Senior Penetration Tester

Nigel Wright Group; Newcastle upon Tyne; Hybrid; GBP 60,000 - 90,000; Full time

Job summary

Nigel Wright Group is seeking an experienced Senior Penetration Tester to help establish and scale a new cyber security offering. You will be hands-on across complex engagements, develop delivery standards, and mentor junior colleagues while building trusted client relationships.

The role is hybrid, requiring on-site work weekly with periodic national travel to client sites, contributing to a growing practice in a national corporate environment.

Qualifications

• Strong hands-on infrastructure penetration testing experience.
• Exposure to web application testing desirable.
• Ability to produce clear, commercially-focused technical reports.

Responsibilities

• Deliver infrastructure penetration tests and select web app assessments.
• Lead complex engagements from scoping through reporting.
• Provide technical oversight and QA for testing activities.
• Coach and support junior penetration testers.

Skills

Infrastructure pentest

Web app testing

Client engagement

Technical report writing

Education

CREST certification

Job description

The Opportunity
An established national professional services group is building a new cyber security offering with ambitious plans for growth. This is an opportunity to join at an early stage, helping to establish a credible penetration–testing capability while benefiting from an extensive national client base and established routes to market.

As Senior Penetration Tester, you will provide the senior technical capability needed to develop and scale the organisation's penetration–testing service. You will remain hands–on with complex assignments while shaping delivery standards, supporting junior colleagues and building trusted relationships with clients.

The firm operates a hybrid working basis, where you will be expected to be onsite on a weekly basis, with occasional national travel to clients.

The Role
Key responsibilities will include:

• Delivering infrastructure penetration tests and selected web application assessments.
• Leading more complex technical engagements from scoping through to reporting.
• Providing technical oversight and quality assurance for Cyber Essentials Plus testing.
• Coaching and supporting colleagues developing their penetration–testing expertise.
• Helping define methodologies, working practices and quality standards.
• Engaging directly with clients and contributing to technical pre–sales discussions.
• Supporting the wider development of the penetration–testing proposition.

The Person
You will be an experienced, hands–on penetration tester who is comfortable joining a developing practice rather than an established consultancy environment.

You are likely to bring:

• Strong infrastructure penetration–testing experience.
• Some exposure to web application testing.
• The professional standing required to oversee Cyber Essentials Plus activity.
• Relevant industry certification, or a willingness to achieve CREST certification.
• The ability to produce clear, commercially focused technical reports.
• Confidence engaging with clients and supporting less experienced colleagues.
• A collaborative mindset and an interest in shaping how a growing service develops.

Higher–level certifications such as OSCP or CHECK Team Leader/Member would be welcomed but are not essential.