Bonhill Partners
Penetration Tester
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Client: Global Investment Bank
Role: Penetration Tester
Location: London, Bank - 4 days in office.
Details: Initial 6 month contract, with guaranteed conversion to perm within that period.
Perm salary: up to £85k base + bonus
Initial contract rate: TBC
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Candidate Requirements
Get help with your application
Your very own career expert that helps elevate your application to the next level.
- 3+ years working in penetration testing, offensive security or a comparable red team capacity.
- Practical experience conducting realistic attack simulations across enterprise environments, including maintaining access and operating without triggering defensive controls.
- Strong understanding of how sophisticated threat actors operate, covering nation-state activity, cybercrime, insider threats and financially motivated attacks.
- Comfortable working with a broad range of offensive security frameworks, tooling and assessment techniques.
- Capable of assessing technical findings and turning them into practical, prioritised security improvements for engineering and security teams.
- Strong knowledge of advanced adversary behaviour, including attack chains, tradecraft and methods used to compromise and retain access to target environments.
- Understanding of enterprise technology landscapes, including the relationship between infrastructure, backend services, applications and user-facing platforms.
- Awareness of blue-team practices, including security telemetry, threat detection, monitoring platforms and SIEM technologies.
- Able to break down complex technical risks and communicate key findings effectively to senior leadership and governance groups.
- Experienced in producing accurate security reports, technical assessments and operational documentation.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location