Security Testing Consultant – Penetration Tester (Hybrid)

BAE Systems; Frimley; Hybrid; GBP 75,000 - 95,000; Full time

Job summary

BAE Systems Digital Intelligence is seeking a Security Testing Consultant – Penetration Tester to deliver security testing engagements across web applications, infrastructure, cloud environments and external attack surfaces. You will identify vulnerabilities and provide remediation guidance while producing clear reports for technical and non-technical audiences.

Role requires experience in penetration testing, familiarity with OWASP Top 10, and tools like Burp Suite, Nmap and Nessus.

Qualifications

• Experience in penetration testing, vulnerability assessment, or related security role.
• Knowledge of security testing methodologies, tools, and techniques: web, infrastructure, cloud, API, or mobile security.
• Ability to communicate technical findings clearly in reports and discussions.
• Familiarity with industry tools such as Burp Suite, Nmap, Nessus, Metasploit, BloodHound.
• Willingness to travel within the UK and internationally; aim for CHECK Team Member status within 6 months.

Responsibilities

• Support security testing engagements across web, infrastructure, cloud, and external surfaces.
• Perform and deliver security assessments independently and with supervision.
• Identify and document vulnerabilities; provide remediation guidance and clear reports.
• Utilise testing tools in line with company standards and client requirements.
• Collaborate with Security Testing, Threat Intelligence, Incident Response, and Security Consulting teams to deliver client outcomes.
• Contribute to internal tooling, automation, and testing methodologies.
• Stay aware of emerging threats and security technologies.
• Participate in training and certification to progress toward CHECK Team Member status.

Skills

Penetration testing

Vulnerability assessment

Security testing methodologies

OWASP Top 10

Burp Suite

Nessus

Metasploit

Tools

Burp Suite

Nmap

Nessus

Metasploit

BloodHound

Job description

BAE Systems Digital Intelligence is seeking a Security Testing Consultant – Penetration Tester to deliver security testing engagements across web applications, infrastructure, cloud environments and external attack surfaces. You will identify vulnerabilities and provide remediation guidance while producing clear reports for technical and non-technical audiences.

Role requires experience in penetration testing, familiarity with OWASP Top 10, and tools like Burp Suite, Nmap and Nessus.