Jobs in London - Ethical Hacker • Central London

Company: MastarRec

Central London

Job DescriptionWe are looking for a certified Ethical Hacker to join our client’s cybersecurity team and help safeguard critical systems through simulated attacks and red team assessments. You’ll be responsible for identifying vulnerabilities across networks, applications, and cloud infrastructure and providing actionable insights to reduce risk exposure.Ideal candidates have deep experience in offensive security. Testing, a strong understanding of exploits and security protocols, and a drive to continuously evolve with today’s fast-moving threat landscape.Job ResponsibilitiesPlan, execute, and report on across networks, web applications, APIs, mobile, and cloud environmentsConduct red team engagements, including simulated phishing, social engineering, and physical security assessmentsIdentify, document, and prioritise vulnerabilities and misconfigurationsUse both manual techniques and automated tools (e.g., Burp Suite, Metasploit, Nmap)Collaborate with blue team and remediation teams to harden systemsProduce detailed technical reports and executive summaries for stakeholdersStay up to date with the latest exploits, vulnerabilities (CVEs), and threat actor tacticsRequirementsRequired SkillsStrong proficiency in penetration testing tools (e.g., Kali Linux, Burp Suite, Metasploit, Nmap, Wireshark)Experience with OWASP Top 10, vulnerability scanning, and exploit developmentFamiliarity with MITRE ATT&CK framework and red team methodologySolid knowledge of TCP/IP, firewalls, DNS, HTTP/HTTPS, and encryption protocolsStrong reporting and communication skillsAt least one industry certification (OSCP, CEH, CREST CRT, or similar)Desired SkillsScripting skills in Python, PowerShell, or BashExperience with cloud security testing (AWS, Azure, GCP)Familiarity with CI/CD environments and DevSecOpsExposure to purple teaming or adversary emulationKnowledge of physical security and social engineering tacticsBenefitsJob BenefitsCompetitive salary + performance bonusPaid training and certification reimbursement (OSCP, CREST, etc.)25 days holiday + bank holidaysPrivate healthcare + mental health supportFully remote or hybrid working optionsCompany-funded attendance at security conferences (DEF CON, Black Hat, etc.)