Senior Penetration Tester
Listed on 2026-10-02
-
IT/Tech
Cybersecurity
As a result of growth, weare looking for an experienced
Senior
Penetration Tester with solid experience of infrastructureandwebapplicationtestingto delivertesting engagementson a range of key client work.
This is an excellent opportunity for a highly motivated and determined
Penetration Tester to continue their development and work on a range of exciting projects.
As well asdeliveringtesting,Bridewell ensures each consultant hasaccess toa dedicated annualteambudget forpersonaldevelopment. This givesaccess to CREST,Cyber Scheme exams, online platforms such as Hack the Box, TSCM andTry Hack Me ,and many other training courses.
There is also dedicated time to carry out research andassistwith developing new testing methodologies and techniques.
- Deliver and lead high qualityoffensivesecurity assessments (webapplication,APIand infrastructure), meeting client expectations
- Get involved in and lead on team assessments as required
- Produce written and verbal reports to clients to an excellent standard.
- Support the sales team with pre-sales andassistwith technical input into tenders and proposals
- Carry out research and service developmentwhen not on client deliverable work that can be used to enhance our services to clients
- Perform report QA.
- Work with teams across the business, providing the latest technical knowledge to collaborate on interesting client projects.
- Strong experience in a client-facing role. Customerorientedandable to communicate with all levels of an organisation with appropriate technical content.
- Highly proficient in performing a variety of penetration tests such as infrastructure, web applicationAPItestingand device configuration reviews,etc.
- CREST Certified Tester(CCT) or Cyber Scheme Team Leader(CSTM) with infrastructure specialism- mandatory
- NCSC CHECK Team Leader(CTL) withat least
Principal
Cyber Security Professional (PriCSP) title- mandatory. - Self-motivated and able to work independently and as part of a larger team
- Produce high-quality technical and executive reports tailored to both technical and non-technical audiences.
- Holds oris able and willing toobtain a minimum of DV clearance
- OSCP, OSCE, CRTO
- Knowledge of cloud security (AWS, Azure, GCP)
- Experience in LLM/AI testing
- Experience in Adversary Simulation / Red Teaming
- Proficiency in coding or scripting (Python,Powershell, Bash)
Our vision is to create a safe, inclusive digital world where people andorganisationscan thrive. Our values of Do the Right Thing, One Team and Above and Beyondemphasisesthe importance of the part we play in society, and our commitment to our people and clients.
Our storyto-datehas been phenomenal, but successdoesn’tend here and as we continue to grow and scale, we want to keep the same culture, passion and commitment to high quality that has enabled us to get this far. Bridewell willprovidea great career opportunity with continual development as well as the following:
- 25 Days Holiday
- Plus buy and sell options
- Flexible Working (around core office hours)
- Company Pension
- Employee Shareholder Scheme
- Personal Day & Birthday Off
- After 1 year of service
- Family Leave – After 1 year of service
- Enhanced Maternity based on length of service
- Life Assurance
- Electric Vehicle Scheme & Cycle to Work Scheme
- Private Healthcare (incl. Gym discounts and vison care)
Location:
Bridewelloperatesa hybrid and flexible working policy,however you willbe required to travel to different sites on occasion,in particularour London office.
Note:
To be eligible for this job you must either holdUKSecurity Clearance or be eligible and willing to go through this security clearance.
Bridewell values diversity and is an equal opportunity employer. We are dedicated to fostering an inclusive environment where all employees feel respected, supported, and empowered to do their best work. If yourequireany reasonable adjustments throughout the interviewprocessplease let us know.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).