Penetration Tester

Location: Remote (UK only, with occasional travel to client sites where appropriate)
Salary: Competitive BoE
Job Type: Full-time
This role is UK-based only, applicants must have full right to work in the UK. We are unable to provide visa sponsorship currently.
About Us
AVORD expanding the penetration testing team to deliver high-quality security assessments. As a growing team, this is an exciting opportunity to make a real impact, help shape our service offerings and contribute to the development of a dynamic offensive security practice.
AVORD operates as a remote-first company, offering flexibility in where you work while maintaining a collaborative team culture. Travel to client sites may be required when necessary if remote solutions are not possible.
What We're Looking For
We're looking for penetration testers with solid hands-on experience who are ready to tackle more complex assessments. You'll bring real technical competency across our testing domains, work with proven methodologies and tooling, and continue building your expertise alongside a skilled and passionate team.
Role Overview
As a Penetration Tester, you will be responsible for conducting security assessments across various domains, including web applications, networks, APIs, cloud environments, and internal systems. You will also have opportunities to contribute to internal research, tooling, and process improvements, helping to build the foundations of our growing team.
Key Responsibilities
• Perform penetration tests across web applications, infrastructure, APIs, cloud environments, and mobile applications.
• Conduct security assessments and configuration reviews of workstations, servers, VPNs, and cloud/on-premises environments, identifying misconfigurations, vulnerabilities, and security gaps.
• Identify security vulnerabilities and provide clear and actionable remediation guidance to clients.
• Work collaboratively to help shape testing methodologies, reporting structures, and internal tooling.
• Stay updated on emerging threats, vulnerabilities, and offensive security techniques.
• Produce high-quality, clear, and concise reports for technical and non-technical audiences.
• Engage with clients to discuss findings, mitigation strategies, and security improvements.
Essential Skills & Experience:
• Passion for security and offensive testing.
• Strong understanding of offensive security principles.
• Hands-on experience with penetration testing tools such as Burp Suite, Nmap, Wireshark, scripting (Python, Bash, or PowerShell), etc.
• Ability to write clear, concise reports and communicate findings effectively.
• Comfortable working in a remote-first environment with strong self-motivation and teamwork skills.
Desirable Skills:
• Experience with cloud security testing (AWS, Azure, GCP).
• Experience with mobile application security testing.
• Offensive related industry certifications preferred (OSCP, OSWE, OSWA, CPTS, OSEP, CPSA, CRT/CSTM, CCT/CSTL).
• Proven hands-on experience on Hack the Box, TryHackMe, or similar platforms.
• Strong Active Directory security knowledge, including enumeration, attack techniques, and defensive evasion in internal network environments.
• Experience with internal infrastructure testing, including lateral movement, privilege escalation, and identifying security weaknesses within corporate networks.
Why Join AVORD?
• Work in a growing team, where your contributions will directly shape its direction.
• Engage in diverse and challenging security assessments across industries.
• Support for training, certifications, and professional development at all levels.
• Opportunities to contribute to research, tooling, and service development.
• Real career progression opportunities as the team expands.
How to Apply
If you’re passionate about penetration testing and want to be part of a team where you can truly make a difference, we’d love to hear from you.
Send your CV to Jac.julian@avord.com

Work arrangement
Yes