Penetration Tester - CHECK Team Member

Digital Waffle; United Kingdom; Hybrid; GBP 40,000 - 60,000; Full time

Job summary

A cybersecurity firm is seeking a Penetration Tester (CHECK Team Member) to conduct network, web, and application security testing. This role requires 1-3 years of experience in penetration testing and eligibility for security clearance. The ideal candidate will deliver high-quality testing and reporting while collaborating with senior team members. This position offers a hybrid/remote work model based in the UK.

Qualifications

• 1-3 years' experience in penetration testing or offensive security.
• CHECK Team Member status (or eligible within 6 months).
• Strong technical understanding of attack methods, tools, and frameworks.

Responsibilities

• Deliver high-quality penetration tests and vulnerability assessments.
• Produce clear, actionable reports and remediation guidance.
• Support CHECK-accredited engagements and collaborate with senior testers.

Skills

Penetration testing

Offensive security

Excellent communication skills

Tools

Python

PowerShell

Bash

Job description

Job Title: Penetration Tester (CHECK Team Member)

Location: UK (Hybrid / Remote) | Experience: 1-3 years | Eligibility: UK National

About the Role

We're looking for a Penetration Tester (CHECK Team Member) to join our growing cybersecurity team. You'll conduct network, web, and application security testing for a range of clients, helping identify vulnerabilities and strengthen defences.

Key Responsibilities

• Deliver high-quality penetration tests and vulnerability assessments.
• Produce clear, actionable reports and remediation guidance.
• Support CHECK-accredited engagements and collaborate with senior testers.
• Stay current with new exploits, tools, and testing techniques.

Requirements

• UK National (security clearance eligibility required).
• 1-3 years' experience in penetration testing or offensive security.
• CHECK Team Member status (or eligible within 6 months).
• Strong technical understanding of attack methods, tools, and frameworks.
• Excellent communication and reporting skills.

Desirable

• CREST CRT, OSCP, or similar certifications.
• Scripting experience (Python, PowerShell, Bash).
• Experience with government or regulated environments.