Academy Penetration Testing Consultant in Cardiff

One of the most exciting prospects in the UK cyber security sector today, Bridewell is a leading cyber security services company specialising in protecting and transforming critical business functions for some of the world’s most trusted organisations. We are the trusted partner for operators of essential services and provide end-to-end cyber security capabilities that help our clients overcome their security challenges, allowing them to operate safely and securely. Bridewell holds the Gold level, Investors in People award which we feel solidifies and reflects on the outstanding calibre that makes us truly one team.

The Opportunity

As an Academy Penetration Tester Consultant, you will join Bridewell’s 18-month Academy programme and begin your journey towards becoming a qualified offensive security professional. This pathway is designed for individuals with a strong interest in ethical hacking, technical problem solving and helping organisations understand and reduce cyber risk. Throughout the programme, you will develop the technical, consulting and client-facing skills needed to deliver high-quality penetration testing services across a range of environments. You will work alongside experienced penetration testers and offensive security consultants, gaining exposure to real client engagements while building the knowledge, confidence and professionalism required to succeed in a specialist security testing role.

During your first six months, you will build a strong foundation in penetration testing methodology, technical security principles, professional consulting behaviours and client delivery. You will work towards key early-career milestones including Cyber Scheme Foundation Level (CSFL), gain a UK Cyber Security Council Professional Title at Associate level and enrol on the Trainee Cyber Essentials Assessor (TCEA) pathway. This stage will focus on core technical skills, structured learning, shadowing experienced consultants and understanding how Bridewell delivers safe, ethical and high-quality security assessments. During this time, you will also shadow and work alongside experienced consultants, assisting with delivery of real client engagements.

Between months seven and twelve, you will continue to develop your practical testing capability and begin delivering more client-facing work. You will deepen your understanding of web application testing, vulnerability identification, reporting and remediation advice, while continuing to build the consulting skills needed to communicate findings clearly and effectively. During this stage, you will work towards Burp Suite Certified Practitioner (BSCP) and complete the Honeycomb Core Consulting Skills training.

In the final stage of the programme, from months thirteen to eighteen, you will focus on progressing towards recognised industry practitioner status. You will undertake the Cyber Scheme CSTM Practitioner Training, work towards Cyber Scheme Team Member (CSTM) exam and obtain your PraCSP Professional Title status leading to NCSC CHECK Team Member (CTM) status, as well as Cyber Essentials Plus Assessor. By this point, you will be expected to take on increasing responsibility across engagements, demonstrate sound technical judgement, and contribute to the delivery of penetration testing services with appropriate support and oversight.

You will be supported throughout by a dedicated one-to-one mentor, experienced consultants within the offensive security team, and structured access to learning platforms including HackTheBox VIP+ and TCM Security Academy. This combination of formal training, hands-on practice, mentoring and real client experience will give you the opportunity to build a strong foundation for a long-term career in penetration testing. By the end of the Academy, you will have developed the skills, qualifications and practical experience needed to progress into a penetration testing consultant role, helping Bridewell’s clients identify security weaknesses, understand technical risk and improve their resilience against real-world threats.

Qualifications Earned Through the Academy

• Cyber Scheme Foundation Level (CSFL)
• Cyber Scheme Team Member (CSTM)
• NCSC CHECK Team Member (CTM) Practitioner
• Cyber Security Professional (PraCSP)
• Cyber Essentials Assessor

Responsibilities

• Support the delivery of penetration testing engagements under the guidance of experienced consultants.
• Follow agreed methodologies, rules of engagement, legal boundaries and Bridewell quality standards.
• Carry out vulnerability identification, validation, evidence capture and initial risk assessment.
• Contribute to penetration testing reports by documenting findings, impact, evidence and remediation advice clearly and accurately.
• Support engagement preparation, including kick-off activities, connectivity checks and client communication.
• Escalate risks, blockers, unexpected findings or scope concerns promptly to the lead consultant or engagement manager.
• Communicate professionally with clients during meetings, updates, debriefs and written correspondence.
• Author penetration testing reports.
• Explain technical issues in a clear and accessible way to both technical and non-technical audiences.
• Take ownership of personal development across the Academy pathway, including training, certifications, mentoring and practical labs.
• Actively seek, receive and apply feedback from mentors, lead consultants, peers and quality assurance reviews.
• Manage time effectively across client delivery, training, certification preparation and internal activities.
• Collaborate positively with Academy peers, penetration testers, resourcing planning and wider Bridewell teams while demonstrating professionalism, curiosity and accountability.

Experience

• Minimum grade of 4/C in GCSE English Language and Maths (or equivalent).
• Preferred: A degree in Cyber Security, an equivalent qualification (such as Level 3 Apprenticeship) or completion of a Cyber Security-focused training course or bootcamp.
• No work experience is needed; this is an entry-level position. We are looking for someone who shows potential for these roles through transferable skills. Confidence, relationship building and a self-starter mentality are all welcome – alongside a huge eagerness to learn.

Benefits

• 25 days holiday – plus buy and sell options.
• Flexible working (around core office hours).
• Company pension.
• Employee shareholder scheme.
• Personal day & birthday off – after 1 year of service.
• Family leave – after 1 year of service.
• Enhanced maternity based on length of service.
• Life assurance.
• Electric vehicle scheme & cycle to work scheme.
• Private healthcare (incl. gym discounts and vision care).

Location

Bridewell operates a hybrid and flexible working policy; however you will be required to travel to different sites on occasion, in particular our London office.

Security Clearance

To be eligible for this job you must either hold UK security clearance or be eligible and willing to go through this security clearance. Bridewell values diversity and is an equal opportunity employer. We are dedicated to fostering an inclusive environment where all employees feel respected, supported and empowered to do their best work. If you require any reasonable adjustments throughout the interview process, please let us know.