CREST Penetration Tester

CREST Certified Penetration Tester (CRT) | £50-60k | Remote

We're partnered with a well-established cyber security organisation that's continuing to invest heavily into its offensive security capability following sustained client growth across both commercial and regulated environments.

As part of that growth, they're looking to hire a CREST-certified Penetration Tester to join a collaborative testing team delivering security assessments across a broad range of technologies and customer environments.

This role would suit someone with around 2-3 years of hands-on penetration testing experience who is looking to continue developing within a highly technical and supportive environment.

Salary: £50-60k DOE

Working Structure: Remote with onsite client visits occasionally

Security Clearance: Beneficial but not required (SC/DV)

Certifications: CREST CRT, OSCP (Essential)

The Role:

You'll be involved in delivering:

• Web application penetration testing
• Infrastructure and internal network testing
• External vulnerability assessments
• Active Directory and privilege escalation testing
• Cloud security assessments across Azure/AWS
• Security reporting and remediation discussions with clients

You'll work closely with senior testers and technical leads, gaining exposure to a wide variety of technologies, environments and engagement types.

What They're Looking For:

• CREST Registered Tester (CRT) certification essential
• OSCP Certification
• Around 2-3 years of penetration testing experience
• Strong understanding of web application and infrastructure testing methodologies
• Experience with tools such as Burp Suite, Nmap, Nessus, Metasploit, etc.
• Understanding of OWASP Top 10 and common attack vectors
• Strong report writing and communication skills
• Consultancy/client-facing experience beneficial

Additional certifications such as CPSA or cloud security certifications would be advantageous.

If you're a CRT-certified Penetration Tester looking to continue developing your offensive security career within a strong technical environment, please apply or reach out for a confidential conversation.

Oscar Associates (UK) Limited is acting as an Employment Agency in relation to this vacancy.

To understand more about what we do with your data please review our privacy policy in the privacy section of the Oscar website.