Principal Penetration Tester

Location: Mainly remote, with occasional site visits (expenses paid)
Duration: Initial 6-month contract, with a strong likelihood of extension
IR35: Outside IR35

Role Overview

We are seeking an experienced Principal Penetration Tester to lead and deliver complex penetration testing and security assessment engagements for one our clients

The successful candidate will provide hands-on technical expertise across infrastructure, cloud, applications, Kubernetes and hybrid environments, while also leading testing teams and mentoring junior consultants.

Essential Requirements

• Cyber Scheme Team Leader (CSTL) or CREST Certified Tester (CCT)
• Principal UK Cyber Security Council Professional (PriCSP)
• Current Security Clearance
• Proven experience leading complex penetration testing engagements and teams
• Experience working within Public Sector, CNI and large enterprise environments

Technical Experience

Strong hands-on experience across:

• Manual penetration testing of internal/external infrastructure, networks, operating systems and web applications
• Cloud security testing across Microsoft Azure, AWS and Oracle Cloud Infrastructure (OCI)
• Kubernetes and Docker security assessments
• IAM and identity security
• CI/CD pipeline and cloud-native security
• Hybrid and on-premises infrastructure assessments
• Security architecture and security control reviews
• Secure code reviews
• Firewall configuration reviews
• Server and workstation build reviews
• APIs and complex application environments