Cyber Essentials Plus Assessor & Penetration Tester - UK (Remote, with occasional onsite client work)
We are seeking a Cyber Essentials Plus Assessor and Penetration Tester to join a specialist cybersecurity team supporting organisations across the UK. This is a remote role with occasional onsite client work, so candidates must be comfortable working independently while building trusted relationships with technical and non-technical stakeholders.
You will deliver Cyber Essentials Plus assessments from planning through to final reporting, reviewing client environments against the scheme requirements and identifying areas requiring remediation. Your responsibilities will include scoping engagements, conducting technical verification activities, assessing devices, user accounts, software, firewalls and security configurations, gathering and evidencing findings, and communicating clear, practical recommendations. You will also support clients with queries throughout the assessment process and maintain accurate, audit-ready records.
Alongside certification assessments, you will plan and carry out penetration tests across external and internal infrastructure, web applications, APIs, cloud environments and, where appropriate, wireless networks. You will identify, validate and risk-rate vulnerabilities, minimise operational impact during testing, and produce high-quality reports that explain technical issues and business risk in an accessible manner. You may also present findings to clients and contribute to follow-up discussions, retesting and continuous improvement of internal methodologies.
Applicants should have demonstrable experience delivering Cyber Essentials Plus assessments and conducting penetration testing in a professional environment. Relevant industry certifications, such as CREST, CHECK, OSCP, OSCP+, CRT, CSTM or equivalent, would be advantageous. Strong knowledge of networking, operating systems, identity and access management, vulnerability assessment, secure configuration and common attack techniques is essential. Experience with recognised testing tools and the ability to write concise, evidence-based reports are also required.
You will need excellent communication skills, sound professional judgement and a methodical approach to managing multiple engagements. A valid UK driving licence and willingness to travel occasionally to client sites are desirable. In return, you will receive opportunities for technical development, varied client work, flexible remote working and the chance to help organisations strengthen their cyber resilience.
Cyber Essentials Plus Assessor & Penetration Tester - UK (Remote, with occasional onsite client work)
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Analyst
- Security Consultant
- Identity Access Management IAM
- IT Security Manager
- Security Architect
- Data Protection
- Cyber Security Consultant
- Governance and Compliance
- Risk Analyst
- SOC Analyst
- Application Security
LATEST JOBS
- Cyber Security Engineer
- Interim Cyber Security Interna...
- Lead DevSecOps Engineer
- Data Privacy Specialist UK
- Security and Compliance Engine...
- GCIO Operations Manager - Cybe...
- Information Security Analyst
- Senior Director - DevOps Secur...
- Head of Information Security
- Lead Cloud Security Engineer
- Cyber Policy Lead
- IT Security Auditor