Lead Penetration Tester

In Cork; Bristol; Hybrid; GBP 75,000 - 85,000; Full time

Job summary

A global Software and Engineering company in the Defence Sector is seeking a Lead Penetration Tester for their Bristol office. The role entails leading a security testing team, both CHECK and non-CHECK assessments, and developing junior colleagues. Applicants should have experience in security testing services and hold relevant certifications. A competitive salary of £75k – £85k and various benefits are on offer. This is a hybrid role, requiring both onsite and remote work.

Benefits

Matched contribution pension scheme

Generous holiday allowance

Health Cash Plan and Private Medical Insurance

Employee discount portal

Volunteering Opportunities

Qualifications

• Sole UK nationals eligible for SC security clearance.
• 2+ years' experience in penetration testing or vulnerability assessment.
• CHECK, CREST, or equivalent certification required.

Responsibilities

• Undertake CHECK and non-CHECK security testing.
• Travel to client sites for security testing engagements.
• Perform R&D of new attack techniques to enhance security testing.

Skills

Documentation and reporting skills

Knowledge of Active Directory and infrastructure security

Experience in security testing services

NCSC CHECK Team Leader status

Understanding of relevant laws for security testing

Education

CCT-INF or CSTL-INF qualification

Tools

Metasploit

Burp Suite

Nmap

Job description

What Lead Penetration Tester Jobs are in Bristol

Showing 6 Lead Penetration Tester jobs in Bristol

Lead Penetration Tester – Bristol

We are working with a global Software, Systems & Engineering company in the Defence Sector, supporting them with appointing a Lead Penetration Tester who will be working as part of a testing team undertaking CHECK and non-CHECK security testing works for customers. Day‑to‑day, you’ll undertake a variety of work as part of a testing team acting in a leadership capacity as an infrastructure CHECK team leader.

Salary: £75k – £85k per annum + benefits

Location: Malvern or Bristol – hybrid (4 days per week onsite; 1-day WFH)

Working hours: 37 per week

Duration: 12 months

Requirements: sole UK nationals eligible for SC (dual nationals cannot apply)

Your responsibilities will include:

• Undertaking CHECK and non-CHECK security testing
• Travelling to client sites to carry out security testing engagements
• Performing research and development of new attack techniques that support and enhance the Company’s security testing capability
• Developing junior colleagues and operating with integrity and collaboration within the team
• Proposing mitigations for identified vulnerabilities and writing reports of security testing engagements for customers, including signing off reports
• Scoping, estimating and bidding customer engagements as required and directed

Essential experience:

• The ability to be able to document, create and sign off test reports
• A strong understanding of Active Directory, infrastructure, cloud security and common operating systems
• Previous experience delivering security testing services as a qualified (CREST or Cyber Scheme) tester
• NCSC CHECK Team Leader status in infrastructure (CCT-INF or CSTL-INF)
• A strong understanding of relevant laws and legal frameworks for security testing

Essential qualifications:

• CCT-INF or CSTL-INF

Benefits

• Matched contribution pension scheme, with life assurance
• Generous holiday allowance, with the option to purchase additional days
• Options to join Health Cash Plan, Private Medical Insurance and Dental Insurance
• Employee discount portal: Personal Accident Insurance, Travel Insurance, Restaurants, Cinema Tickets and much more
• We are proud to support the Armed Forces community by honouring the Armed Forces Covenant and maintaining our Gold Award standard in the Defence Employer Recognition Scheme
• Volunteering Opportunities – helping charities and local community

Penetration Tester – Bristol | Full-Time | Office based with Client Travel

Salary: £30,000 – £65,000pa (Depending on experience)

My client is a UK-based technology and cybersecurity consultancy delivering cutting‑edge solutions across sectors including telecoms, finance, defence, rail, and aerospace. With expertise in cybersecurity, software development, and R&D, they work on some of the most critical and challenging projects in the UK and beyond.

The Role

They’re looking for an experienced Penetration Tester to join their expert team in Bristol. You’ll be responsible for conducting advanced penetration tests, red team exercises, and vulnerability assessments, helping clients strengthen their defences and reduce risk.

What You’ll Do

• Perform penetration testing across networks, systems, and applications
• Lead vulnerability assessments and red teaming activities
• Create detailed reports and communicate findings clearly to clients
• Contribute to internal research and tool development

What You’ll Bring

• 2+ years’ experience in penetration testing or vulnerability assessment
• CHECK, CREST, or equivalent certification
• Strong technical understanding of networks, OS, and security tools (Metasploit, Burp Suite, Nmap, etc.)
• Excellent communication and problem‑solving skills

Nice to Have

• Coding/scripting (Python, Bash, C#)
• Web/mobile app testing, reverse engineering, or malware analysis
• Audit experience (ISO27001, CTAS, CAS(T))
• Mentoring or leadership capability

Why Apply?

Join a highly skilled team tackling complex cybersecurity challenges. This role offers real technical variety, professional growth, and the chance to make a tangible impact in the cyber sector.

Interested? Apply today or reach out to learn more about this opportunity.