eFinancialCareers
IT/OT Penetration Tester
IT/OT Penetration Tester at eFinancialCareers, based in London, South East England. This is a permanent role with hybrid working.
- Pay
- Not given by the employer
- Hours and contract
- Permanent · Hybrid
- Location
- London, South East England
- Closing date
- Sector
- QA Tester
Reference 57445249
About the role
Hybrid WORKING
Location: Central London, Greater London - United Kingdom Type: Permanent
IT/OT Penetration Tester
UK-wide | Hybrid working | Salary up to £105,000
A leading global innovation and technology consultancy is looking for an experienced IT/OT Penetration Tester with expertise gained across energy, wind, nuclear, critical national infrastructure (CNI) or manufacturing environments.
This is an opportunity to assess complex IT and operational technology estates where safety, availability and operational resilience are critical. You'll help major organisations identify vulnerabilities, understand their exposure and secure essential systems.
The role
You will:
- Plan and deliver penetration-testing engagements across IT and OT environments
- Assess industrial control systems, operational networks and connected infrastructure
- Conduct security testing across cloud, mobile, network, web application and API environments
- Identify, validate and clearly communicate technical vulnerabilities
- Produce high-quality technical and executive-level reports
- Present findings and practical remediation recommendations directly to clients
- Work across energy, wind, nuclear, CNI and manufacturing programmes
- Support the development of internal tools, infrastructure and testing methodologies
- Share knowledge through mentoring, training and collaborative problem-solving
- Contribute to CREST-accredited ethical-hacking training
- Help scope and deliver complex client engagements
You will ideally have:
- Penetration-testing experience within energy, renewable energy, wind, nuclear, CNI, utilities, industrial or manufacturing environments
- A strong understanding of operational technology, industrial control systems and the risks associated with interconnected IT/OT estates
- Experience working with industrial technologies and environments such as ICS, SCADA, DCS or PLC systems
- CTM/CSTM or CTL/CSTL status, or an equivalent recognised qualification
- Certifications such as OSCP, CREST or Cyber Scheme credentials
- Strong practical penetration-testing and ethical-hacking experience
- Specialist knowledge in one or more of the following:
- OT and industrial control system security
- Network and infrastructure security
- Cloud security
- Mobile application security
- Web applications and APIs
- Experience producing clear and professional security-assessment reports
- The ability to explain technical risks to both engineering and business stakeholders
- Strong analytical, problem-solving and client-facing skills
This is a UK-wide opportunity offering hybrid working. You'll typically work from an office or client site for at least two days per week, although some assignments may require additional on-site attendance.
Salary and benefits
- Salary up to £105,000, depending on experience
- Annual performance-related bonus
- Share-ownership opportunities
- Private healthcare for you and your family
- Generous company pension
- 25 days' annual leave, plus an additional half-day on Christmas Eve
- Option to purchase five additional days of leave
- Dedicated training and certification budget
- Technical and leadership career-progression opportunities
- Cycle-to-work and charitable-giving schemes
Reference: 57445249 · Posted 15 hours ago · Closes 4 Dec 2026 · Listed via eFinancialCareers
Apply for this job
This role is listed via eFinancialCareers. Applications are handled on the employer's site.
Apply on employer siteOpens the employer's website in a new tab.
Signed in? Every job you apply for counts toward your weekly goal and badges. How it works
Safe applying: a genuine employer will never ask you to pay for a DBS check, training or equipment, or move you onto WhatsApp before you are hired. If this listing does, report it and do not pay anything.