Penetration Tester
Confirmed on the employer's own hiring board on Oct 10, 2026. First seen by Alion on Oct 9, 2026. BAE Systems scores B on the Alion truth index.
Job Title: Penetration Tester
Location: Preston or Frimley, Hybrid
We offer a range of hybrid and flexible working arrangements - please speakto your recruiter about the options for this particular role
Salary: Circa £55,000 per annum dependant on skills and experience
Who we are:
Join BAE Systems and you’ll be part of something bigger. As a valued member of our global colleague network, you’ll bring your unique skills and perspectives to help pioneer progress and protect what matters most. You’ll be trusted to play your part in delivering the advanced, technology-led defence, aerospace and security solutions of tomorrow, shaping a safer future, for all of us.
From the depths of the ocean, to the far reaches of space, there’s no limit to where a career at BAE Systems could take you.
Job Description:
This role will sit under the ActiveDefence, Red Team who are responsible for delivering the following capabilities in support of Cyber Operations: Red Teaming, Purple Teaming, Security Critical ControlTesting, Threat Advisory Simulation and Penetration Testing.Conducting both a combination of Infrastructure and Web Application Penetration testing across BAE System.
Core duties:
- Develop comprehensive and accurate reports for internal audiences, ensuring the grading of vulnerabilities within the context of BAE Systems, and passing onto resolver groups for resolution
- Ensuring resolution is being conducted in line with documented process
- Conduct simulated attacks and vulnerability assessments to support Red and Purple Team operations, identifying security weaknesses and enhancing defensivecapabilities
- Contributes to the development of ActiveDefence, Red Team capabilities through people, process, and technology where appropriate
- Maintains a broad understanding of the external threat environment and attacker tactics, techniques, and procedures
Essential Skills:
- Demonstrable experience in penetration testing
- Proficient in penetration testing tools such as Burp Suite, Nmap, Metasploit etc
- Either Crest CRT or Cyber Scheme Team Member (CSTM) qualifications
- The ability to clearly communication both verbally and written
The Cyber Operations Team
Cyber Operations is responsible for protecting BAE Systems from Cyber Attacks by various threat actors. Not only do we protect BAE Systems and its employees, indirectly we protect those who protect us - who serve in our military and rely on the products and services we create. Across Threat Intelligence, Threat Detection, Incident Response and ActiveDefence we work to evolve cyber operations as a world class capability.
Why BAE Systems?
Here you’ll build a career with purpose and limitless possibilities. With lifelong learning and meaningful work, this is a place where you can grow your career with confidenceand be empowered to be your best. You’ll be recognised for your contribution and enjoy rewards tailored to what’s most important to you and your family, support for your financial and personal wellbeing, as well as a balanced lifestyle. In an environment embracing sustainable ways of working and with a strongsense of shared purpose, our supportive culture is a place you can feel you belong and proud of the difference you make.
A place where everyone can thrive:
We’re committed to building an inclusive workplace where everyone feels valued and supported. We know that a diversity of backgrounds, perspectives and experiences strengthens our teams and is vital to the work we do.
Please be aware that many roles at BAE Systems are subject to both security and export controlrestrictions. These restrictions mean that factors such as your nationality, any nationalities you may have previously held, and your place of birth can restrict the rolesyou are eligible to perform within the organisation. All applicantsmustas a minimum achieve Baseline Personnel Security Standard. Many roles also require higher levels of National Security Vetting where applicantsmusttypically have 5 to 10 years of continuous residency in the UK depending on the vetting level required for the role, to allow for meaningful security vetting checks.
Closing Date: 23rd October 2026
We reserve the right to close this vacancy early if we receive sufficient applications for the role. Therefore, if you are interested, please submit your application as early as possible.