Oscar
Penetration Tester

How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Penetration Tester - Bristol - £40,000-55,000 DOE
We're working with a well-established and highly regarded cyber security consultancy, known for delivering high-end penetration testing, vulnerability assessment and red teaming services to clients across critical sectors including telecoms, finance, defence, rail and aerospace. Their team has a strong track record of working on complex, high-stakes engagements ranging from national infrastructure projects through to global enterprise clients.
They're now looking to bring in an experienced Penetration Tester to join their growing technical team, based out of their Bristol office with regular travel to client sites.
What you'll be doing:
- Planning and delivering penetration tests across networks, systems and applications, identifying vulnerabilities and security weaknesses
- Carrying out detailed vulnerability assessments, security audits and risk analysis, producing clear reports with practical remediation guidance
- Working alongside the red team to run realistic attack simulations and evaluate client security controls
- Building and using exploitation tools to demonstrate real-world impact and help clients understand their risk exposure
- Writing well-structured, client-ready reports covering findings, risk ratings and recommended fixes
- Acting as a key point of contact for clients — scoping engagements, presenting results, and advising on how to strengthen their security posture
- Keeping up to date with emerging threats and testing techniques, and continually refining tools and methodology
- Taking on elements of project and client management as part of engagement delivery
Reasons to use Rodeo
I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?
Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.
Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
Graduate Consultant — 2026 Scheme
Why you're a good match
StrongYour economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.
See breakdownIt searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Why you're a good match
You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.
Experience fit
Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Key skills and experience needed:
- A degree in Computer Science, Cyber Security, Information Security or a related discipline
- CHECK Team Member, CREST Registered Tester, or an equivalent recognised certification
- At least 2 years' hands-on experience in penetration testing and vulnerability assessment
- Solid grounding in network protocols, operating systems and core security technologies
- Confident use of tools such as Metasploit, Burp Suite and Nmap
- Strong analytical and problem-solving skills, with genuine curiosity about current threats and attack techniques
- Comfortable communicating technical findings clearly to both technical teams and senior stakeholders
- Able to work independently on client sites as well as collaboratively within a wider consulting team
- Confident presenting and delivering training where required


Get help with your application
Your very own career expert that helps elevate your application to the next level.
Beneficial (not essential):
- Code review experience
- Exposure to audit frameworks such as ISO 27001, CTAS or CAS(T)
- Experience mentoring or informally leading within a technical team
Why this role:
This is a genuine opportunity to work on varied, high-impact engagements across some of the most security-conscious sectors in the UK, rather than repetitive, low-value testing work. You'll be part of a collaborative technical team with real investment in your development — including funded certifications, access to modern tooling, and the chance to contribute to wider security research initiatives. Performance-based incentives sit on top of a competitive base salary.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location