Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Conduct penetration tests on web apps, APIs, and infrastructure while leading client engagements.
- Company: Join a top UK consultancy with a strong focus on offensive security.
- Benefits: Enjoy a competitive salary, remote work, travel expenses, and an overnight bonus for site visits.
- Other info: Flexible roles available for mid and senior levels with excellent career growth opportunities.
- Why this job: Make a real impact in cybersecurity while working fully remote and mentoring junior consultants.
- Qualifications: Experience in penetration testing and a passion for cybersecurity.
The predicted salary is between 55000 - 90000 £ per year.
We are looking for experienced Penetration Testers to join one of the UK's larger dedicated offensive security practices. With a team of around 70 testers split across CHECK and CREST work, this is a well-established consultancy delivering high-quality assessments across a broad client base, with genuine variety in engagement type, sector, and technical depth.
Multiple roles are available across mid and senior levels, and the company is flexible on starting clearance level. This role is fully remote with client site visits as required.
- Deliver web application, API, and infrastructure penetration tests, taking ownership of engagements end-to-end from scoping through to final report delivery.
- Lead client-facing engagements, communicating high-risk findings as they are identified to support swift remediation.
- Produce clear, professional reports tailored to client-specific context and business risk.
- Contribute to internal QA, mentor more junior consultants, and support report quality across the team.
- Hands-on experience delivering web application, API, and/or infrastructure penetration tests in a professional consultancy setting.
Salary: £55,000 - £90,000, depending on experience, certifications and clearance level.
Benefits include:
- Fully remote working
- Overnight bonus for client site visits
- Travel and expenses covered for client work
- Company pension scheme
Locations
Penetration Tester - Permanent - Fully Remote in Surrey, Woking employer: Oscar Associates (UK) Limited
Contact Detail:
Oscar Associates (UK) Limited Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Penetration Tester - Permanent - Fully Remote in Surrey, Woking
✨Tip Number 1
Network like a pro! Join online forums, attend webinars, and connect with fellow penetration testers. The more people you know in the industry, the better your chances of landing that dream job.
✨Tip Number 2
Show off your skills! Create a portfolio showcasing your best penetration testing projects. Whether it's a personal project or a contribution to an open-source initiative, having tangible evidence of your expertise can really set you apart.
✨Tip Number 3
Prepare for interviews by brushing up on common penetration testing scenarios. Be ready to discuss your approach to different types of tests and how you handle client communications. We want to see your thought process in action!
✨Tip Number 4
Don’t forget to apply through our website! It’s the best way to ensure your application gets seen by the right people. Plus, we love hearing from passionate candidates who are eager to join our team.
We think you need these skills to ace Penetration Tester - Permanent - Fully Remote in Surrey, Woking
Some tips for your application 🫡
Tailor Your CV: Make sure your CV highlights your experience in penetration testing, especially with web applications and APIs. We want to see how your skills match the role, so don’t be shy about showcasing relevant projects or certifications!
Craft a Compelling Cover Letter: Your cover letter is your chance to shine! Use it to explain why you’re passionate about offensive security and how you can contribute to our team. Keep it professional but let your personality come through – we love a bit of character!
Showcase Your Technical Skills: In your application, mention any tools or methodologies you’re familiar with, like CHECK or CREST. We’re looking for hands-on experience, so if you’ve got any cool projects or community involvement (like Hack The Box), make sure to include that too!
Apply Through Our Website: We encourage you to apply directly through our website. It’s the best way to ensure your application gets into the right hands. Plus, you’ll find all the details you need about the role and our company culture there!
How to prepare for a job interview at Oscar Associates (UK) Limited
✨Know Your Stuff
Make sure you brush up on your technical skills related to penetration testing. Familiarise yourself with the latest tools and techniques, especially those relevant to web applications, APIs, and infrastructure. Being able to discuss your hands-on experience confidently will impress the interviewers.
✨Tailor Your Approach
When preparing for the interview, think about the specific needs of the company. Research their client base and the types of engagements they handle. This will help you tailor your answers and demonstrate how your skills can directly benefit their team.
✨Showcase Your Communication Skills
As a Penetration Tester, you'll need to communicate findings clearly to clients. Practice explaining complex concepts in simple terms. During the interview, be prepared to discuss how you've effectively communicated high-risk findings in past roles.
✨Engage with the Community
Mention any involvement in the cybersecurity community, such as participating in Hack The Box or TryHackMe challenges. This shows your passion for the field and commitment to continuous learning, which is crucial for a role in offensive security.