Penetration Testing Consultant (Cyber Security)

Cyberfort; City Of London; Remote; GBP 70,000 - 100,000; Full time

Benefits offered by this job

25 days annual leave

Hybrid and flexible working

Private Medical Insurance

Professional training and certs

Pension scheme

Life assurance

Employee referral bonus

Cycle to Work scheme

Job summary

Cyberfort is seeking an experienced security consultant to join our Assurance team. This role is primarily remote within the UK, with required travel to client sites up to a week, and about quarterly visits abroad as needed.

You will lead penetration testing engagements, manage client relationships, and deliver high-quality reports. Collaborate with testers and security specialists to advance our methodologies and help clients strengthen their cyber resilience.

Qualifications

• Proven experience delivering penetration testing and technical security assessments in consultancy, managed service or professional services.
• Strong understanding of operating systems, networks, web apps, cloud technologies and modern attack methodologies.
• Ability to independently manage and deliver security testing engagements from initiation through to completion.
• Experience producing clear, professional client reports and explaining findings to technical and non-technical audiences.
• Experience building trusted customer relationships and supporting ongoing account development.
• Commercial awareness balancing customer needs, risk and business objectives.
• Ability to work autonomously with competing priorities and strong analytical, problem-solving skills.
• Experience supporting proposal development, requirements gathering and engagement scoping.
• Knowledge of industry standards, compliance requirements and security best practices.
• Degree in IT, Cyber Security, Computer Science or related discipline, or equivalent practical experience.

Responsibilities

• Deliver penetration testing engagements from planning through reporting and client debrief.
• Lead client-facing projects, acting as trusted advisor and primary contact throughout delivery.
• Conduct technical security testing across environments, technologies and service lines, independently and with a team.
• Produce high-quality technical reports that clearly communicate risks and remediation advice.
• Support development and refinement of testing methodologies, tools and internal processes.
• Collaborate with Account Managers and technical teams to understand client requirements and scope new opportunities.
• Build and maintain strong customer relationships through excellent communication and technical expertise.
• Contribute to research and development initiatives exploring emerging threats, technologies and attack techniques.
• Develop tools, scripts and approaches to enhance delivery efficiency and client outcomes.
• Share knowledge and mentor colleagues to foster a culture of continuous improvement and technical excellence.

Job description

Location: Primarily remote (UK). However, as part of our commitment to meeting client needs, candidates must be willing to travel to client sites when required. This may involve spending up to a week on-site, either within the UK or overseas. Travel is expected approximately once per quarter, although this may vary depending on client requirements.

Full Time / Permanent

Hours: 37.5 hours per week

Reports to: Head of Delivery Operations

Join Cyberfort's Assurance team and play a pivotal role in helping organisations strengthen their cyber resilience. Working alongside experienced penetration testers and cyber security specialists, you'll deliver expert-led security assessments, build trusted client relationships, and contribute to the continuous evolution of our technical capabilities.

This is an exciting opportunity for an experienced consultant who enjoys solving complex security challenges, working directly with customers, and sharing knowledge within a collaborative and supportive team environment. You'll have the autonomy to lead technical engagements while continuing to develop your own skills and specialisms in a business that values curiosity, innovation and continuous learning.

What You'll Be Doing

• Deliver penetration testing engagements from planning through to reporting and client debrief.
• Lead client-facing projects, acting as a trusted advisor and primary point of contact throughout delivery.
• Conduct technical security testing across a range of environments, technologies and service lines, both independently and as part of a wider delivery team.
• Produce high-quality technical reports that clearly communicate risks, vulnerabilities and practical remediation advice.
• Support the development and refinement of testing methodologies, tools and internal processes.
• Work closely with Account Managers and technical teams to understand client requirements and support the scoping of new opportunities.
• Build and maintain strong customer relationships through excellent communication, professionalism and technical expertise.
• Contribute to research and development initiatives, exploring emerging threats, technologies and attack techniques.
• Develop tools, scripts and approaches that enhance delivery efficiency and client outcomes.
• Share knowledge, mentor colleagues and contribute to a culture of continuous improvement and technical excellence.

What We Are Looking For

We're looking for a passionate cyber security professional who combines strong technical expertise with excellent communication skills. You'll thrive on uncovering vulnerabilities, understanding customer challenges and delivering meaningful security outcomes that help organisations become more resilient.

You will enjoy working with a high degree of autonomy whilst also being an active contributor to a collaborative, knowledge-sharing team culture.

Essential Skills & Experience

• Proven experience delivering penetration testing and technical security assessments within a consultancy, managed service or professional services environment.
• Strong technical understanding of operating systems, networks, web applications, cloud technologies and modern attack methodologies.
• Ability to independently manage and deliver security testing engagements from initiation through to completion.
• Experience producing clear, accurate and professional client reports.
• Strong client-facing communication skills with the ability to explain technical findings to both technical and non-technical audiences.
• Experience building trusted customer relationships and supporting ongoing account development.
• Commercial awareness with an understanding of balancing customer needs, risk and business objectives.
• Ability to work autonomously, manage competing priorities and remain productive between client engagements.
• Strong analytical and problem-solving skills with a naturally questioning mindset.
• Experience supporting proposal development, requirements gathering and engagement scoping.
• Knowledge of industry standards, compliance requirements and security best practices.
• Degree in Information Technology, Cyber Security, Computer Science or a related discipline, or equivalent practical experience.

What Will Make You Stand Out

• CREST, CRT or CHECK Team Member qualification.
• Offensive Security certifications such as OSCP, OSEP or OSWP.
• Certified Red Team Operator (CRTO) certification.
• Microsoft AZ-500 certification.
• AWS Security Specialty certification.
• Experience across multiple penetration testing disciplines, including infrastructure, web application, cloud and red team engagements.
• Experience developing custom testing tools, automation or scripting solutions.
• Demonstrable research into emerging vulnerabilities, attack techniques or security technologies.
• Experience mentoring or supporting the development of junior consultants.
• Exposure to highly regulated sectors including government, financial services, healthcare or critical infrastructure.

Why Join Cyberfort

At Cyberfort, we're committed to creating an environment where our people can do their best work, develop their careers and feel part of something meaningful. Alongside a supportive culture and opportunities to grow, we've offer a package that supports your health, wellbeing, finances, development and work-life balance, helping you feel your best both inside and outside of work. Our benefits include:

• 25 days annual leave, plus bank holidays, and your birthday day off
• The option to buy and sell annual leave
• Hybrid and flexible working opportunities (where applicable)
• Enhanced family-friendly policies
• Company pension scheme
• Life assurance
• Private Medical Insurance and wellbeing support
• Professional training, certifications and learning opportunities
• Employee referral bonus scheme
• Recognition and reward programmes
• Electric Car & Cycle to Work scheme
• Discounts and savings through our employee benefits platform

A place where you can be yourself

At Cyberfort, we believe that diverse perspectives make us stronger. We're committed to creating an environment where everyone feels respected, supported and able to be themselves at work.

We know that talent comes in many forms, and we're dedicated to ensuring our recruitment process is accessible and inclusive for all. If there's anything we can do to support you during your application or interview experience, we'd encourage you to let us know.

We're proud to champion inclusion through our partnerships and commitments, including:

• Signatories of the Armed Forces Covenant
• Corporate Members of Neurodiversity in Business
• A Disability Confident Employer
• Supporters of the CyberFirst initiative

We're continually learning, listening and evolving to build a workplace where everyone has the opportunity to thrive, grow and make a meaningful impact.

About Cyberfort

Cyberfort helps organisations stay ahead of cyber threats. We work alongside businesses and public sector organisations to strengthen their security, identify vulnerabilities and respond to threats before they become incidents.

Our expertise spans cyber security consultancy, penetration testing and managed detection and response (MDR). From helping customers understand their cyber risks and improve their security posture, to testing critical systems and providing 24/7 threat monitoring, we deliver practical solutions that help organisations operate with confidence.

What makes Cyberfort different is our people. We combine deep technical expertise with a collaborative, customer-first approach, building trusted partnerships and helping our customers navigate an ever-changing threat landscape.

Our Values

At Cyberfort, how we work is just as important as what we do. Our culture is built around five core values: being curious, working as a team, staying agile, taking ownership, and thinking innovatively.

We're looking for individuals who are naturally inquisitive, collaborative, and adaptable people who take pride in their work, are open to learning, and are always looking for ways to improve both themselves and the way we deliver for our customers.

How the role fits into the company

• Supports Cyberfort's mission of making the world safer, one business at a time.
• Strengthens our Assurance practice by delivering high-quality penetration testing and consultancy services.
• Helps customers identify vulnerabilities and improve their overall security posture.
• Enhances Cyberfort's reputation as a trusted cyber security partner through technical excellence and customer-focused delivery.
• Contributes to the development of innovative testing approaches, tools and methodologies.
• Supports growth by identifying opportunities to expand services and deepen customer relationships.
• Promotes knowledge sharing and technical excellence across the wider Assurance team.