Security Testing Consultant | Penetration Tester

BAE Systems Digital Intelligence; Frimley; Hybrid; GBP 65,000 - 90,000; Full time

Job summary

BAE Systems Digital Intelligence in the UK seeks a Security Testing Consultant - Penetration Tester to perform and lead security assessments across web apps, infrastructure, cloud and external surfaces. You will work with CTS teams to build threat profiles and deliver actionable reports to customers.

We value strong technical capabilities, ability to communicate complex findings clearly, and a path toward CHECK Team Member status within six months.

Qualifications

• Experience in penetration testing, vulnerability assessment, systems administration, software development, or a closely related technical security role.
• Demonstrable understanding of common security testing methodologies, tools, and techniques across one or more: Web Application Security, Infrastructure Security, Cloud Security, API Security, Mobile Security.
• Strong understanding of common vulnerabilities and exploitation techniques, including the OWASP Top 10 and network security fundamentals, with clear report communication.
• Practical experience with industry-standard security tools such as Burp Suite, Nmap, Nessus, Metasploit, BloodHound, or similar.
• Self-motivated with a desire to continuously develop technical and consulting skills and eligible and willing to obtain CHECK Team Member status within the first 6 months.
• Flexibility and willingness to travel within the UK and internationally when required.

Responsibilities

• Support the delivery of security testing engagements across web apps, infrastructure, cloud environments and external attack surfaces.
• Perform and deliver security assessments independently and under supervision of senior consultants.
• Identify, validate, and document security vulnerabilities with remediation guidance and clear reports.
• Utilise security testing tools safely in line with standards and customer requirements.
• Collaborate across Security Testing, Threat Intelligence, Incident Response and Security Consulting to deliver client outcomes.
• Contribute to development of internal tooling, automation, and testing methodologies.
• Maintain awareness of threats, vulnerabilities, and security technologies.
• Participate in technical training and certification to progress towards CHECK Team Member status.

Skills

Penetration testing

Vulnerability assessment

Systems administration

Software development

Web Application Security

Infrastructure Security

Cloud Security

API Security

Mobile Security

Burp Suite

Nmap

Nessus

Metasploit

BloodHound

Tools

Burp Suite

Nmap

Nessus

Metasploit

BloodHound

Job description

BAE Systems Digital Intelligence in the UK seeks a Security Testing Consultant - Penetration Tester to perform and lead security assessments across web apps, infrastructure, cloud and external surfaces. You will work with CTS teams to build threat profiles and deliver actionable reports to customers.

We value strong technical capabilities, ability to communicate complex findings clearly, and a path toward CHECK Team Member status within six months.