieving and maintaining CHECK status
• Dedicated training and development budget
• Opportunities to contribute to research and industry publications
• Exposure to complex and high-profile security engagements
• Flexible and hybrid working arrangements
• Annual performance bonus
• 25 days annual leave plus additional holiday purchase options
• Employee share and salary sacrifice schemes
• Community and charity volunteering opportunities