About this role
Salary: £90,000 - 90,000 per year
Requirements: Significant hands-on penetration testing experience across multiple security domains.Strong technical expertise in web application, API, infrastructure, cloud, wireless, and mobile security testing.Experience leading security teams and managing the delivery of offensive security engagements.Deep understanding of penetration testing methodologies including OWASP Testing Guide, PTES, and OSSTMM.Experience working within Red Team, Blue Team, and Purple Team environments.Strong knowledge of common attack techniques, threat emulation, vulnerability assessment, and exploitation methodologies.Hands-on experience with industry-standard security testing tools such as Burp Suite, Nmap, Metasploit, Nessus, Qualys, and Kali Linux.Strong understanding of networking concepts, security protocols, and modern attack surfaces.Experience reviewing technical deliverables and maintaining quality assurance standards.Excellent communication skills with the ability to present technical findings to a variety of audiences.Proven experience managing, mentoring, and developing high-performing technical teams.Ability to balance strategic leadership responsibilities with hands-on technical delivery.Experience driving team utilisation, performance, and professional development.Strong stakeholder management and client engagement skills.Commercial awareness with experience supporting project scoping and pre-sales activities.One or more of the following certifications would be highly desirable: CREST CRT / CCT, OSCP, OSCE / OSWE, CISSP, CHECK Team Member / Team Leader.A degree in Computer Science, Cyber Security, or a related discipline is advantageous but not essential. Responsibilities: Lead, mentor, and develop a team of penetration testers and security consultants.Manage the day-to-day operations of our offensive security practice, ensuring high-quality service delivery.Conduct and oversee penetration testing engagements across web applications, APIs, cloud environments, infrastructure, wireless networks, and mobile platforms.Support and deliver Red Team, Blue Team, and Purple Team exercises.Establish and maintain testing methodologies, reporting standards, quality assurance processes, and technical best practices.Provide technical leadership and hands-on support during complex security assessments and client engagements.Work closely with commercial and leadership teams to support project scoping, resource planning, proposals, and client presentations.Review technical reports and ensure findings are communicated effectively to both technical and executive-level stakeholders.Drive continuous improvement of offensive security services, tooling, frameworks, and methodologies.Stay current with emerging threats, attacker techniques, and industry trends to ensure testing approaches remain effective and relevant. Technologies: APICloudSupportLinuxMobileOWASPSecurityWebAIAWSAzureCI/CDDockerKubernetes More:
We are a rapidly growing cyber security organisation in London, UK, operating in a hybrid model. Following a significant acquisition, we are entering an exciting phase of expansion and investment. This is a permanent, hands-on leadership role where we will give you the opportunity to shape our offensive security function, work across a broad range of cyber security services, and help define the future direction of our security practice while supporting quality, mentoring, and service growth.
last updated 31 week of 2026