Penetration Tester

Moore Kingston Smith

. Lead and support penetration testing engagements across web applications, APIs, and internal and external network infrastructure .

Posted 11/4/2026full-timeLondon • United KingdomMid-LevelSenior💰 £50,000 - £58,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in penetration testing across web applications, APIs, and network infrastructure, with a strong focus on delivering vulnerability assessments and security reviews aligned with industry standards. Proficient in client engagement, technical reporting, and maintaining security compliance within established frameworks.

Highest-signal resume keywords

Penetration TestingVulnerability AssessmentKali LinuxBurp SuitePython Scripting

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Manual TestingAutomated Testing ToolsWeb Application SecurityAPI SecurityTCP/IP SecurityWindows SecurityLinux SecurityActive Directory SecurityCloud Security ReviewsConfiguration Reviews

Soft Skills

Strong Written CommunicationStakeholder ManagementClient-Oriented MindsetProactive LearningClear Technical Explanation

Tools & Technologies

NmapQualysNessusAWSAzureGCPMicrosoft 365

Certifications & Qualifications

CREST CRTOSCPOSWECSTM

Industry Keywords

OWASPPTESMITRE ATT&CKCyber EssentialsCIS BenchmarksISO/IEC 27001NISTCIS Controls

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud PlatformLinuxPythonTCP/IP

About the role

Key responsibilities & impact

Lead and support penetration testing engagements across web applications, APIs, and internal and external network infrastructure
Define objectives, agree scope and rules of engagement, and plan testing with clients
Apply manual and tool-assisted testing aligned with OWASP Web Security Testing Guide, PTES, and MITRE ATT&CK
Deliver Cyber Essentials Plus assessments, including scoping, technical testing, remediation verification, and certification support
Deliver vulnerability assessments, cloud security reviews, and build/configuration reviews against CIS Benchmarks and vendor hardening guidance
Produce deliverables, present findings, apply risk ratings, explain business impact, and support remediation and retesting
Support cyber risk assessments, security control reviews, audit readiness, remediation planning, and security design advice
Build client relationships and contribute to proposals, scoping, tenders, thought leadership, and business development
Maintain knowledge of the threat landscape, attack techniques, testing methodologies, and scheme requirements
Contribute to peer review, quality assurance, and continuous improvement of methodologies, tooling, delivery processes, and technical capability

Requirements

What you’ll need

Professional experience delivering client-facing penetration tests across web applications, APIs, and internal or external network infrastructure, independently and/or as part of a team
Strong manual testing capability and sound judgement in selecting and using automated tools
Practical experience with Kali Linux, Burp Suite, Nmap, and Qualys or Nessus
Familiarity with recognised penetration testing methodologies and frameworks
Ability to script or automate tasks using Python, PowerShell, Bash, or a comparable language
Good knowledge of modern web architecture, common web and API vulnerabilities, TCP/IP, Windows and Linux security, and Active Directory and Microsoft Entra ID attack paths
Experience delivering, or ability to deliver, vulnerability assessments and configuration reviews against recognised benchmarks such as CIS
Working knowledge of Cyber Essentials and Cyber Essentials Plus schemes
Ability to manage engagements within agreed scope, rules of engagement, timescales, budget, and quality standards
Ability to maintain clear testing evidence and protect client systems and data
Strong written communication skills and ability to produce clear, accurate, actionable technical reports
Strong verbal communication and stakeholder-management skills
Ability to explain technical findings, risk, and business impact to technical and non-technical audiences
Proactive, client-oriented mindset and commitment to continuous learning
Confidence working with clients ranging from SMEs and scale-ups to larger enterprises
Recognised practical penetration testing certification such as CREST CRT, OSCP, OSWE, CSTM or equivalent qualification is desirable
Experience in mobile application, wireless, cloud penetration testing, phishing, or social-engineering assessments is desirable
Experience with AWS, Azure, GCP, Microsoft 365, or hands-on security or IT engineering is desirable
Interest in or experience of broader advisory work and frameworks such as ISO/IEC 27001, NIST, or CIS Controls is desirable