Senior Penetration Tester
A senior pentester leading client engagements at Sumer's cyber security practice: delivering infrastructure, web application and cloud penetration tests, Cyber Essentials Plus assessments and reviews aligned to NIST, ISO 27001 and PCI-DSS, while mentoring junior consultants, assuring report quality and developing service offerings.
- Compensation
- Not disclosed
- Location
- Newcastle-upon-Tyne, England
- Work setup
- Remote
- Seniority
- Senior
- Employment
- Not specified
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Must have
- Minimum five years' experience delivering penetration testing engagements
- Strong experience conducting external, internal and web application penetration testing
- Experience conducting technical security reviews and vulnerability assessments
- Proficiency with tools such as Burp Suite Professional, Nessus, Qualys, OpenVAS, Nmap, Metasploit, Kali Linux and related security testing tools
- Strong understanding of common attack techniques, vulnerability assessment methodologies and remediation approaches
- Excellent report-writing and communication skills
- Ability to explain technical findings to both technical and non-technical stakeholders
- Strong client relationship and stakeholder management skills
- Industry-recognised certifications such as CREST CRT, OSCP, CSTM, CHECK Team Member or equivalent
Nice to have
- Experience delivering Cyber Essentials Plus assessments
- Experience with cloud security assessments across Microsoft Azure and Microsoft 365 environments
- Exposure to SIEM, EDR and security monitoring platforms
- Understanding of frameworks including NIST CSF, ISO 27001, PCI-DSS and CIS Controls
- Experience leading teams or mentoring junior consultants
Full description
In 2023, RMT became part of Sumer Group – a collaboration of renowned regional accountancy practices with a shared vision to champion local small to medium-sized enterprises.
By bringing together the best in advisory & business services, Sumer Group retains the value that community-based practices offer and combines this with the scale, breadth of expertise and technologies that only a national organisation can muster. Through our unique approach, we believe we can make a real positive impact and achieve growth for our company, our colleagues and our clients. Together, we are about doing the right things, putting people first and delivering the best possible services to those who sit at the heart of our economy and communities.
We are seeking an experienced Senior Penetration Tester to join our growing Cyber Security consultancy at a pivotal stage in its development. With at least five years’ experience delivering penetration testing and technical security assessments, you will be one of the practice’s early senior hires, with a genuine opportunity to shape our services, technical standards, delivery approach and culture from the outset. Alongside leading client engagements, you will help establish how we work, strengthen our market reputation and mentor the consultants who join us as the team expands.
Working closely with the wider RMT Technology IT and Cyber team, you will deliver and oversee a broad range of services including penetration testing, Cyber Essentials Plus assessments and technical information security reviews.
As a senior member of the founding team, you will provide technical leadership, assure the quality of assessment outputs, contribute to service development and support client facing activities. Our ambition is to grow the practice into a large, respected national cyber security team, serving organisations across the UK. You will play a central role in that journey and help to recruit and develop future team members and create a consultancy known for technical excellence and strategic insights.
Why Join Us?**
Joining now means more than stepping into an established role: it is an opportunity to help build the consultancy you want to be part of. Your ideas and expertise will have visible impact, with genuine influence over our methodologies, service portfolio, technical standards and ways of working. As the practice grows nationally, you will have the scope to broaden your leadership responsibilities, help shape and develop the team, and build a long term career with progression linked directly to the success you help create.
- Lead and deliver infrastructure, web application and cloud security penetration testing engagements.
- Conduct Cyber Essentials and Cyber Essentials Plus assessments.
- Deliver technical security reviews and vulnerability assessments.