Senior Penetration Tester

JR United Kingdom; Bedford; On-site; GBP 50,000 - 90,000; Full time

Job summary

A cyber consultancy known for its elite penetration testing and red teaming services is seeking a Senior Penetration Tester. In this hands-on role, you will execute complex tests and lead engagements across multiple environments, while mentoring junior testers. The position requires proven experience, familiarity with relevant frameworks, and a passion for offensive security.

Qualifications

• Proven experience in penetration testing and red teaming across various environments.
• Strong understanding of attacker TTPs and detection evasion.
• Familiarity with OWASP, MITRE ATT&CK, and NIST frameworks.

Responsibilities

• Lead and execute complex penetration tests and adversary simulations.
• Deliver red team engagements aligned with key frameworks.
• Create detailed, client-facing technical and executive reports.

Skills

Penetration testing

Red teaming

Threat landscape analysis

Mentoring

Education

Certifications such as OSCP, CRTO, OSEP, or CREST CRT

Tools

Cobalt Strike

PoshC2

Sliver

Job description

Opus are looking for an experienced Penetration Tester to join our client, a cyber consultancy specialising exclusively in penetration testing and red teaming, delivering high-impact, adversary-simulated engagements for clients ranging from agile tech scale-ups to critical infrastructure providers. As a Senior Penetration Tester, you’ll play a central role in executing and shaping these engagements—across infrastructure, web, cloud, and bespoke environments—while also leading goal-based assessments and full-scale red team operations.

This is a hands-on, client-facing position suited to someone who thrives in technically demanding scenarios and wants to work alongside a small, elite team of offensive security specialists.

Key Responsibilities

• Lead and execute complex penetration tests and adversary simulations
• Deliver red team engagements aligned with frameworks like TIBER, CBEST, and MITRE ATT&CK
• Develop custom tooling and exploits where required
• Create detailed, client-facing technical and executive reports
• Mentor junior testers and contribute to internal R&D
• Stay sharp: engage in continuous learning and threat landscape analysis

About You

• Proven experience in penetration testing and red teaming (internal, external, app, cloud, etc.)
• Strong understanding of attacker TTPs and detection evasion
• Familiarity with frameworks such as OWASP, MITRE ATT&CK, and NIST
• Experience with C2 frameworks (e.g., Cobalt Strike, PoshC2, Sliver)
• Certifications such as OSCP, CRTO, OSEP, or CREST CRT preferred (but not required)