Lead Penetration Tester

About the Role

Our client is seeking a highly skilled Lead Penetration Tester for a contract position, offered on a fully remote basis. You will be responsible for planning and conducting comprehensive security assessments of client systems and applications to identify vulnerabilities. This role requires a deep understanding of offensive security techniques and the ability to provide actionable insights to improve security posture. This is a remote contract role, allowing you to leverage your expertise from anywhere in the UK.

Key Responsibilities

• Plan, scope, and execute external and internal penetration tests on networks, web applications, and mobile applications.
• Identify and exploit security vulnerabilities, documenting findings clearly and concisely.
• Conduct social engineering assessments and physical security tests as required.
• Develop detailed reports outlining identified vulnerabilities, risk assessments, and remediation recommendations.
• Provide expert advice and guidance to clients on improving their security defences.
• Stay current with the latest exploitation techniques and security tools.

Requirements

• Demonstrable experience (5+ years) in professional penetration testing .
• Expertise with penetration testing tools and frameworks (e.g., Metasploit, Burp Suite, Nmap).
• Strong understanding of network protocols, operating systems, and web application security.
• Experience in writing high-quality technical reports and presenting findings to technical and non-technical audiences.
• Relevant certifications such as OSCP, CEH, or GPEN are highly advantageous.

Benefits

• Excellent daily rate reflecting your expertise.
• Flexible working hours and location – fully remote.
• Opportunity to work with a diverse range of clients and technologies.
• Potential for long-term contract engagement based on performance.
• Contribute to significant security improvements for various organisations.