Part of the Future Tech Jobs (opens in a new tab) network
Sign in

Penetration Tester Jobs

Ethical hackers who simulate cyber attacks to identify vulnerabilities. A critical role in safeguarding digital assets and ensuring robust security.

Open roles
6
Salary range
£40k – £85k
Hiring companies
5
View 6 live roles → Get an alert

Penetration testers, also known as ethical hackers, play a vital role in the cyber security landscape. They simulate real-world cyber attacks to identify and mitigate vulnerabilities in systems, networks, and applications. These professionals are hired by a range of organisations, from scaleups and research-heavy startups to larger consultancies, to ensure that digital defences are robust and resilient.

What the role does

Inside the role of a Penetration Tester

A typical week for a penetration tester is a mix of planning, execution, and reporting. They spend time researching attack vectors, conducting tests, and documenting findings.

  1. 01
    Conduct initial reconnaissance on target systems
  2. 02
    Execute simulated attacks to identify vulnerabilities
  3. 03
    Document findings and prepare detailed reports
  4. 04
    Collaborate with development teams to address identified issues
  5. 05
    Stay updated on the latest security threats and techniques
  6. 06
    Participate in debriefing sessions with clients or stakeholders
Salary on the board

£40k – £85k

Based on advertised midpoints across the 25 priced listings posted in the last 12 months. Base salary only.

Salary visibility
6% of listings advertise a salary — up from 0% the year before.
By seniority
£k base
Mid
40
81
13 jobs
Skills & tools

What hiring managers ask for

% of 16 listings posted in the last 12 months that mention each skill, extracted from job descriptions.

Penetration Testing
94%
Vulnerability Assessment
50%
OSCP
50%
Web Application Security
50%
Cloud Security
38%
Burp Suite
38%
Network Security
31%
Nmap
31%
Metasploit
31%
CREST
25%
Nessus
25%
OWASP Top 10
25%
Career ladder

From Junior to Principal

A typical UK progression for penetration testers. Years are guidance — strong people move faster, and many senior folks sidestep into research, product or management.

  1. Level 1

    Junior Penetration Tester

    0–2 yrs

    Assists in planning and executing basic penetration tests under supervision. Focuses on learning and understanding security testing methodologies.

  2. Level 2

    Penetration Tester

    2–5 yrs

    Conducts comprehensive penetration tests independently. Owns the execution and reporting of test results, and provides recommendations for remediation.

  3. Level 3

    Senior Penetration Tester

    5–8 yrs

    Leads complex penetration testing projects. Mentors junior team members and collaborates with clients to develop and implement security strategies.

  4. Level 4

    Principal Penetration Tester

    8+ yrs

    Oversees the entire penetration testing function. Develops and standardises testing methodologies, and advises on high-level security policies and practices.

Pathway

How to become a Penetration Tester

There's no single route, but most people follow some version of these steps.

  1. 1

    Learn the Basics

    Start with foundational knowledge in networking, programming, and security principles. Gain hands-on experience through courses and certifications.

  2. 2

    Gain Practical Experience

    Work on real-world projects, either through internships or entry-level roles. Build a portfolio of penetration testing reports and case studies.

  3. 3

    Specialise in Tools and Techniques

    Develop expertise in specific tools and techniques used in penetration testing. Stay updated with the latest trends and threats in the cyber security landscape.

  4. 4

    Lead Projects and Teams

    Take on leadership roles, managing complex penetration testing projects and mentoring junior team members. Collaborate with clients to implement security solutions.

  5. 5

    Advise on Security Strategy

    Provide strategic advice on security policies and practices. Influence organisational decisions and contribute to the development of industry standards.

Live jobs

6 live roles

Penetration Tester

This role involves conducting comprehensive penetration tests across web, API, network, cloud, and mobile environments, from scoping to client debrief. The candidate will produce detailed technical reports, present findings directly to clients, and contribute to tool development by researching emerging vulnerabilities. It's a client-facing position requiring strong technical depth and communication skills within a consultancy setting.

VIQU IT Clerkenwell, London, EC1R 0EA, United Kingdom £60,000 – £65,000 pa

Penetration Tester

This role involves conducting comprehensive penetration tests across networks, web and mobile applications, APIs, and cloud environments using both manual and automated techniques. The tester will simulate real-world cyberattacks, identify vulnerabilities, and produce detailed technical and executive reports with actionable remediation advice. A key focus is translating complex security findings for non-technical stakeholders while adhering to strict ethical and compliance standards in a security-cleared context.

SmartSourcing Ltd United Kingdom £60,000 – £80,000 pa
Remote Permanent Clearance Required

Penetration Tester EU

This role involves conducting manual penetration tests on web applications, networks, APIs, and cloud assets using tools like Burp Suite. The focus is on hands-on security testing within a technically strong, award-winning cybersecurity team. The position emphasizes practical testing over administrative tasks, in a fully remote EU-based setup.

The Recruitment Company Dublin, City Of Dublin, Ireland £45,000 – £65,000 pa
Remote Permanent
Bridewell logo

Senior Penetration Tester - CTL

Conduct infrastructure and web application penetration tests for clients, contributing to the development of new testing methodologies. Includes dedicated time for research and access to training platforms and certifications to support professional growth.

Bridewell London, United Kingdom
Hybrid Permanent

SC Penetration Tester/ Ethical Hackerp.d OutsideIR35

Conduct penetration testing on public sector and critical national infrastructure systems within an SC-cleared environment. Focus on cloud platforms including Azure and AWS, as well as on-prem infrastructure and containerised environments like Kubernetes. Provide coaching and training support while working remotely with occasional site visits to Manchester, Newcastle, or the North West/North East.

SmartSourcing Ltd Manchester, United Kingdom £650 – £700 pd

Cyber Security Consultant - Penetration Tester

Conduct penetration testing engagements across network, cloud, and web application environments, delivering technical assessments and client-facing reporting. Work collaboratively within a security team while managing independent projects and supporting client scoping discussions. Focus on identifying and communicating security risks clearly to both technical and non-technical stakeholders.

FlexIT Talent Solutions Ltd London, United Kingdom £65,000 pa
Hiring locations

Where this role is hiring

The locations with the most live listings for this role today.

London

Location
2 open

Manchester

Location
1 open
FAQs

Common questions

  • A degree in computer science or a related field is beneficial, but practical experience and relevant certifications like CEH or OSCP are highly valued.

  • Participate in industry conferences, join professional groups, and follow leading security blogs and forums. Continuous learning is crucial in this field.

  • Salary ranges can vary widely based on experience and location. For more detailed information, refer to the salary section on this page.

  • Strong technical skills in networking and programming, a deep understanding of security principles, and the ability to think creatively and solve complex problems are essential.

Hiring penetration testers?

Post your role in 90 seconds and reach the specialist audience that already reads this page.

Post a job → See pricing

🍪 Basic, anonymous analytics (aggregate counts only, never shared) are always on. Accept to also enable third-party tools — Google Analytics, Microsoft Clarity, Mixpanel, Leadfeeder — which help us match you with relevant Cyber Security roles. We never sell your data or use it for cross-site advertising. See our Cookie Policy.