About Us
Punk Security is a fast-growing, CREST-accredited cybersecurity company with a proud passion for delivering honest, high-quality security solutions. We specialise in DevSecOps and hands-on penetration testing, helping organisations build secure systems from the ground up. Our team is driven by curiosity, collaboration, and a commitment to doing great work that has a real impact. If you're passionate about security and want to work in a supportive, expert-led environment where your voice matters, Punk Security could be the place for you.
About the role
We're looking for a technical security expert with real-world hands-on penetration testing skills and a passion for tackling a wide range of security challenges. This is a chance to join a growing team, working alongside skilled and passionate security consultants.
Day-to-Day Responsibilities
* Lead and deliver infrastructure penetration tests, including broader vulnerability assessments and security audits as needed.
* Scope and plan engagements by understanding client requirements to ensure maximum value for the customer.
* Produce clear, professional reports tailored to both technical and non-technical audiences.
* Communicate effectively with clients throughout testing, offering an approachable, trusted point of contact.
* Deliver testing debriefs to clients following engagements, providing clear explanations to both technical and non-technical audiences.
* Stay current with emerging security threats, tools, and industry trends.
* There is potential for travel to client sites when necessary.
* Contribute to improving team methodologies, documentation, tools, and processes.
* Support the development of junior team members and work collaboratively with both the infrastructure and web application teams.
* Manage multiple client engagements effectively.
* Build strong, trusted relationships with clients as a reliable security partner.
* You will be required on-site in the Northallerton office once or twice a week, though this can potentially be reviewed for the right applicant.
Key Skills We're Looking For
Essential
* Certification as either CREST or Cyber Scheme Team Leader (not expired)
* A minimum of 2 years of hands-on experience delivering penetration tests.
* Strong technical understanding of network and cloud infrastructure security.
* Solid knowledge of common vulnerabilities and effective risk mitigation strategies.
* Proficiency with tools such as Metasploit, Nmap, BloodHound, Eyewitness, Burp Suite, Nessus, SMBeagle.
* A genuine passion for security.
* The ability to manage own workflow and timings in a fast-paced environment.
Desirable
* Certifications such as CRT, CHECK Team Member (CTM), CSTL, or OSCP
* Certified Cyber Essentials Plus Auditor
* Experience with scripting languages such as Python, Bash, or PowerShell
Benefits of working with us
* Work with a passionate, supportive, and security-driven team
* Flexible working options
* Opportunities for travel (examples of previous events include GISEC Dubai, conferences across the UK, BlackHat USA)
* Opportunity to grow your role in line with the team's rapid expansion
* Industry certifications
* Performance bonus scheme
* Private health cover (including dependents up to age 18)
* Office located in the market town of Northallerton - excellent transport links, free onsite parking and close to a number of gyms and restaurants
Punk Security is an equal opportunities employer
At Punk Security, we are committed to creating an inclusive, diverse, and respectful workplace where everyone has the opportunity to thrive. We welcome applications from people of all backgrounds and believe diverse perspectives help us deliver better outcomes for our clients, our team, and our industry. If you're passionate about cyber security, believe you meet the needs of the role and want to be part of a supportive, forward-thinking team, we encourage you to apply.
Punk Security is also a proud Silver Award holder of the Armed Forces Covenant. We recognise the valuable skills and qualities ex-forces personnel bring to cyber security and actively encourage applications from veterans, reservists, and service leavers.
Job Types: Full-time, Permanent
Pay: £40,000.00-£60,000.00 per year
Benefits:
* Casual dress
* Company events
* Employee mentoring programme
* Free parking
* On-site parking
* Paid volunteer time
* Private medical insurance
* Sick pay
* Transport links
* Work from home
Ability to commute/relocate:
* Northallerton North DL6 2NQ: reliably commute or plan to relocate before starting work (required)
Application question(s):
* Due to the nature of our projects, we require all applicants to have resided in the UK for at least 5 years and be eligible and willing to apply for security clearance.
Unfortunately, we cannot accept applications from candidates residing outside of the UK, or who do not meet this criterion.
Please confirm you have lived in the UK for the last 5 years and would be willing to undergo security clearance.
Experience:
* in-industry Penetration testing: 2 years (required)
Licence/Certification:
* CREST or Cyber Scheme Team Leader (required)
Work authorisation:
* United Kingdom (required)
Work Location: Hybrid remote in Northallerton North DL6 2NQ