As a result of growth, we are looking for an experienced Senior Penetration Tester with solid experience of infrastructure and web application testing to deliver testing engagements on a range of key client work.
This is an excellent opportunity for a highly motivated and determined Penetration Tester to continue their development and work on a range of exciting projects. As well as delivering testing, Bridewell ensures each consultant has access to a dedicated annual team budget for personal development. This gives access to CREST, Cyber Scheme exams, online platforms such as Hack the Box, TSCM and TryHackMe, and many other training courses. There is also dedicated time to carry out research and assist with developing new testing methodologies and techniques.
Requirements
What you’ll be doing
- Deliver and lead high quality offensive security assessments (web application, API and infrastructure), meeting client expectations
- Get involved in and lead on team assessments as required
- Produce written and verbal reports to clients to an excellent standard.
- Support the sales team with pre-sales and assist with technical input into tenders and proposals
- Carry out research and service development when not on client deliverable work that can be used to enhance our services to clients
- Perform report QA.
- Work with teams across the business, providing the latest technical knowledge to collaborate on interesting client projects.
You will need to have experience in:
- Strong experience in a client-facing role. Customer oriented and able to communicate with all levels of an organisation with appropriate technical content.
- Highly proficient in performing a variety of penetration tests such as infrastructure, web application API testing and device configuration reviews, etc.
- CREST Certified Tester (CCT) or Cyber Scheme Team Leader (CSTM) with infrastructure specialism - mandatory
- NCSC CHECK Team Leader (CTL) with at least Principal Cyber Security Professional (PriCSP) title - mandatory.
- Self-motivated and able to work independently and as part of a larger team
- Produce high-quality technical and executive reports tailored to both technical and non-technical audiences.
- Holds or is able and willing to obtain a minimum of DV clearance
Desirable
- OSCP, OSCE, CRTO
- Knowledge of cloud security (AWS, Azure, GCP)
- Experience in LLM/AI testing
- Experience in Adversary Simulation / Red Teaming
- Proficiency in coding or scripting (Python, Powershell, Bash)
Benefits
Our vision is to create a safe, inclusive digital world where people and organisations can thrive. Our values of Do the Right Thing, One Team and Above and Beyond emphasises the importance of the part we play in society, and our commitment to our people and clients. Our story to-date has been phenomenal, but success doesn’t end here and as we continue to grow and scale, we want to keep the same culture, passion and commitment to high quality that has enabled us to get this far. Bridewell will provide a great career opportunity with continual development as well as the following:
- 25 Days Holiday - Plus buy and sell options
- Flexible Working (around core office hours)
- Company Pension
- Employee Shareholder Scheme
- Personal Day & Birthday Off - After 1 year of service
- Family Leave – After 1 year of service
- Enhanced Maternity based on length of service
- Life Assurance
- Electric Vehicle Scheme & Cycle to Work Scheme
- Private Healthcare (incl. Gym discounts and vison care)
Location: Bridewell operates a hybrid and flexible working policy, however you will be required to travel to different sites on occasion, in particular our London office.
Note: To be eligible for this job you must either hold UK Security Clearance or be eligible and willing to go through this security clearance.
Bridewell values diversity and is an equal opportunity employer. We are dedicated to fostering an inclusive environment where all employees feel respected, supported, and empowered to do their best work. If you require any reasonable adjustments throughout the interview process please let us know.
Skills Required
- Strong client-facing experience with ability to communicate technical content to all levels
- Proficient performing infrastructure, web application, API testing and device configuration reviews
- CREST Certified Tester (CCT) or Cyber Scheme Team Leader (CSTM) with infrastructure specialism
- NCSC CHECK Team Leader (CTL) with at least Principal Cyber Security Professional (PriCSP) title
- Produce high-quality technical and executive reports tailored to technical and non-technical audiences
- Self-motivated; able to work independently and as part of a larger team
- Holds or is able and willing to obtain a minimum of DV (Developed Vetting) security clearance
- OSCP, OSCE, CRTO certifications
- Knowledge of cloud security (AWS, Azure, GCP)
- Experience in LLM/AI testing
- Experience in Adversary Simulation / Red Teaming
- Proficiency in coding or scripting (Python, PowerShell, Bash)
What We Do
Bridewell is a leading cyber security services company that specialises in protecting and transforming critical business functions for some of the world’s most trusted organisations. Its teams of security experts work alongside clients to deliver end-to-end services that solve key business challenges. Bridewell's specialists are highly accredited by major industry bodies and have extensive experience delivering services across cyber security, managed security, penetration testing, and data privacy. Bridewell is headquartered in the UK where they run a 24/7 Security Operations Centre (SOC) and has expanded into the US to further support global clients. Since being founded in 2013, Bridewell has grown rapidly and is now one of the largest cyber security providers.
