Senior Penetration Tester

Nigel Wright Group; North East; Hybrid; GBP 65,000 - 100,000; Full time

Job summary

Nigel Wright Group is seeking a Senior Penetration Tester to join a developing cyber security capability. The role combines hands-on testing with setting delivery standards and mentoring juniors, within a hybrid, national framework.

You will lead complex engagements, oversee Cyber Essentials Plus work, and engage in pre-sales discussions with clients. A strong testing background and relevant certifications are highly valued.

Qualifications

• Strong infrastructure penetration-testing experience.
• Some exposure to web application testing.
• The professional standing required to oversee Cyber Essentials Plus activity.
• Relevant industry certification, or a willingness to achieve CREST certification.
• The ability to produce clear, commercially focused technical reports.
• Confidence engaging with clients and supporting less experienced colleagues.
• A collaborative mindset and an interest in shaping how a growing service develops.
• Higher-level certifications such as OSCP or CHECK Team Leader/Member would be welcomed but are not essential.

Responsibilities

• Delivering infrastructure penetration tests and selected web application assessments.
• Leading more complex technical engagements from scoping through to reporting.
• Providing technical oversight and quality assurance for Cyber Essentials Plus testing.
• Coaching and supporting colleagues developing their penetration-testing expertise.
• Helping define methodologies, working practices and quality standards.
• Engaging directly with clients and contributing to technical pre-sales discussions.
• Supporting the wider development of the penetration-testing proposition.

Skills

Infrastructure pentest

Web app testing

Client engagement

Mentoring

Education

CREST certification

OSCP

CHECK

Tools

Burp Suite

Nessus

Job description

The Opportunity

An established national professional services group is building a new cyber security offering with ambitious plans for growth. This is an opportunity to join at an early stage, helping to establish a credible penetration-testing capability while benefiting from an extensive national client base and established routes to market.

As Senior Penetration Tester, you will provide the senior technical capability needed to develop and scale the organisation's penetration-testing service. You will remain hands-on with complex assignments while shaping delivery standards, supporting junior colleagues and building trusted relationships with clients.

The firm operates a hybrid working basis, where you will be expected to be onsite on a weekly basis, with occasional national travel to clients.

The Role

Key responsibilities will include:

• Delivering infrastructure penetration tests and selected web application assessments.
• Leading more complex technical engagements from scoping through to reporting.
• Providing technical oversight and quality assurance for Cyber Essentials Plus testing.
• Coaching and supporting colleagues developing their penetration-testing expertise.
• Helping define methodologies, working practices and quality standards.
• Engaging directly with clients and contributing to technical pre-sales discussions.
• Supporting the wider development of the penetration-testing proposition.

The Person

You will be an experienced, hands-on penetration tester who is comfortable joining a developing practice rather than an established consultancy environment.

You are likely to bring:

• Strong infrastructure penetration-testing experience.
• Some exposure to web application testing.
• The professional standing required to oversee Cyber Essentials Plus activity.
• Relevant industry certification, or a willingness to achieve CREST certification.
• The ability to produce clear, commercially focused technical reports.
• Confidence engaging with clients and supporting less experienced colleagues.
• A collaborative mindset and an interest in shaping how a growing service develops.

Higher-level certifications such as OSCP or CHECK Team Leader/Member would be welcomed but are not essential.