Senior Penetration Tester - Consultancy

Hamilton Barnes; Greater London; On-site; GBP 50,000 - 65,000; Full time

Job summary

Hamilton Barnes is seeking a Senior Penetration Tester to perform hands-on testing across infrastructure, networks, web applications and APIs for varied client environments. The role emphasizes contributing to an offensive security function rather than sole test delivery.

You will deliver tests, identify vulnerabilities, and produce detailed client reports while mentoring junior testers and helping evolve testing methodologies.

Qualifications

• 3+ years of commercial penetration testing experience.
• Experience with offensive security methodologies.
• Infrastructure, network and web application testing experience.
• Good understanding of Active Directory and Windows.
• Experience with Burp Suite, Nmap, Metasploit and Kali.
• Scripting experience with Python, PowerShell or Bash.
• Strong communication and client-facing skills.
• Curious, technically minded and solution-oriented approach.

Responsibilities

• Deliver infrastructure, network, web and API penetration tests.
• Identify and exploit vulnerabilities and realistic attack paths.
• Conduct manual testing alongside automated tooling.
• Produce clear, technically detailed client reports.
• Present findings and remediation advice to clients.
• Contribute to offensive security methodologies and tooling.
• Support junior testers and share technical knowledge.

Skills

Penetration testing

Offensive security

Infrastructure testing

AD/Windows

Burp Suite

Nmap

Metasploit

Kali

Python

PowerShell

Bash

Client-facing

Curious mind

Tools

Burp Suite

Nmap

Metasploit

Kali

Job description

Ready to take the next step in your career?

Join the world's first AI-managed IT and security platform, replacing the traditional MSP model with a single fixed-price subscription covering managed IT, defensive security, and unlimited offensive testing. Serving customers across 90+ countries with agentic AI running through every layer of operations, the UK-headquartered organization holds ISO 27001, PCI-DSS, and CREST certifications.

This is a great opportunity for a Senior Penetration Tester to deliver hands-on testing across infrastructure, networks, web applications, and APIs for varied client environments. The ideal candidate will work on technically challenging engagements while contributing to a wider security operation, rather than simply delivering standalone penetration tests.

Responsibilities

• Deliver infrastructure, network, web and API penetration tests.
• Identify and exploit vulnerabilities and realistic attack paths.
• Conduct manual testing alongside automated tooling.
• Produce clear, technically detailed client reports.
• Present findings and remediation advice to clients.
• Contribute to offensive security methodologies and tooling.
• Support junior testers and share technical knowledge.

Skills/Must Have

• 3+ years' commercial penetration testing experience.
• Strong understanding of offensive security methodologies.
• Infrastructure, network and web application testing experience.
• Good understanding of Active Directory and Windows.
• Experience with Burp Suite, Nmap, Metasploit and Kali.
• Scripting experience with Python, PowerShell or Bash.
• Strong communication and client-facing skills.
• Curious, technically minded and solution-oriented approach.

Desirable Skills

• CREST CRT/CCT
• Other recognised offensive security certifications
• Certifications are desirable, not essential. Commercial experience and hands-on technical capability are the priority.

Benefits

• Work across varied and technically challenging client environments.
• Join an established offensive security function with genuine technical depth.
• Develop your skills across penetration testing and wider offensive security.

Salary

• £50,000 - £65,000 depending on experience