Lead Pentester

Reference: fgptyq7ruh6kttpmm4i0

We are seeking an experienced Lead Pentester to guide and deliver high-quality penetration testing and offensive security engagements across web applications, APIs, mobile platforms, cloud environments, networks, and infrastructure. You will lead assessments from scoping and threat modelling through testing, evidence collection, reporting, and client readouts. The role combines hands-on technical work with leadership, requiring you to set testing standards, review findings, mentor consultants, and ensure all engagements are delivered to a consistently high professional standard.

Your responsibilities will include developing test plans and attack scenarios, identifying and validating vulnerabilities, assessing business impact, and producing clear, actionable reports for both technical and non-technical audiences. You will coordinate with internal stakeholders and client teams, communicate risks and remediation priorities, and support retesting activities. You will also contribute to improving methodologies, tooling, automation, quality assurance processes, and internal knowledge-sharing initiatives. Where appropriate, you may assist with proposals, technical scoping, presentations, and the development of new offensive security services.

Applicants should have substantial professional penetration testing experience and a strong understanding of common application, network, cloud, identity, and operating-system vulnerabilities. Practical expertise with tools such as Burp Suite, Nmap, Metasploit, scripting languages, and cloud security platforms is expected, alongside the ability to perform manual testing beyond automated scanner results. Relevant certifications such as OSCP, OSWE, OSEP, CREST, or equivalent experience are desirable. You should be confident leading projects, coaching others, managing competing priorities, and explaining complex security issues clearly. Strong written and verbal communication, sound judgement, curiosity, and a methodical approach are essential. Experience with recognised testing standards and frameworks, including OWASP, PTES, and NIST, would be advantageous.

COMPETITIVE SALARY
Added 07/10/2026
Reference: fgptyq7ruh6kttpmm4i0

Other similar jobs

Third Party Cyber Risk Lead

Added 21/10/2026

We are seeking an experienced Third Party Cyber Risk Lead to strengthen the management of cyber security risks across a complex network of suppliers, partners and outsourced service providers. This is a key role responsible for ensuring that third parties meet appropriate security expectations throughout the procurement, onboarding, monitoring and offboarding lifecycle. You will develop and maintain a proportionate third-party cyber risk management framework, including security standards, assessment methodologies, risk-rating criteria and assurance requirements. Working closely with procurement, legal, technology, information security and business stakeholders, you will assess supplier risks, identify control gaps and agree practical remediation plans. You will...

Learn more

Commercial Security and Information Assurance Lead

Added 21/10/2026

We are seeking an experienced Commercial Security and Information Assurance Lead to provide strategic direction and practical leadership across commercial security, information assurance and risk management. This is an influential role responsible for protecting sensitive information, strengthening security practices and ensuring that commercial activity supports regulatory, contractual and organisational requirements. You will lead the development, implementation and continual improvement of security and information assurance frameworks, policies and processes. Working with colleagues across procurement, legal, technology, operations and senior leadership, you will assess risks, define appropriate controls and provide clear, proportionate advice throughout the commercial lifecycle. You will also support security...

Learn more

Cyber Incident Response Lead

Added 21/10/2026

We are seeking an experienced Cyber Incident Response Lead to direct the investigation, containment and recovery of significant cyber security incidents. This is a hands-on leadership role for an accomplished incident responder who can provide calm, decisive direction during high-pressure situations and strengthen organisational resilience over the long term. You will lead the end-to-end response to security incidents, from initial triage and forensic investigation through to eradication, recovery and post-incident review. You will coordinate technical teams and wider stakeholders, establish response priorities, maintain accurate incident records and provide clear updates to senior leaders. The role will also involve assessing potential...

Learn more

Cyber Security Lead

Added 21/10/2026

We are seeking an experienced Cyber Security Lead to provide strategic direction and operational leadership across an organisation’s information security landscape. This is an opportunity to shape security standards, strengthen resilience and support the safe delivery of technology-enabled services in a complex and evolving environment. You will lead the development and implementation of cyber security strategy, policies, standards and controls, ensuring they remain aligned with business objectives, regulatory expectations and recognised industry frameworks. You will oversee risk assessments, security architecture, vulnerability management, penetration testing and assurance activities, while maintaining a clear view of the organisation’s cyber risk profile. The role...

Learn more

Vulnerability Management Lead

Added 21/10/2026

We are seeking an experienced Vulnerability Management Lead to oversee the identification, assessment and remediation of security vulnerabilities across a complex technology estate. This is a key role within the cyber security function, providing technical leadership and helping to strengthen resilience against emerging threats. You will develop and manage the vulnerability management programme, establishing effective processes for vulnerability discovery, risk assessment, prioritisation and remediation. Working closely with infrastructure, cloud, application development and operational teams, you will ensure that vulnerabilities are addressed within agreed service levels and that risk-based decisions are clearly documented. Your responsibilities will include leading vulnerability scanning and...

Learn more

Cyber Threat Intelligence (CTI) Lead - Senior Manager

Added 20/10/2026

We are seeking an experienced Cyber Threat Intelligence (CTI) Lead to provide strategic direction and operational leadership across the organisation’s threat intelligence capability. This is a senior role for an established cyber security professional who can translate complex threat information into clear, actionable insight for technical teams, senior stakeholders and business leaders. You will help strengthen the organisation’s understanding of the evolving threat landscape and support informed decisions relating to cyber risk, resilience and investment. You will lead the development and delivery of the CTI strategy, including the collection, analysis and dissemination of intelligence from open-source, commercial, technical and classified...

Learn more

Cyber Threat Intelligence (CTI) Lead - Senior Manager

Added 20/10/2026

We are seeking a Cyber Threat Intelligence (CTI) Lead – Senior Manager to establish and advance an organisation-wide capability for identifying, assessing and communicating cyber threats. This senior role will provide strategic direction across the CTI function, ensuring intelligence is relevant, timely and actionable for security operations, technology teams, business leaders and risk stakeholders. You will lead the development of intelligence priorities, collection strategies, analytical frameworks and reporting standards, while translating complex threat activity into clear recommendations that support informed decision-making. Key responsibilities will include managing and mentoring a team of threat intelligence professionals; overseeing the production of strategic, operational...

Learn more

Cyber Threat Intelligence (CTI) Lead - Senior Manager

Added 20/10/2026

An exciting opportunity is available for a Cyber Threat Intelligence (CTI) Lead at Senior Manager level to shape and lead an enterprise-wide threat intelligence capability. You will provide strategic direction, translating complex cyber threat information into clear, actionable insight for senior stakeholders, security teams and business leaders. Working across intelligence, cyber security, technology, risk and operational functions, you will help strengthen resilience against evolving threats and ensure intelligence directly informs security strategy, investment and decision-making. Key responsibilities will include setting the CTI strategy, operating model and roadmap; leading the collection, analysis and dissemination of strategic, operational and tactical intelligence; and...

Learn more

Cyber Security Solutions Lead

Added 20/10/2026

We are seeking an experienced Cyber Security Solutions Lead to define, develop and deliver secure technology solutions across a complex and evolving environment. This is a key role for a security professional who can combine strategic thinking with practical delivery, translating business and technical requirements into resilient, proportionate and sustainable security capabilities. You will work closely with architecture, engineering, infrastructure, product and risk teams to ensure security is embedded throughout the design, development and operation of services. Your responsibilities will include leading the design and implementation of cyber security solutions across cloud, on-premises and hybrid environments; establishing security patterns, principles,...

Learn more

Cyber Profession Lead

Added 20/10/2026

We are seeking an experienced Cyber Profession Lead to shape and strengthen the organisation’s cyber security capability. This is a strategic leadership role responsible for developing the cyber profession, establishing consistent standards and practices, and ensuring that colleagues have the skills, knowledge and support required to manage evolving security risks. You will work across technology, risk, assurance, operations and business teams to promote a strong security culture and embed effective cyber security throughout the organisation. Your responsibilities will include defining and maintaining the cyber capability framework, career pathways, role profiles and professional standards. You will lead workforce and succession planning,...

Learn more

Security Engineering Lead

Added 19/10/2026

We are seeking an experienced Security Engineering Lead to shape and deliver a robust security engineering capability across a complex technology environment. You will provide technical leadership across cloud, infrastructure, applications and operational security, ensuring that security is embedded throughout the design, development and deployment lifecycle. This is an influential role requiring a balance of strategic thinking, hands-on technical expertise and the ability to build strong relationships with engineering, architecture, operations and risk teams. You will lead the development and implementation of security engineering standards, patterns and controls, while identifying opportunities to improve resilience, threat detection and secure-by-design practices. Responsibilities...

Learn more

Data Security Lead

Added 19/10/2026

We are seeking an experienced Data Security Lead to develop and strengthen the organisation’s approach to protecting sensitive information. This role will provide strategic and operational leadership across data security, ensuring that appropriate controls, policies and practices are in place throughout the information lifecycle. You will work closely with technology, risk, compliance, legal and business teams to identify vulnerabilities, manage security risks and support the secure delivery of new products and services. Key responsibilities will include developing and maintaining data security policies, standards and procedures; leading data classification, protection and retention initiatives; and overseeing access controls, encryption, monitoring and loss-prevention...

Learn more

Third Party Cyber Risk Lead

Added 16/10/2026

We are seeking an experienced Third Party Cyber Risk Lead to strengthen the management of information and cyber security risks across an organisation’s supplier and partner ecosystem. This is a key role within the wider risk function, responsible for ensuring that third parties are assessed, monitored and managed consistently throughout the relationship lifecycle. You will provide expert guidance to procurement, technology, legal, compliance and business teams, helping them make informed decisions about supplier security and resilience. Your responsibilities will include developing and maintaining the third-party cyber risk management framework, policies, standards and procedures. You will lead or oversee security due...

Learn more

Lead Security Architect – AI & Data

Added 16/10/2026

We are seeking a Lead Security Architect – AI & Data to define and deliver secure, scalable architecture across artificial intelligence, data and cloud environments. You will provide technical leadership on security strategy, ensuring that emerging technologies are adopted responsibly and that information, models, platforms and services are protected throughout their lifecycle. Working closely with engineering, data, risk, privacy and product teams, you will translate business objectives and regulatory expectations into practical, resilient security solutions. Your responsibilities will include developing security architectures and reference patterns for AI, machine learning, analytics and data platforms; assessing threats, vulnerabilities and privacy risks; and...

Learn more

Third Party Cyber Risk Lead

Added 16/10/2026

We are seeking an experienced Third Party Cyber Risk Lead to develop and oversee a robust approach to managing cyber security risks across suppliers, partners and other external service providers. This role will play a key part in strengthening organisational resilience by ensuring that third parties are appropriately assessed, monitored and managed throughout the supplier lifecycle. You will establish and maintain the third-party cyber risk management framework, including policies, standards, processes and risk assessment methodologies. Working closely with procurement, legal, technology, information security and business stakeholders, you will provide expert guidance during supplier selection, onboarding, contract renewal and exit activities....

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.