Penetration Tester Security Consultant Hybrid

**About Us**

Punk Security is a fast-growing, CREST-accredited cybersecurity company with a proud passion for delivering honest, high-quality security solutions. We specialise in DevSecOps and hands-on penetration testing, helping organisations build secure systems from the ground up. Our team is driven by curiosity, collaboration, and a commitment to doing great work that has a real impact. If you're passionate about security and want to work in a supportive, expert-led environment where your voice matters, Punk Security could be the place for you.

**About the role**

We’re looking for a technical security expert with real-world hands-on penetration testing skills and a passion for tackling a wide range of security challenges. This is a chance to join a growing team, working alongside skilled and passionate security consultants.

**Day-to-Day Responsibilities**
- Lead and deliver infrastructure penetration tests, including broader vulnerability assessments and security audits as needed.
- Scope and plan engagements by understanding client requirements to ensure maximum value for the customer.
- Produce clear, professional reports tailored to both technical and non-technical audiences.
- Communicate effectively with clients throughout testing, offering an approachable, trusted point of contact.
- Deliver testing debriefs to clients following engagements, providing clear explanations to both technical and non-technical audiences.
- Stay current with emerging security threats, tools, and industry trends.
- There is potential for travel to client sites when necessary.
- Contribute to improving team methodologies, documentation, tools, and processes.
- Manage multiple client engagements effectively.
- Build strong, trusted relationships with clients as a reliable security partner.
- You will be required on-site in the Northallerton office once or twice a week, though this can potentially be reviewed for the right applicant.

**Key Skills We're Looking For**
**Essential**
- Certification as either CREST or Cyber Scheme Team Leader (not expired)
- A minimum of 2 years of hands-on experience delivering penetration tests.
- Strong technical understanding of network and cloud infrastructure security.
- Solid knowledge of common vulnerabilities and effective risk mitigation strategies.
- Proficiency with tools such as Metasploit, Nmap, BloodHound, Eyewitness, Burp Suite, Nessus, SMBeagle.
- A genuine passion for security.
- The ability to manage own workflow and timings in a fast-paced environment.

**Desirable**
- Certifications such as CRT, CHECK Team Member (CTM), CSTL, or OSCP
- Certified Cyber Essentials Plus Auditor
- Experience with scripting languages such as Python, Bash, or PowerShell

**Benefits of working with us**
- Work with a passionate, supportive, and security-driven team
- Flexible working options
- Opportunities for travel (examples of previous events include GISEC Dubai, conferences across the UK, BlackHat USA)
- Opportunity to grow your role in line with the team’s rapid expansion
- Industry certifications
- Performance bonus scheme
- Private health cover (including dependents up to age 18)
- Office located in the market town of Northallerton - excellent transport links, free onsite parking and close to a number of gyms and restaurants

**Punk Security is an equal opportunities employer**

**Job Types**: Full-time, Permanent

Pay: £40,000.00-£60,000.00 per year

**Benefits**:

- Casual dress
- Company events
- Employee mentoring programme
- Free parking
- On-site parking
- Paid volunteer time
- Private medical insurance
- Sick pay
- Transport links
- Work from home

Ability to commute/relocate:

- Northallerton North DL6 2NQ: reliably commute or plan to relocate before starting work (required)

Application question(s):
Please confirm you have lived in the UK for the last 5 years and would be willing to undergo security clearance.

**Experience**:

- in-industry Penetration testing: 2 years (required)

Licence/Certification:

- CREST or Cyber Scheme Team Leader (required)

Work authorisation:

- United Kingdom (required)

Work Location: Hybrid remote in Northallerton North DL6 2NQ