Penetration Tester Consultant | Remote UK

Bayforce, Inc.; United Kingdom; Remote; GBP 82,000 - 109,000; Part time

Job summary

Bayforce, Inc. is seeking an experienced Penetration Tester for security assessments delivered in one-week sprints. Candidates must be based in the UK and available to start immediately, with remote work within the UK.

You will support enterprise network and web application assessments, combining automated scanning with targeted manual testing, validating findings, and delivering client-ready reports with remediation recommendations.

Qualifications

• 5+ years of experience in penetration testing, vulnerability assessment, or application security.
• Hands-on experience with Burp Suite and Nessus or comparable scanners.
• Strong understanding of OWASP Top 10, network vulnerabilities, HTTP/HTTPS, authentication, and session management.
• Experience validating vulnerabilities through manual testing.
• Strong security report writing and stakeholder communication skills.
• Ability to deliver assessed work within a one-week sprint.

Responsibilities

• Conduct internal and external network penetration testing across multiple subnets and IP ranges.
• Test web applications with multiple user roles using Burp Suite.
• Run vulnerability scans using Nessus or similar tools.
• Validate findings, eliminate false positives, and perform targeted manual exploitation where needed.
• Document vulnerabilities, severity, business impact, and remediation steps.
• Coordinate scope, timelines, and deliverables with stakeholders.
• Present findings clearly to technical and non-technical audiences.

Skills

Penetration testing

Vulnerability assessment

Manual testing

Network security

Web application security

Security reporting

Stakeholder communication

Tools

Burp Suite

Nessus

Job description

We’re looking for an experienced Penetration Tester for short-term security assessments delivered in one-week sprints. Candidates must be based in the UK and available to start immediately.

Engagement: Contract

Duration: One-week sprints only

Location: Remote within the UK

The opportunity

Support enterprise network and web application assessments, combining automated scanning with targeted manual testing. You’ll validate findings and deliver client-ready reports explaining security risks, business impact, and remediation recommendations.

Key responsibilities

• Conduct internal and external network penetration testing across multiple subnets and IP ranges, with assessment environments of up to approximately 750 internal and 300 external IPs.
• Test web applications with multiple user roles using Burp Suite.
• Run vulnerability scans using Nessus or similar tools.
• Validate findings, eliminate false positives, and perform targeted manual exploitation where needed.
• Document vulnerabilities, severity, business impact, and practical remediation steps.
• Coordinate scope, timelines, and deliverables with stakeholders.
• Present findings clearly to technical and non-technical audiences.

What we’re looking for

• 5+ years of experience in penetration testing, vulnerability assessment, or application security.
• Hands-on experience with Burp Suite and Nessus or comparable vulnerability scanners.
• Strong understanding of OWASP Top 10, network vulnerabilities, HTTP/HTTPS, authentication, and session management.
• Experience validating vulnerabilities through manual testing.
• Strong security report writing and stakeholder communication skills.
• Ability to deliver agreed assessment work within a one-week sprint.

Additional experience welcomed

Mobile, cloud, wireless, or AI/LLM security testing, plus certifications such as CEH, Security+, or similar.