Senior Penetration Tester

JR United Kingdom; Woking; On-site; GBP 50,000 - 90,000; Full time

Job summary

A leading cyber consultancy is seeking a Senior Penetration Tester to join their elite team. You will be responsible for executing complex penetration tests, mentoring junior testers, and staying abreast of the latest threat landscapes. The role is client-facing and requires strong technical expertise in penetration testing and red teaming methodologies.

Qualifications

• Proven experience in penetration testing and red teaming across various environments.
• Familiarity with frameworks such as OWASP, MITRE ATT&CK, and NIST.
• Strong understanding of the threat landscape and attack methodologies.

Responsibilities

• Lead and execute complex penetration tests and adversary simulations.
• Deliver red team engagements aligned with frameworks like TIBER, CBEST, and MITRE ATT&CK.
• Create detailed technical and executive reports for clients.

Skills

Penetration testing

Red teaming

Understanding of attacker TTPs

Detection evasion

Continuous learning

Education

Certifications such as OSCP, CRTO, OSEP, or CREST CRT

Tools

C2 frameworks (e.g., Cobalt Strike, PoshC2, Sliver)

Job description

Opus are looking for an experienced Penetration Tester to join our client, a cyber consultancy specialising exclusively in penetration testing and red teaming, delivering high-impact, adversary-simulated engagements for clients ranging from agile tech scale-ups to critical infrastructure providers. As a Senior Penetration Tester, you’ll play a central role in executing and shaping these engagements—across infrastructure, web, cloud, and bespoke environments—while also leading goal-based assessments and full-scale red team operations.

This is a hands-on, client-facing position suited to someone who thrives in technically demanding scenarios and wants to work alongside a small, elite team of offensive security specialists.

Key Responsibilities

• Lead and execute complex penetration tests and adversary simulations
• Deliver red team engagements aligned with frameworks like TIBER, CBEST, and MITRE ATT&CK
• Develop custom tooling and exploits where required
• Create detailed, client-facing technical and executive reports
• Mentor junior testers and contribute to internal R&D
• Stay sharp: engage in continuous learning and threat landscape analysis

About You

• Proven experience in penetration testing and red teaming (internal, external, app, cloud, etc.)
• Strong understanding of attacker TTPs and detection evasion
• Familiarity with frameworks such as OWASP, MITRE ATT&CK, and NIST
• Experience with C2 frameworks (e.g., Cobalt Strike, PoshC2, Sliver)
• Certifications such as OSCP, CRTO, OSEP, or CREST CRT preferred (but not required)