Penetration Tester Jobs

Ethical hackers who simulate cyber attacks to identify vulnerabilities. A critical role in safeguarding digital assets and ensuring robust security.

Open roles
10
Salary range
£40k – £88k
Hiring companies
10

Penetration testers, also known as ethical hackers, play a vital role in the cyber security landscape. They simulate real-world cyber attacks to identify and mitigate vulnerabilities in systems, networks, and applications. These professionals are hired by a range of organisations, from scaleups and research-heavy startups to larger consultancies, to ensure that digital defences are robust and resilient.

What the role does

Inside the role of a Penetration Tester

A typical week for a penetration tester is a mix of planning, execution, and reporting. They spend time researching attack vectors, conducting tests, and documenting findings.

  1. 01
    Conduct initial reconnaissance on target systems
  2. 02
    Execute simulated attacks to identify vulnerabilities
  3. 03
    Document findings and prepare detailed reports
  4. 04
    Collaborate with development teams to address identified issues
  5. 05
    Stay updated on the latest security threats and techniques
  6. 06
    Participate in debriefing sessions with clients or stakeholders
Salary on the board

£40k – £88k

Based on advertised midpoints across the 36 UK listings priced in pounds in the last 12 months. Base salary only.

Salary visibility
11% of listings advertise a salary — up from 0% the year before.
By seniority
£k base
Mid
40
81
14 jobs
Senior
58
93
9 jobs
Skills & tools

What hiring managers ask for

% of 32 listings posted in the last 12 months that mention each skill, extracted from job descriptions.

Penetration Testing
97%
Web Application Security
56%
Cloud Security
50%
Vulnerability Assessment
38%
Network Security
34%
OSCP
31%
API Security
25%
Red Teaming
25%
Infrastructure Testing
22%
Infrastructure Security
19%
Burp Suite
19%
CREST
19%
Career ladder

From Junior to Principal

A typical UK progression for penetration testers. Years are guidance — strong people move faster, and many senior folks sidestep into research, product or management.

  1. Level 1

    Junior Penetration Tester

    0–2 yrs

    Assists in planning and executing basic penetration tests under supervision. Focuses on learning and understanding security testing methodologies.

  2. Level 2

    Penetration Tester

    2–5 yrs

    Conducts comprehensive penetration tests independently. Owns the execution and reporting of test results, and provides recommendations for remediation.

  3. Level 3

    Senior Penetration Tester

    5–8 yrs

    Leads complex penetration testing projects. Mentors junior team members and collaborates with clients to develop and implement security strategies.

  4. Level 4

    Principal Penetration Tester

    8+ yrs

    Oversees the entire penetration testing function. Develops and standardises testing methodologies, and advises on high-level security policies and practices.

Pathway

How to become a Penetration Tester

There's no single route, but most people follow some version of these steps.

  1. 1

    Learn the Basics

    Start with foundational knowledge in networking, programming, and security principles. Gain hands-on experience through courses and certifications.

  2. 2

    Gain Practical Experience

    Work on real-world projects, either through internships or entry-level roles. Build a portfolio of penetration testing reports and case studies.

  3. 3

    Specialise in Tools and Techniques

    Develop expertise in specific tools and techniques used in penetration testing. Stay updated with the latest trends and threats in the cyber security landscape.

  4. 4

    Lead Projects and Teams

    Take on leadership roles, managing complex penetration testing projects and mentoring junior team members. Collaborate with clients to implement security solutions.

  5. 5

    Advise on Security Strategy

    Provide strategic advice on security policies and practices. Influence organisational decisions and contribute to the development of industry standards.

Live jobs

10 live roles

See all 10 roles →

Penetration Tester

2 days ago

SmartSourcing Ltd Manchester £60,000 – £80,000 pa

This role involves conducting comprehensive penetration tests across networks, web and mobile applications, APIs, and cloud environments using both manual and automated techniques. The tester will simulate real-world cyberattacks, identify vulnerabilities, and produce detailed technical and executive reports with actionable remediation advice. A key focus is translating complex security findings for non-technical stakeholders while adhering to strict ethical and compliance standards in a security-cleared context.

Remote Permanent Clearance Required

Penetration Tester

Last month

VIQU IT London £60,000 – £65,000 pa

Deliver end-to-end penetration testing engagements, from scoping through to reporting and client debriefs, across web applications, APIs, infrastructure, networks, cloud and mobile environments. Work directly with clients on a consultancy basis, producing technical reports and contributing to proposals, capability development and tooling. Requires strong Burp Suite, web/API and infrastructure testing skills, with Red Teaming and cloud security experience desirable.

Remote

Penetration Tester

3 weeks ago

10Nex Consultancy Grange, Greater London £55,000 – £60,000 pa

Conducts penetration tests across web applications, infrastructure, cloud environments and APIs, with exposure to Active Directory, AWS/Azure/GCP and tools like Burp Suite, Kali Linux, Nmap and Metasploit. Owns testing engagements end to end, writes clear reports and advises clients on remediation, with scope to move into red teaming, assumed breach and AI security.

Hybrid Permanent

Senior Penetration Tester

Last week

RMT Accountants & Business Advisors Newcastle upon Tyne

Lead and deliver infrastructure, web application and cloud penetration testing engagements, plus Cyber Essentials Plus assessments and technical security reviews. As one of the practice's early senior hires, you will shape methodologies, assure report quality, mentor junior consultants and support pre-sales for a growing national cyber security consultancy.

SC Cleared Penetration Tester

Last week

TRIA Manchester £550 – £650 pd

SC Penetration Tester£600 - £700 A Day Outside IR356 MonthsRemote (Occasional Manchester travel)We are looking for a security cleared penetration tester to support a public sector customer to deliver high-assurance security testing.The role offers the opportunity to work on complex...

Security Penetration Tester

3 weeks ago

Pertemps Thames Water Reading £72,000 pa

Supports the design, implementation and maintenance of threat and vulnerability management controls across a large water utility's IT estate. Conducts network, application and code penetration testing, exploits vulnerabilities via proof-of-concept testing, and helps build an internal pen testing function. Works hybrid in Reading, liaising with Digital teams on remediation, patching and threat hunting.

Hybrid Clearance Required

Internal Penetration Tester

Last week

Salt Search London £75,000 – £110,000 pa

This role involves conducting manual penetration testing and security assessments of web applications, APIs, and enterprise platforms. You will identify and exploit vulnerabilities, produce detailed technical reports, and work closely with application owners and security stakeholders to improve the organization's cyber resilience.

Lead Penetration Tester

6 days ago

Akkodis London

Hands-on penetration testing across web, API, infrastructure and cloud engagements for a predominantly commercial client base, combined with mentoring junior consultants and producing high-quality client reports. Works closely with the Head of Penetration Testing to shape and grow the service, including pre-sales and client discussions.

Remote
Hiring locations

Where this role is hiring

The locations with the most live listings for this role today.

FAQs

Common questions

  • A degree in computer science or a related field is beneficial, but practical experience and relevant certifications like CEH or OSCP are highly valued.

  • Participate in industry conferences, join professional groups, and follow leading security blogs and forums. Continuous learning is crucial in this field.

  • Salary ranges can vary widely based on experience and location. For more detailed information, refer to the salary section on this page.

  • Strong technical skills in networking and programming, a deep understanding of security principles, and the ability to think creatively and solve complex problems are essential.

Hiring penetration testers?

Post your role in 90 seconds and reach the specialist audience that already reads this page.