At a Glance
- Tasks: Conduct penetration tests on web apps, APIs, and infrastructure while leading client engagements.
- Company: Join a top UK consultancy focused on offensive security with a dynamic team.
- Benefits: Competitive salary, remote work, travel bonuses, and opportunities for professional growth.
- Other info: Flexible roles available with excellent career progression in a supportive environment.
- Why this job: Make a real impact in cybersecurity while working on diverse and exciting projects.
- Qualifications: Experience in penetration testing and strong communication skills.
The predicted salary is between 55000 - 90000 £ per year.
Location: Fully Remote, UK (with client site visits as required)
Salary: £55,000 – £90,000 DOE + expenses + overnight bonus for site work
Type: Permanent, Full-Time
Summary: We are looking for experienced Penetration Testers to join one of the UK's larger dedicated offensive security practices. With a team of around 70 testers split across CHECK and CREST work, this is a well-established consultancy delivering high-quality assessments across a broad client base, with genuine variety in engagement type, sector, and technical depth. The team is structured across two streams, more commercially-driven engagements through CREST, and deeper, security-led work through CHECK, so there's a clear path whichever direction you want to lean. Multiple roles are available across mid and senior levels, and the company is flexible on starting clearance level.
Key Responsibilities:
- Deliver web application, API, and infrastructure penetration tests, taking ownership of engagements end-to-end from scoping through to final report delivery.
- Lead client-facing engagements, communicating high-risk findings as they are identified to support swift remediation.
- Produce clear, professional reports tailored to client-specific context and business risk.
- Support broader offensive security activities including red and purple team engagements, phishing simulations, and assumed-breach style assessments where relevant.
- Contribute to internal QA, mentor more junior consultants, and support report quality across the team.
- Stay up to date with the evolving threat landscape.
Penetration Tester (CHECK / CREST) employer: Oscar
Contact Detail:
Oscar Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Penetration Tester (CHECK / CREST)
✨Tip Number 1
Network like a pro! Reach out to fellow Penetration Testers and industry professionals on LinkedIn. Join relevant groups and forums where we can share insights and job leads. You never know who might have the inside scoop on your dream role!
✨Tip Number 2
Show off your skills! Create a portfolio showcasing your past penetration tests, reports, and any cool projects you've worked on. This will give potential employers a taste of what you can bring to the table, making you stand out from the crowd.
✨Tip Number 3
Prepare for interviews by brushing up on common penetration testing scenarios and techniques. We recommend practising with mock interviews or even discussing case studies with peers. Being able to articulate your thought process during a test can really impress hiring managers.
✨Tip Number 4
Don’t forget to apply through our website! We’ve got multiple roles available, and applying directly can sometimes give you an edge. Plus, it’s a great way to show your enthusiasm for joining our awesome team!
We think you need these skills to ace Penetration Tester (CHECK / CREST)
Some tips for your application 🫡
Tailor Your CV: Make sure your CV is tailored to the Penetration Tester role. Highlight your relevant experience, especially in web application and API testing, and don’t forget to mention any CHECK or CREST certifications you have!
Craft a Compelling Cover Letter: Your cover letter is your chance to shine! Use it to explain why you're passionate about offensive security and how your skills align with our team’s needs. Keep it professional but let your personality show through.
Showcase Your Technical Skills: In your application, be sure to showcase your technical skills and tools you’re familiar with. Mention specific penetration testing methodologies you've used and any notable projects or achievements that demonstrate your expertise.
Apply Through Our Website: We encourage you to apply directly through our website for the best chance of getting noticed. It’s super easy, and you’ll be able to attach all your documents in one go. Plus, we love seeing applications come through our own platform!
How to prepare for a job interview at Oscar
✨Know Your Stuff
Make sure you brush up on your technical skills related to penetration testing. Be ready to discuss specific tools and methodologies you've used in past engagements, especially those relevant to CHECK and CREST frameworks.
✨Showcase Your Experience
Prepare to share detailed examples of your previous penetration tests. Highlight the challenges you faced, how you approached them, and the impact of your findings on the client's security posture.
✨Communicate Clearly
Since you'll be leading client-facing engagements, practice explaining complex technical concepts in simple terms. This will help demonstrate your ability to communicate high-risk findings effectively.
✨Stay Current
Keep yourself updated on the latest trends in cybersecurity and the evolving threat landscape. Mention any recent developments or tools you've explored during the interview to show your commitment to continuous learning.