Average Penetration Tester salary in the UK

Penetration TesterPermanentHorsham – HybridUp to £60,000Are you an experienced Penetration Tester looking to take the next step in your offensive security career? This is an exciting opportunity to join a collaborative Cyber Defence team where you'll deliver hands-on security testing across web applications, APIs, infrastructure, and cloud environments while working alongside experienced security professionals. You’ll play a key role in identifying vulnerabilities, supporting remediation, contributing to purple team exercises, and helping shape security best practice across the organisation. This role offers excellent opportunities to develop your technical expertise, work with modern security tooling, and progress towards senior offensive security positions.Key Responsibilities:Deliver penetration testing across web applications, APIs, infrastructure, and cloud environments using recognised industry methodologies.Perform end-to-end testing activities including reconnaissance, exploitation, post-exploitation, validation, and reporting.Produce clear, risk-based penetration testing reports with practical remediation recommendations for both technical and non-technical stakeholders.Support the management of external penetration testing providers, reviewing test quality, validating findings, and ensuring consistency of deliverables.Assist with vulnerability assessments, risk prioritisation, remediation tracking, and re-testing activities.Work closely with development, engineering, and delivery teams to embed security testing into project lifecycles and advise on appropriate testing approaches.Contribute to purple team exercises, incident investigations, and wider Cyber Defence initiatives.Help improve internal testing methodologies, playbooks, tooling, and knowledge sharing across the team.Maintain awareness of emerging threats, vulnerabilities, attacker techniques, and offensive security tools.Key Requirements:Previous hands-on experience as a Pen Tester delivering assessments across web applications, APIs, infrastructure, and cloud environments.Strong understanding of common vulnerability classes, including the OWASP Top 10, authentication and authorisation flaws, input validation issues, and business logic vulnerabilities.Knowledge of penetration testing methodologies such as OWASP, PTES, and NIST, with practical experience using offensive security tools.Experience interpreting vulnerability scan results and validating security findings.Understanding of attacker tactics, techniques, and procedures, and how they apply in real-world scenarios.Ability to produce clear, well-structured technical reports with risk-based remediation advice.Holds, or is working towards, a recognised penetration testing certification such as CREST CPSA/CRT, OSCP, or equivalent experience.Strong communication skills with the ability to build relationships across technical and business teams.Analytical, organised, collaborative, and passionate about offensive security with a proactive approach to continuous learning.Penetration TesterPermanentHorsham – HybridUp to £60,000Apply today to speak with VIQU in confidence or contact Belle Hegarty via the VIQU website. Know someone exceptional for this position? Refer them and receive up to £1,000 if successful (terms apply). Follow us on LinkedIn @VIQU IT Recruitment for more exciting opportunities.

Penetration Tester - Bristol - £We're working with a well-established and highly regarded cyber security consultancy, known for delivering high-end penetration testing, vulnerability assessment and red teaming services to clients across critical sectors including telecoms, finance, defence, rail and aerospace. Their team has a strong track record of working on complex, high-stakes engagements ranging from national infrastructure projects through to global enterprise clients.They're now looking to bring in an experienced Penetration Tester to join their growing technical team, based out of their Bristol office with regular travel to client sites.What you'll be doing:Planning and delivering penetration tests across networks, systems and applications, identifying vulnerabilities and security weaknessesCarrying out detailed vulnerability assessments, security audits and risk analysis, producing clear reports with practical remediation guidanceWorking alongside the red team to run realistic attack simulations and evaluate client security controlsBuilding and using exploitation tools to demonstrate real-world impact and help clients understand their risk exposureWriting well-structured, client-ready reports covering findings, risk ratings and recommended fixesActing as a key point of contact for clients - scoping engagements, presenting results, and advising on how to strengthen their security postureKeeping up to date with emerging threats and testing techniques, and continually refining tools and methodologyTaking on elements of project and client management as part of engagement deliveryKey skills and experience needed: A degree in Computer Science, Cyber Security, Information Security or a related disciplineCHECK Team Member, CREST Registered Tester, or an equivalent recognised certificationAt least 2 years' hands-on experience in penetration testing and vulnerability assessmentSolid grounding in network protocols, operating systems and core security technologiesConfident use of tools such as Metasploit, Burp Suite and NmapStrong analytical and problem-solving skills, with genuine curiosity about current threats and attack techniquesComfortable communicating technical findings clearly to both technical teams and senior stakeholdersAble to work independently on client sites as well as collaboratively within a wider consulting teamConfident presenting and delivering training where requiredBeneificial (not essential): Code review experienceExposure to audit frameworks such as ISO 27001, CTAS or CAS(T)Experience mentoring or informally leading within a technical teamWhy this role: This is a genuine opportunity to work on varied, high-impact engagements across some of the most security-conscious sectors in the UK, rather than repetitive, low-value testing work. You'll be part of a collaborative technical team with real investment in your development - including funded certifications, access to modern tooling, and the chance to contribute to wider security research initiatives. Performance-based incentives sit on top of a competitive base salary.Oscar Associates (UK) Limited is acting as an Employment Agency in relation to this vacancy.To understand more about what we do with your data please review our privacy policy in the privacy section of the Oscar website.

Senior Penetration Tester (AI-Enabled Vulnerability Research) | London Hybrid | £600 per day PAYE + 12.07% Holiday PayWe're supporting a leading global financial services organisation seeking an experienced Senior Penetration Tester to join a high-profile cyber security initiative focused on AI-enabled vulnerability discovery, offensive security testing and application security assessment. This role combines traditional penetration testing expertise with the use of frontier AI models and advanced security tooling to identify genuine exploitable vulnerabilities across critical applications and internet-facing platforms. The successful candidate will play a key role in validating security findings, reducing false positives and improving remediation outcomes.Contract Details:£600 per day PAYE + 12.07% Holiday PayLondon Hybrid (2-3 days per week)ASAP Start c. 1st week of AugustInitial 6 month contract with potential extensionKey Experience Required:Strong Penetration Testing and Offensive Security experienceVulnerability Research and Security Assessment experienceWeb Application and API Security TestingSource Code Review and Secure Code AnalysisExperience validating genuine exploitability and attack pathsKnowledge of AI/LLM technologies and AI-assisted security testingExperience using AI tooling to support vulnerability discovery or code analysisCloud Security knowledge (Azure, AWS or GCP)Strong stakeholder engagement and communication skillsAbility to produce clear technical reports and remediation recommendationsDesirable Experience:Red Teaming experienceBug Bounty or Security Research backgroundProduct Security or Application Security experienceExperience developing AI-native security tooling, testing harnesses or guardrailsFinancial Services experienceRelevant certifications such as OSCP, CREST, GPEN or similarResponsibilities:Conduct penetration testing and offensive security assessments across critical applications and platformsUse AI-enabled tooling and frontier models to accelerate vulnerability identification and validationPerform manual testing to confirm exploitability and assess business riskReview source code and security findings to identify genuine vulnerabilitiesSupport reduction of vulnerability backlogs through effective triage and validationWork closely with engineering and security teams to drive remediation activitiesDevelop repeatable testing methodologies, standards and guardrailsProduce high-quality technical reports and security recommendationsContribute to the evolution of AI-assisted security testing capabilitiesIdeal candidates will have proven penetration testing or vulnerability research experience alongside exposure to AI-assisted security testing, code analysis or AI-driven vulnerability discovery within large enterprise environments.Robert Half Ltd acts as an employment business for temporary positions and an employment agency for permanent positions. Robert Half is committed to diversity, equity and inclusion. Suitable candidates with equivalent qualifications and more or less experience can apply. Rates of pay and salary ranges are dependent upon your experience, qualifications and training. If you wish to apply, please read our Privacy Notice describing how we may process, disclose and store your personal data: