Penetration Tester (CHECK, NIS-R, IEC 62443) - 6 months - Remote -

Hamilton Barnes; United Kingdom; Remote; GBP 80,000 - 100,000; Full time

Job summary

A leading cybersecurity firm is seeking an experienced Penetration Tester for a 6-month remote role. You will conduct advanced security assessments in critical national infrastructure environments, ensuring compliance with NIS-R and IEC 62443 standards. The ideal candidate will have CHECK accreditation and proven experience in penetration testing. This position offers market rates with a view to extend, starting ASAP.

Qualifications

• Must have CHECK Team status or equivalent in security.
• Experience conducting tests in critical infrastructure environments.
• Knowledge of NIS-R and IEC 62443 standards is essential.

Responsibilities

• Conduct penetration tests on systems and applications.
• Support evaluation of GSM-R/FTS platforms.
• Deliver security testing under NCSC CHECK methodologies.
• Review system architectures for compliance.
• Produce clear test reports with vulnerabilities.
• Collaborate to enhance security posture.
• Contribute to security test procedures in CNI.

Skills

CHECK Team Member (CTM) or CHECK Team Leader (CTL)

Proven experience in penetration testing

Practical knowledge of NIS Regulations

Strong understanding of network protocols

Experience with both application and infrastructure testing

Excellent report writing skills

Job description

Penetration Tester (CHECK, NIS–R, IEC 62443) – 6 months – Remote – Outside IR35

We are seeking an experienced Penetration Tester to perform advanced security assessments within a critical national infrastructure environment. You will play a key role in testing and assuring the security of complex operational technology (OT) and IP–based communication systems aligned to NIS–R and IEC 62443 standards. This is an excellent opportunity for a technically strong tester with CHECK accreditation to support a major security assurance programme in the rail communications domain.

Key Responsibilities:

• Conduct detailed penetration tests and vulnerability assessments on networked systems, applications, and operational technology components.
• Support the security evaluation of GSM–R/FTS platforms and IP terminal systems (ISDN to IP migration projects).
• Deliver security testing in accordance with NCSC CHECK methodologies and industry best practice.
• Review system architecture and configurations for compliance with NIS–R and IEC 62443 requirements.
• Produce clear, concise test reports outlining vulnerabilities, exploitation methods, and remediation advice.
• Collaborate with internal engineering, compliance, and risk teams to improve the organisation's security posture.
• Contribute to the ongoing development of security test procedures for CNI and OT environments.

What You Will Ideally Bring:

• CHECK Team Member (CTM) or CHECK Team Leader (CTL) status (or equivalent under Crest, Cyber Scheme, or Tigerscheme).
• Pro experience conducting penetration tests within critical infrastructure, ICSE, or operational technology environments.
• Practical knowledge of NIS Regulations (NIS–R) and IEC 62443 standards.
• Strong understanding of network protocols including TCP/IP, SIP, RTP, VoIP, and industrial protocols.
• Experience with both application and infrastructure testing methodologies.
• Excellent report writing and stakeholder communication skills.

Contract Details:

• Duration: 6 months (view to extend)
• Day Rate: Market Rates (Outside IR35)
• Location: fully remote
• Start Date: ASAP