Part of the Future Tech Jobs (opens in a new tab) network
Sign in

Penetration Tester Jobs

Ethical hackers who simulate cyber attacks to identify vulnerabilities. A critical role in safeguarding digital assets and ensuring robust security.

Open roles
4
Salary range
£40k – £85k
Hiring companies
5
View 4 live roles → Get an alert

Penetration testers, also known as ethical hackers, play a vital role in the cyber security landscape. They simulate real-world cyber attacks to identify and mitigate vulnerabilities in systems, networks, and applications. These professionals are hired by a range of organisations, from scaleups and research-heavy startups to larger consultancies, to ensure that digital defences are robust and resilient.

What the role does

Inside the role of a Penetration Tester

A typical week for a penetration tester is a mix of planning, execution, and reporting. They spend time researching attack vectors, conducting tests, and documenting findings.

  1. 01
    Conduct initial reconnaissance on target systems
  2. 02
    Execute simulated attacks to identify vulnerabilities
  3. 03
    Document findings and prepare detailed reports
  4. 04
    Collaborate with development teams to address identified issues
  5. 05
    Stay updated on the latest security threats and techniques
  6. 06
    Participate in debriefing sessions with clients or stakeholders
Salary on the board

£40k – £85k

Based on advertised midpoints across the 31 UK listings priced in pounds in the last 12 months. Base salary only.

Salary visibility
9% of listings advertise a salary — up from 0% the year before.
By seniority
£k base
Mid
40
81
12 jobs
Skills & tools

What hiring managers ask for

% of 16 listings posted in the last 12 months that mention each skill, extracted from job descriptions.

Penetration Testing
94%
Web Application Security
50%
OSCP
50%
Vulnerability Assessment
50%
Cloud Security
38%
Burp Suite
38%
Nmap
31%
Metasploit
31%
Network Security
31%
OWASP Top 10
25%
Nessus
25%
CREST
25%
Career ladder

From Junior to Principal

A typical UK progression for penetration testers. Years are guidance — strong people move faster, and many senior folks sidestep into research, product or management.

  1. Level 1

    Junior Penetration Tester

    0–2 yrs

    Assists in planning and executing basic penetration tests under supervision. Focuses on learning and understanding security testing methodologies.

  2. Level 2

    Penetration Tester

    2–5 yrs

    Conducts comprehensive penetration tests independently. Owns the execution and reporting of test results, and provides recommendations for remediation.

  3. Level 3

    Senior Penetration Tester

    5–8 yrs

    Leads complex penetration testing projects. Mentors junior team members and collaborates with clients to develop and implement security strategies.

  4. Level 4

    Principal Penetration Tester

    8+ yrs

    Oversees the entire penetration testing function. Develops and standardises testing methodologies, and advises on high-level security policies and practices.

Pathway

How to become a Penetration Tester

There's no single route, but most people follow some version of these steps.

  1. 1

    Learn the Basics

    Start with foundational knowledge in networking, programming, and security principles. Gain hands-on experience through courses and certifications.

  2. 2

    Gain Practical Experience

    Work on real-world projects, either through internships or entry-level roles. Build a portfolio of penetration testing reports and case studies.

  3. 3

    Specialise in Tools and Techniques

    Develop expertise in specific tools and techniques used in penetration testing. Stay updated with the latest trends and threats in the cyber security landscape.

  4. 4

    Lead Projects and Teams

    Take on leadership roles, managing complex penetration testing projects and mentoring junior team members. Collaborate with clients to implement security solutions.

  5. 5

    Advise on Security Strategy

    Provide strategic advice on security policies and practices. Influence organisational decisions and contribute to the development of industry standards.

Live jobs

4 live roles

Penetration Tester

This role involves conducting comprehensive penetration tests across web, API, network, cloud, and mobile environments, from scoping to client debrief. The candidate will produce detailed technical reports, present findings directly to clients, and contribute to tool development by researching emerging vulnerabilities. It's a client-facing position requiring strong technical depth and communication skills within a consultancy setting.

VIQU IT Clerkenwell, London, EC1R 0EA, United Kingdom £60,000 – £65,000 pa

Penetration Tester

This role involves conducting penetration testing across web applications, infrastructure, cloud environments, and APIs. You'll work with tools like Burp Suite, Kali Linux, and Nmap, take ownership of testing engagements, and help clients remediate vulnerabilities. The company offers opportunities for technical growth and advanced security testing.

10Nex Consultancy Grange, Greater London, London, United Kingdom £55,000 – £60,000 pa

SC Penetration Tester/ Ethical Hackerp.d OutsideIR35

Conduct penetration testing on public sector and critical national infrastructure systems within an SC-cleared environment. Focus on cloud platforms including Azure and AWS, as well as on-prem infrastructure and containerised environments like Kubernetes. Provide coaching and training support while working remotely with occasional site visits to Manchester, Newcastle, or the North West/North East.

SmartSourcing Ltd Manchester, United Kingdom £650 – £700 pd

Cyber Security Consultant - Penetration Tester

Conduct penetration testing engagements across network, cloud, and web application environments, delivering technical assessments and client-facing reporting. Work collaboratively within a security team while managing independent projects and supporting client scoping discussions. Focus on identifying and communicating security risks clearly to both technical and non-technical stakeholders.

FlexIT Talent Solutions Ltd London, United Kingdom £65,000 pa
Hiring locations

Where this role is hiring

The locations with the most live listings for this role today.

London

Location
3 open

Manchester

Location
1 open
FAQs

Common questions

  • A degree in computer science or a related field is beneficial, but practical experience and relevant certifications like CEH or OSCP are highly valued.

  • Participate in industry conferences, join professional groups, and follow leading security blogs and forums. Continuous learning is crucial in this field.

  • Salary ranges can vary widely based on experience and location. For more detailed information, refer to the salary section on this page.

  • Strong technical skills in networking and programming, a deep understanding of security principles, and the ability to think creatively and solve complex problems are essential.

Hiring penetration testers?

Post your role in 90 seconds and reach the specialist audience that already reads this page.

Post a job → See pricing

🍪 A basic record of what gets searched and viewed on Cyber Security is always kept — it is how we run the boards and report activity to employers. Accepting also loads third-party tools: Google Analytics, Microsoft Clarity and HubSpot. We never sell your data or share it with data brokers. See our Cookie Policy.