Cyber Essentials Plus Assessor & Penetration Tester - UK (Remote, with occasional onsite client work)

Reference: 9og61eeavavhvwubydxo

We are seeking a Cyber Essentials Plus Assessor and Penetration Tester to join a specialist cybersecurity team supporting organisations across the UK. This is a remote role with occasional onsite client work, so candidates must be comfortable working independently while building trusted relationships with technical and non-technical stakeholders.

You will deliver Cyber Essentials Plus assessments from planning through to final reporting, reviewing client environments against the scheme requirements and identifying areas requiring remediation. Your responsibilities will include scoping engagements, conducting technical verification activities, assessing devices, user accounts, software, firewalls and security configurations, gathering and evidencing findings, and communicating clear, practical recommendations. You will also support clients with queries throughout the assessment process and maintain accurate, audit-ready records.

Alongside certification assessments, you will plan and carry out penetration tests across external and internal infrastructure, web applications, APIs, cloud environments and, where appropriate, wireless networks. You will identify, validate and risk-rate vulnerabilities, minimise operational impact during testing, and produce high-quality reports that explain technical issues and business risk in an accessible manner. You may also present findings to clients and contribute to follow-up discussions, retesting and continuous improvement of internal methodologies.

Applicants should have demonstrable experience delivering Cyber Essentials Plus assessments and conducting penetration testing in a professional environment. Relevant industry certifications, such as CREST, CHECK, OSCP, OSCP+, CRT, CSTM or equivalent, would be advantageous. Strong knowledge of networking, operating systems, identity and access management, vulnerability assessment, secure configuration and common attack techniques is essential. Experience with recognised testing tools and the ability to write concise, evidence-based reports are also required.

You will need excellent communication skills, sound professional judgement and a methodical approach to managing multiple engagements. A valid UK driving licence and willingness to travel occasionally to client sites are desirable. In return, you will receive opportunities for technical development, varied client work, flexible remote working and the chance to help organisations strengthen their cyber resilience.

COMPETITIVE SALARY
Added 22/10/2026
Reference: 9og61eeavavhvwubydxo

Cyber Essentials Plus Assessor & Penetration Tester - UK (Remote, with occasional onsite client work)

Bristol, England, United Kingdom Permanent Penetration Tester

Other similar jobs

Cyber Essentials Plus Assessor

Added 02/11/2026

We are seeking a Cyber Essentials Plus Assessor to conduct thorough, independent assessments of organisations against the Cyber Essentials Plus scheme. This role involves evaluating technical controls, identifying weaknesses and providing clear, practical guidance to help clients strengthen their cyber security posture. You will plan and deliver assessments across a range of environments, reviewing areas such as firewalls, secure configuration, software updates, malware protection, user access controls and device security. Responsibilities will include gathering evidence, conducting remote and on-site technical testing, validating findings, documenting results and producing accurate assessment reports within agreed timescales. The successful candidate will communicate confidently with...

Learn more

Cyber Essentials Assessor - Cyber Security Consultancy & Assurance

Added 02/11/2026

We are seeking a Cyber Essentials Assessor to join a growing cyber security consultancy and assurance team. This role will involve supporting organisations through Cyber Essentials and Cyber Essentials Plus assessments, helping them understand their security responsibilities and improve their resilience against common cyber threats. You will work directly with clients to review their technical environments, policies and security controls against the relevant scheme requirements. Your responsibilities will include gathering and analysing evidence, conducting remote or on-site assessments, identifying gaps, documenting findings and producing clear, accurate reports. You will also provide practical guidance to help clients address non-compliance and achieve...

Learn more

Defence Cyber Certification & Cyber Essentials Assessor

Added 12/10/2026

We are seeking a Defence Cyber Certification & Cyber Essentials Assessor to support the evaluation, certification and continuous improvement of cyber security controls across a range of defence-related suppliers, systems and services. You will assess organisations against Cyber Essentials and Cyber Essentials Plus requirements, contribute to broader cyber assurance activities, and provide clear, practical guidance to help clients address identified risks. This is an opportunity for an experienced cyber security professional to work with varied stakeholders in a role that combines technical assessment, evidence review, risk analysis and customer engagement. Key responsibilities will include planning and conducting assessments, reviewing technical...

Learn more

Cyber Essentials Assessor

Added 22/10/2026

We are seeking a Cyber Essentials Assessor to support organisations in achieving and maintaining compliance with the Cyber Essentials and Cyber Essentials Plus schemes. This role will involve assessing technical environments, reviewing security controls and providing clear, practical guidance to help clients improve their cyber resilience. You will conduct assessments against the relevant scheme requirements, including secure configuration, user access control, malware protection, software updates and firewalls. Responsibilities will include reviewing questionnaires and supporting evidence, conducting technical verification activities, identifying gaps and documenting findings in accurate, professional reports. You will explain technical issues clearly to both technical and non-technical stakeholders...

Learn more

Penetration Tester - UK (Remote)

Added 15/09/2026

We are seeking a skilled Penetration Tester to join a remote security team supporting clients across the UK. In this role, you will assess the security of networks, applications, cloud environments and infrastructure, identifying vulnerabilities before they can be exploited. You will plan and conduct authorised penetration tests, perform reconnaissance and threat modelling, exploit weaknesses safely, and evaluate the potential business impact of your findings. The role may involve web application, API, internal and external infrastructure, wireless, mobile, social engineering and cloud security assessments. You will be responsible for maintaining clear testing documentation, capturing reliable evidence and producing high-quality technical...

Learn more

Client Service Delivery Lead / Cyber Analyst (Commercial Banking)

Added 30/10/2026

We are seeking a Client Service Delivery Lead / Cyber Analyst to support the secure and effective delivery of technology services within a commercial banking environment. This is a varied role combining client relationship management, service delivery leadership and cyber security analysis, with responsibility for maintaining high standards of operational resilience, risk management and customer satisfaction. You will act as a key point of contact for internal stakeholders and business clients, ensuring that services are delivered in line with agreed service levels and regulatory expectations. Responsibilities will include monitoring service performance, leading service review meetings, managing incidents and escalations, coordinating...

Learn more

Privacy & AI Governance Specialist (Hybrid Work Model)

Added 15/10/2026

We are seeking a Privacy & AI Governance Specialist to support the responsible use of personal data and artificial intelligence across a complex, evolving organisation. This is an opportunity to help shape practical governance frameworks that enable innovation while protecting individuals, meeting regulatory obligations and maintaining public trust. The role follows a hybrid work model, combining remote working with regular attendance at a designated office location. You will develop, maintain and improve privacy and AI governance policies, standards, procedures and guidance. Key responsibilities will include advising stakeholders on data protection, privacy by design, automated decision-making and the ethical deployment of...

Learn more

Security Client Solutions & Growth Manager (Microsoft Security)

Added 23/09/2026

We are seeking a Security Client Solutions & Growth Manager to lead the development of security-focused client relationships and drive sustainable business growth. This role will work closely with customers, technology specialists, delivery teams and commercial stakeholders to understand complex security needs and translate them into practical, outcome-focused solutions. You will act as a trusted adviser throughout the client lifecycle, from early discovery and solution design through to proposal, implementation and ongoing account development. Key responsibilities will include identifying new opportunities, shaping account and growth strategies, managing a qualified pipeline, and contributing to bids, proposals and presentations. You will develop...

Learn more

Cyber Essentials Analyst

Added 21/10/2026

We are seeking a Cyber Essentials Analyst to support the effective management and continual improvement of an organisation’s cyber security controls. This role will help ensure that systems, processes and users meet the requirements of the Cyber Essentials and Cyber Essentials Plus frameworks, while contributing to a broader culture of security and risk awareness. You will assess technical and operational controls across areas including firewalls, secure configuration, access management, malware protection, software updates and device security. Working with colleagues across technology and business functions, you will gather evidence, identify control gaps, document findings and support the implementation of appropriate remediation...

Learn more

Cyber Security Consultant / Penetration Tester

Added 22/10/2026

We are seeking a Cyber Security Consultant / Penetration Tester to assess, challenge and strengthen the security of systems, applications, networks and infrastructure. This role will suit an experienced security professional who can combine strong technical capability with the confidence to communicate findings clearly to both technical and non-technical audiences. You will plan and deliver penetration tests, vulnerability assessments and security reviews across web applications, mobile applications, APIs, internal and external networks, cloud environments and wireless infrastructure. Responsibilities will include defining testing scope, identifying vulnerabilities, validating exploitability, assessing business impact and producing accurate, evidence-based reports. You will also provide practical...

Learn more

Cyber Security Consultant / Penetration Tester

Added 13/10/2026

We are seeking a Cyber Security Consultant / Penetration Tester to assess, improve and strengthen the security of applications, infrastructure, networks and cloud environments. You will work with a range of stakeholders to identify vulnerabilities, evaluate risk and provide practical recommendations that support resilient, secure business operations. The role offers the opportunity to contribute across the full penetration testing lifecycle, from scoping and reconnaissance through to exploitation, reporting and remediation support. Your responsibilities will include planning and delivering penetration tests across web applications, APIs, mobile applications, internal and external networks, wireless environments, cloud platforms and infrastructure. You will conduct vulnerability...

Learn more

Cyber Security Consultant (Penetration Tester)

Added 09/10/2026

We are seeking a Cyber Security Consultant (Penetration Tester) to assess the security of applications, infrastructure, networks and cloud environments. You will work with clients and internal stakeholders to identify vulnerabilities, evaluate business impact and provide practical recommendations that improve overall security resilience. The role requires strong technical capability, curiosity and the confidence to communicate complex findings clearly to both technical and non-technical audiences. Your responsibilities will include planning and delivering authorised penetration tests across web applications, APIs, mobile applications, internal and external networks, wireless environments, cloud platforms and social engineering engagements where appropriate. You will conduct reconnaissance, vulnerability analysis...

Learn more

Cyber Security Penetration Tester

Added 07/10/2026

We are seeking a Cyber Security Penetration Tester to identify, assess, and help remediate security weaknesses across applications, infrastructure, networks, cloud environments, and supporting technologies. You will plan and conduct authorised penetration tests, vulnerability assessments, and security reviews, using a combination of manual techniques and industry-standard tools. The role will involve simulating realistic attack scenarios while maintaining a strong focus on safety, accuracy, and minimal operational disruption. Your responsibilities will include defining test scopes and methodologies, performing reconnaissance and exploitation activities, validating findings, and evaluating the potential business impact of identified vulnerabilities. You will produce clear, evidence-based reports for both...

Learn more

Cyber Security Penetration Tester

Added 07/10/2026

We are seeking a Cyber Security Penetration Tester to assess the resilience of systems, applications, networks and infrastructure against real-world cyber threats. You will plan and conduct authorised penetration tests, vulnerability assessments and security reviews across web applications, APIs, mobile platforms, cloud environments, internal networks and external attack surfaces. The role involves identifying weaknesses, validating their potential impact and providing practical recommendations that help strengthen security controls and reduce organisational risk. Your responsibilities will include defining test scopes and methodologies, performing reconnaissance, threat modelling and manual security testing, and using appropriate tools to support your assessments. You will investigate and...

Learn more

Cyber Security Penetration Tester

Added 07/10/2026

We are seeking a Cyber Security Penetration Tester to identify, assess and help remediate security weaknesses across applications, infrastructure, networks and cloud environments. You will plan and deliver authorised penetration tests, vulnerability assessments and red-team style engagements, using a combination of manual techniques and industry-standard tools. The role will involve testing web and mobile applications, APIs, internal and external networks, operating systems, wireless environments and cloud services. Your responsibilities will include defining testing scopes and methodologies, conducting reconnaissance and exploitation activities safely, validating vulnerabilities, and assessing the potential business impact of identified risks. You will produce clear, accurate reports that...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.