Ethical Hacker

London, United Kingdom

• Salary £70,000 – £95,000 / year (Depending on Experience)
• City London
• Province City of London
• Country United Kingdom
• Postal Code EC1A

Mastar Rec is a specialist recruitment and staffing agency supporting high-growth and technology-driven industries across the United Kingdom, the United States, and global markets
. We partner with organizations to deliver tailored staffing solutions focused on quality, integrity, and long-term value for both clients and candidates.

Job Description

We are looking for a certified Ethical Hackertojoin our client’s cybersecurity team and help safeguard critical systems through simulated attacks and red team assessments. You’ll be responsible for identifying vulnerabilities across networks, applications, and cloud infrastructure and providing actionable insights to reduce risk exposure.

Ideal candidates have deep experience in offensive security.

Testing, a strong understanding of exploits and security protocols, and a driveto continuously evolve with today’s fast-moving threat landscape.

Job Responsibilities

• Plan,execute, and report on across networks, web applications, APIs, mobile, and cloud environments
• Conduct red team engagements
  , including simulated phishing, socialengineering, and physical security assessments
• Identify,document, and prioritise vulnerabilities and misconfigurations
• Useboth manual techniques and automated tools (e.g., Burp Suite, Metasploit,Nmap)
• Collaborate with blue team and remediation teams to harden systems
• Produce detailed technical reports and executive summaries for stakeholders
• Stayup to date with the latest exploits, vulnerabilities (CVEs), and threat actor tactics

Required Skills

• Strong proficiency in penetration testing tools (e.g., Kali Linux, Burp Suite, Metasploit, Nmap, Wireshark)
• Experience with OWASP Top 10
  , vulnerability scanning, and exploit development
• Familiarity with MITRE ATT&CK framework and red team methodology
• Solid knowledge of TCP/IP, firewalls, DNS, HTTP/HTTPS, and encryption protocols
• Strong reporting and communication skills
• Atleast one industry certification (OSCP, CEH, CREST CRT, or similar)

Desired Skills

• Scripting skills in Python, Power Shell, or Bash
• Experience with cloud security testing (AWS, Azure, GCP)
• Familiarity with CI/CD environments and Dev Sec Ops
• Exposure to purple teaming or adversary emulation
• Knowledge of physical security and social engineering tactics
• Competitive salary + performance bonus
• Paid training and certification reimbursement (OSCP, CREST, etc.)
• 25days holiday + bank holidays
• Fully remote or hybrid working options
• Company-funded attendance at security conferences (DEF CON, Black Hat, etc.)