Penetration Testing Consultant - Web & API Security

Moore Kingston Smith; Greater London; On-site; GBP 45,000 - 55,000; Full time

Job summary

Moore Kingston Smith is seeking an experienced Cyber Security Consultant specializing in penetration testing to join our client‑facing advisory team in London. The role focuses on delivering hands‑on penetration tests across web apps, APIs, and networks, with involvement in Cyber Essentials Plus and broader security reviews.

Ideal candidates will have strong manual testing skills, experience with Kali, Burp Suite, Nmap and vulnerability assessments, and be capable of communicating risks clearly

Qualifications

• Experience delivering client‑facing penetration tests across web apps, APIs, and networks.
• Strong manual testing with tool‑assisted testing using Kali Linux, Burp Suite, Nmap, and Qualys or Nessus.
• Familiar with testing methodologies and scripting in Python, PowerShell, Bash or equivalent.
• Knowledge of modern web architecture, vulnerabilities, TCP/IP, Windows/Linux security, AD and Entra ID paths.
• Experience with vulnerability assessments and CIS benchmarks.
• Familiarity with Cyber Essentials/Cyber Essentials Plus schemes; training provided if needed.
• Ability to manage engagements within agreed scope, timescales, budget and quality standards.
• Strong written and verbal communication; ability to present findings clearly.

Responsibilities

• Lead and support penetration testing engagements across web apps, APIs and networks.
• Define objectives, scope and rules of engagement with clients.
• Apply manual and tool‑assisted testing techniques aligned with OWASP, PTES and MITRE ATT&CK.
• Deliver Cyber Essentials Plus assessments and support certification processes.
• Deliver vulnerability assessments, cloud security reviews and CIS benchmarked reviews.
• Produce clear, high‑quality deliverables and present findings to stakeholders.
• Support advisory engagements such as risk assessments and security design advice.
• Build strong client relationships and contribute to proposals and business development.
• Maintain knowledge of threat landscape and contribute to methodology improvements.

Skills

Penetration testing

Kali Linux

Burp Suite

Nmap

Qualys

Nessus

Python scripting

PowerShell

Bash

Web/API security

Active Directory

Entra ID

CIS benchmarks

Cyber Essentials

Tools

Burp Suite

Nmap

Qualys

Nessus

Python

Job description

Moore Kingston Smith is seeking an experienced Cyber Security Consultant specializing in penetration testing to join our client‑facing advisory team in London. The role focuses on delivering hands‑on penetration tests across web apps, APIs, and networks, with involvement in Cyber Essentials Plus and broader security reviews.

Ideal candidates will have strong manual testing skills, experience with Kali, Burp Suite, Nmap and vulnerability assessments, and be capable of communicating risks clearly