8 jobs found

Penetration Tester - SC CLEARED - Wokingham, Berkshire and remote - 5 months+ (Tester, Test, Testing, Test Analyst, Test Engineer, Test Specialist, Security, AWS, Azure, Cloud, Crest, CyberScheme) One of our Blue Chip Clients is urgently looking for an SC Cleared Penetration Tester. Please find some details below: CONTRACTOR MUST HOLD ACTIVE SC CLEARANCE MUST BE PAYE THROUGH UMBRELLA Role Description: A penetration tester plays a vital role within the UK's cybersecurity industry, particularly when assisting organisations with managing and mitigating security risks. The core responsibilities of a penetration tester are to identify vulnerabilities that are present in an organisation's IT infrastructure, applications, and networks through rigorous testing. Employing both manual and automated techniques to simulate real world attacks, this will assess a company's security posture against any potential threats. Testers should also be responsible for maintaining an up-to-date knowledge of the ever-evolving threat landscape, adhering to ethical guidelines especially when handling sensitive data. In addition to strong technical skills, a penetration tester also needs to be able to demonstrate strong communication skills so complex findings can be described to non-technical stakeholders. Key Responsibilities Work as a professional, deliverable Technical Consultant (Penetration Tester CTM), offering clients a totally professional customer service experience, whilst adhering to its core values and company policies and procedures Conduct the full range of effective and comprehensive technical assessments and consultancy services to the highest standards Maintain an accurate and up to date knowledge of information security issues, keeping abreast of new technologies, methodologies, techniques, vulnerabilities and market trends and communicate this throughout the team Produce concise and accurate technical reports and executive summaries, in line with client and company expectations in accordance with the QA manual and within defined deadlines Participate in more specialist areas of technical assessments and consultancy services where required Participate in delivery of security management consultancy including IT Health Checks (ITHC), risk assessments and compliance and standards based audits, where required Engage with and fully participate in research & service development projects Ensure professional, coherent and relevant communication within our clients at an appropriate level, using relevant language and at all times, behave in a manner that reflects the values of the client. Maintain confidentiality at all times Ensure that work is carried out in accordance with defined policies and procedures Complete all tasks in a manner that displays a commercial awareness; ie managing client expectations and ensuring that project tasks are completed on time and on budget Complete administrative duties, which include weekly timesheet and expense submissions Through the course of your duties, identify opportunities for further business development and growth and ensure that this is communicated to your line manager, the PMO and Sales department Where necessary assist the commercial team in the preparation of test scopes and proposals Carry out any other additional, reasonable and alternative tasks that may be required from time to time Required skills, experience and personal attributes: Proven experience (2-3 years) in an IT security role to CTM level is essential and have, or be able to attain SC clearance (UK Single National) Excellent written and verbal communication skills. Great organisation skills and ability to work in a pressurised environment whilst working towards and achieving deadlines. Use of MS Office software such as Word, Excel, Powerpoint The ability to travel customer locations. Strong knowledge of penetration testing tools including (Burpsuite, Metasploit, Nmap) etc Good knowledge of multiple Operating Systems (OS) including Windows &.NIX Ability to configure network devices, Firewalls, IDS/IPS devices and wireless technologies Document findings in detailed reports, providing clear recommendations for remediation using in-house developed reporting tool. Good understanding of common security standards and regulatory compliance such as GDPR, ISO27001 and PCI DSS An ability to work effectively and positively within a team and willing to collaborate and readily share knowledge and skills MUST: Relevant degree/postgraduate degree CHECK Team Member qualification (Crest/CyberScheme) Experience in Cloud Security (AWS/Azure) Please send CV for full details and immediate interviews. We are a preferred supplier to the client.

LSEG is seeking a Senior Penetration Tester to join our internal offensive security team. This role is hands-on and deeply technical, responsible for planning and driving penetration tests across a wide range of systems and applications. The successful candidate will be a skilled offensive security professional with a passion for uncovering vulnerabilities and improving security posture through thorough testing and teamwork. Key Responsibilities Conduct in-depth penetration tests on applications, infrastructure, and cloud environments. Take full ownership of assigned penetration testing engagements end-to-end and deliver with limited oversight. Compile technical scoping documents, track and document assessment metadata + Engagement details (who, what, when, where) + Testing team members and roles + Tools and methodologies used + Schedule and timelines + Target systems and environments + Constraints, exclusions, and limitations + Testing activities and event logs Document findings clearly and concisely, providing actionable remediation guidance. Collaborate with application teams to scope, perform, and report on security assessments. Contribute to team improvement efforts and ensure all initiatives and feedback are well documented for future references. Contribute to the continuous improvement of testing methodologies, tooling, automation. Stay ahead of emerging threats, vulnerabilities, and offensive security techniques. Participate in R&D initiatives as guided from leadership. Support educational sessions and mentoring within the team. Develop and maintain custom tools, scripts, and exploits to support testing activities. Required Skills & Experience Proven hands-on experience in penetration testing of Web Applications, APIs, Thick Client and Common Infrastructures (Active Directory, Cloud and Cloud-native based environments). Proficiency with tools such as Burp Suite, common command-line tools, and ability to write custom scripts when needed. Experience in automating pentesting tasks. Solid understanding of application security, network protocols, and operating systems. Experience with cloud platforms (AWS, Azure, GCP) and containerized environments (Docker, Kubernetes). Ability to write clear, technical reports and communicate findings to both technical and non-technical customers. Experience working in large, sophisticated enterprise environments. Proficient interpersonal skills in English, both written and verbal. Relevant certifications and engagement with the security community is a plus Threat Modelling experience is a plus. Experience working in large, sophisticated enterprise environments. Proven track record of successfully managing and driving security engagements for various organizations with differing operational and technical profiles. Ability to identify, assess, and communicate technical and project risks to partners. Understanding project requirements and aligning results with agreed upon objectives and timelines. Career Stage: Senior Associate London Stock Exchange Group (LSEG) Information: Join us and be part of a team that values innovation, quality, and continuous improvement. If you're ready to take your career to the next level and make a significant impact, we'd love to hear from you.LSEG is a leading global financial markets infrastructure and data provider. Our purpose is driving financial stability, empowering economies and enabling customers to create sustainable growth.Our purpose is the foundation on which our culture is built. Our values of Integrity, Partnership , Excellence and Change underpin our purpose and set the standard for everything we do, every day. They go to the heart of who we are and guide our decision making and everyday actions.Working with us means that you will be part of a dynamic organisation of 25,000 people across 65 countries. However, we will value your individuality and enable you to bring your true self to work so you can help enrich our diverse workforce.We are proud to be an equal opportunities employer. This means that we do not discriminate on the basis of anyone's race, religion, colour, national origin, gender, sexual orientation, gender identity, gender expression, age, marital status, veteran status, pregnancy or disability, or any other basis protected under applicable law. Conforming with applicable law, we can reasonably accommodate applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs.You will be part of a collaborative and creative culture where we encourage new ideas. We are committed to sustainability across our global business and we are proud to partner with our customers to help them meet their sustainability objectives. Our charity, the LSEG Foundation provides charitable grants to community groups that help people access economic opportunities and build a secure future with financial independence. Colleagues can get involved through fundraising and volunteering.LSEG offers a range of tailored benefits and support, including healthcare, retirement planning, paid volunteering days and wellbeing initiatives.Please take a moment to read this carefully, as it describes what personal information London Stock Exchange Group (LSEG) (we) may hold about you, what it's used for, and how it's obtained, .If you are submitting as a Recruitment Agency Partner, it is essential and your responsibility to ensure that candidates applying to LSEG are aware of this privacy notice.LSEG (London Stock Exchange Group) is a leading global financial markets infrastructure and data provider. Our purpose is driving financial stability, empowering economies and enabling customers to create sustainable growth. Our culture of connecting, creating opportunity and delivering excellence shapes how we think, how we do things and how we help our people fulfil their potential.

Recruitment Consultant - Cyber Security InfoSec People Cheltenham Contract Build Your Brand. Own Your Market. Become a Cyber Recruitment Specialist. Cyber Security isn't just booming - it's one of the most recession-resistant, fast-growing, talent-short sectors in the world. And you could be right at the centre of it. Join InfoSec People , a respected boutique cyber & tech recruitment consultancy (now proudly part of Matchtech), and build a high-performing cyber security recruitment desk with the backing of industry experts, an established brand, and a clear path for rapid career progression. This is your chance to become a specialist cyber recruiter in a market where great recruiters thrive - because demand has never been higher. The Opportunity: As a Recruitment Consultant, you'll take ownership of your own cyber security desk , developing deep knowledge of the cyber landscape and building long-term partnerships with security leaders, engineering talent, and high-growth tech organisations. You'll recruit across the full spectrum of cyber roles, depending on your niche - including: Cyber Security Analysts & Engineers Penetration Testers & Red Team Specialists GRC, Risk & Compliance Cloud Security & DevSecOps Security Architects & Security Consultants This is a people-first, high-trust, specialist environment - not a numbers game. You'll be trained to understand the cyber market, speak the language, and become a go-to recruiter in one of the most exciting technical sectors globally. What You'll Do: Manage the full 360 recruitment lifecycle across cyber security roles. Build a strong network of cyber professionals, from entry-level to C-Suite. Partner with hiring managers and CISOs to understand deep technical needs. Source and engage passive talent through headhunting, networking, and market insight. Develop your desk through business development, relationship building, and delivering high-quality matches. Own your performance, pipeline, and personal brand within the cyber community. What's in it for you? A Cyber Recruitment Desk with Real Momentum You're not starting cold. Backed by InfoSec People's respected brand and the reach of the Matchtech Group , you'll have the traction, clients, and candidate flow to scale quickly. SME Culture, Big-Company Support We're still InfoSec People at heart - same leadership, same values, same boutique feel - now powered by a larger group with better tools, tech, and reach. Career Growth Without Limits Cyber is growing - and so are we. Your progression is based on performance, not time served.Our consultants have gone on to achieve life-changing milestones such as buying their first homes, building new teams, and stepping into leadership roles. Real Training from Real Cyber Experts We'll teach you the cyber landscape, the terminology, and the market movements - so you can speak confidently and become a respected subject-matter recruiter. We're Looking For: Recruiters with 360 experience from any market - if you can recruit, we can teach you cyber. Cyber/tech sales professionals with sector knowledge who want to build a recruitment career. Naturally curious people who enjoy understanding complex tech topics. Driven, ambitious individuals who want to build a desk, not just work one. Confident communicators who thrive in a relationship-led environment. What We Offer: A supportive, people-first culture with strong team identity. Mentoring from experienced cyber recruitment specialists. Flexible working options to support balance and wellbeing. Market-leading tools, tech, and training. Clear, achievable progression within a scaling brand. Who We Are: InfoSec People is a boutique cyber & technology recruitment consultancy known for quality, expertise, and trust. Now part of Gattaca PLC , our mission remains unchanged: to connect outstanding cyber talent with organisations that keep the digital world secure. Gattaca has over 35 years of experience delivering trusted talent solutions across STEM sectors. Our values - Trust, Professionalism, Ambition, and Fun - guide every interaction, ensuring we build careers, not just fill roles. Our Recruitment Process We are committed to diversity, inclusion, and accessibility.Our process typically includes phone, video, and face-to-face conversations. We offer reasonable adjustments such as: Interview questions in advance Written formats Flexible timings Office visits Alternative interview environments Just tell us what you need - we'll make it work. Ready to build a high-impact career in one of the world's most in-demand sectors? Curious to learn more about becoming a Cyber Security Recruitment Specialist with InfoSec People? Apply now - let's talk about your future. ID:382439

Penetration Tester - Leading Managed Services Provider Remote based. Salary: Up to 60k, depending on experience. A leading Managed Services Provider are seeking to recruit a technically skilled Cyber Security / Penetration Tester. This is a fantastic opportunity to join a well-established organisation delivering high-quality security services to enterprise clients across the UK. As a Penetration Tester, you will be responsible for conducting manual penetration testing across both application and infrastructure layers. You will contribute to secure build reviews, advise on secure design practices, and provide technical insight to both internal teams and clients. Key Responsibilities Perform manual penetration testing of web applications and infrastructure Conduct security build reviews across common operating systems (Windows, Redhat, Solaris) Analyse and harden database environments in line with security best practices Review and advise on web server design and implementation Produce clear and concise technical reports for a range of stakeholders Collaborate with internal teams and clients to support remediation and secure development Required Skills and Experience Proven experience in manual penetration testing (application and infrastructure) Strong understanding of TCP/IP and core networking principles Extensive experience testing web-based applications Familiarity with secure configuration and build reviews across major operating systems Comfortable programming in one or more languages (e.g. Python, Java, C#, Bash) Deep knowledge of database security and hardening techniques Solid technical understanding of web application architecture and server implementation Ideally you'll be working towards CREST Certified Web Application Tester or CREST Certified Infrastructure Tester or equivalent. If you are a technically driven Penetration Tester seeking a new challenge within a respected Managed Services Provider, we would be pleased to hear from you. Remote based. Paying up to 60k, depending on experience. Must be eligible for SC Clearance.

CHECK Team Leader (CTL) or CHECK Team Member (CTM) Infrastructure PenTest, Penetration Testers - Cyber Security Testing required by our Public sector, government client. FULLY REMOTE with occasional client visits to Manchester, North West, or Newcastle upon-Tyne, North East. Outside of IR35-c.£650 to £700 a day Working in an SC Security Cleared environment, You will hold current SC Clearance or DV (Developed Vetting) or be eligible to undertake Security clearance >Working within the Cyber Security Team, you will be responsible for Pen Testing as well as mentoring, knowledge transfer to team members. Skills/experience required: CSTL or CSTM-essential (NCSC) Previous experience of penetration testing public sector or critical national infrastructure (CNI) systems and networks. Azure,AWS On-prem Infrastructure Containers,Kubernetes excellent communication skills, with previous coaching and training skills Please apply on line SmartSourcing are a Disability Confident Employer and we promote, celebrate and value diversity, we are committed to promoting equality and inclusion for all.

Position: Penetration Tester Location: London (with potential travel to client sites) Contract Role - 6-12 months, extendable A deliverables-focused role, working on defined OT penetration testing engagements. What You'll Do: Conduct thorough penetration tests on client systems, applications, and networks - specifically OT/ICS systems - to identify security weaknesses. Perform threat modelling and adversarial simulations. Collaborate with clients to understand their security needs and provide tailored recommendations. Develop and execute test plans, ensuring all testing is carried out ethically and professionally. Document and present findings in clear, concise reports, highlighting vulnerabilities and their potential impacts. Advise on remediation steps aligned with OT security best practices and relevant standards (e.g. IEC 62443, NIS2, NERC CIP). Modis International Ltd acts as an employment agency for permanent recruitment and an employment business for the supply of temporary workers in the UK. Modis Europe Ltd provide a variety of international solutions that connect clients to the best talent in the world. For all positions based in Switzerland, Modis Europe Ltd works with its licensed Swiss partner Accurity GmbH to ensure that candidate applications are handled in accordance with Swiss law. Both Modis International Ltd and Modis Europe Ltd are Equal Opportunities Employers. By applying for this role your details will be submitted to Modis International Ltd and/ or Modis Europe Ltd. Our Candidate Privacy Information Statement which explains how we will use your information is available on the Modis website.

Penetration Tester (SC Cleared) Location: Wokingham - Hybrid working (50/50 split) Contract Duration: Until 26/12/2025 initially - with a view to extend Daily Rate: £525/day Inside IR35 - Candidates will need to work through an Umbrella Company Clearance Required: Active SC Clearance We are looking for an experienced Penetration Tester to join a cybersecurity team. This role offers the opportunity to work on a hybrid basis, engaging in high-impact security assessments across various platforms and environments. Key Responsibilities: Conduct manual and automated penetration tests on web applications, networks, APIs, and mobile platforms Identify, exploit, and document vulnerabilities, delivering detailed risk assessments Design and execute red team exercises and threat simulations Work closely with development and infrastructure teams to remediate findings Produce comprehensive reports highlighting risks, impacts, and mitigation strategies Stay up to date on emerging threats, tools, and techniques Support internal security awareness training and initiatives Contribute to the development of security policies and best practices Required Skills & Experience: Strong background in penetration testing, ethical hacking, or red teaming Deep knowledge of OWASP Top 10, MITRE ATT&CK, and CVSS scoring systems Proficiency with tools such as Burp Suite, Metasploit, Nmap, Wireshark, and Kali Linux Scripting experience with Python, Bash, or PowerShell Understanding of network protocols, operating systems, and cloud platforms Certifications such as OSCP , CEH , GPEN , or CRTP (highly desirable) Excellent analytical, communication, and reporting skills If you are interested and looking for your next role, please apply with a copy of your CV

Penetration Tester - HIRING ASAP Start date: ASAP Duration: Till end of December 2025 with an extension thereafter Location: 2-3 days in Wokingham, 2-3 days remote working. Rate: £459 per day inside ir35 Responsibilities Conduct manual and automated penetration tests on web applications, networks, APIs, and mobile platforms. Identify, exploit, and document security vulnerabilities with detailed risk assessments. Develop and execute red team exercises and threat simulations. Collaborate with development and infrastructure teams to remediate findings. Prepare comprehensive reports outlining findings, impact, and mitigation strategies. Stay current with latest attack vectors, tools, and security trends. Assist in security awareness training and internal education efforts. Contribute to security policies and best practices development. Key Skills Proven experience in penetration testing, ethical hacking, or red teaming. Strong understanding of OWASP Top 10, MITRE ATT&CK, and CVSS scoring. Proficiency with tools like Burp Suite, Metasploit, Nmap, Wireshark, Kali Linux. Familiarity with Scripting languages (Python, Bash, PowerShell). Knowledge of network protocols, operating systems, and cloud environments. Relevant certifications (eg, OSCP, CEH, GPEN, CRTP) are highly desirable. Excellent analytical, communication, and report-writing skills