A penetration tester, sometimes known as an ethical hacker, is a type of cyber security professional who is hired to test the security of computer systems, networks, and web applications. Their main job is to identify vulnerabilities before malicious hackers can exploit them. Penetration testers use a variety of tools and techniques to simulate real-world attacks, document their findings, and recommend improvements to enhance security. The role requires strong technical skills, attention to detail, and the ability to think creatively to find weaknesses others might miss. Penetration testers often work for specialised security firms, large organisations, or as independent consultants.
Penetration testers in the UK typically earn between £35,000 and £70,000 per year, depending on experience and location.
The demand for cyber security professionals, including penetration testers, is growing rapidly, with over 100,000 cyber security job openings in the UK in 2023.
Most roles require a degree in computer science or a related field, or relevant experience and professional certifications such as CREST, OSCP, or CISSP.
Focuses on identifying and fixing vulnerabilities in websites and online services to help keep user data safe.
Specialises in testing and securing computer networks, looking for weaknesses that could let attackers in.
Works on checking the safety of cloud-based systems and applications, ensuring information stored online is protected.
Learn the basics of computers, networks, and operating systems.
Start with GCSE or A-level Computer Science, or equivalent BTEC courses, to build foundational understanding. Focus on topics like networking, operating systems, and programming. Online tutorials and beginner courses in IT can also help you grasp key concepts.
Gain a solid understanding of cybersecurity principles and common threats.
Explore free online resources, such as Cyber Discovery or the National Cyber Security Centre's guides. Consider enrolling in an introductory course on platforms like FutureLearn or Coursera to learn about malware, phishing, and firewalls.
Use legal environments to practise penetration testing skills.
Try 'capture the flag' (CTF) challenges and online labs like Hack The Box, TryHackMe, or OverTheWire. These platforms provide safe, legal ways to test your abilities in realistic scenarios. Document your progress and learn from community discussions.
Seek internships, placements, or voluntary roles in IT security.
Look for opportunities in local businesses, charities, or tech companies. Even a general IT support role can provide valuable exposure to security practices. Ask to shadow professionals or participate in security-related projects where possible.
Study for a degree in Cybersecurity, Computer Science, or a related field, or consider a higher-level apprenticeship.
Many universities in the UK offer specialised cybersecurity degrees. Alternatively, degree apprenticeships combine study with paid work and are a great way to gain practical skills. Check UCAS or the National Careers Service for available options.
Earn recognised certifications such as CompTIA Security Plus or Certified Ethical Hacker.
Certifications demonstrate your skills to employers and are often required for entry-level positions. Start with beginner certifications, then progress to more advanced ones like Offensive Security Certified Professional OSCP as your experience grows.
Join cybersecurity communities and attend industry events.
Participate in forums like UK Cyber Security Forum or attend conferences such as CyberUK. Networking with professionals can open job opportunities and keep you informed about the latest trends and threats.
Start your job search with a strong CV and portfolio.
Highlight your technical skills, certifications, and hands-on experience in your CV. Include examples from CTFs or open source contributions. Apply to specialist security consultancies, government agencies, or large organisations with in-house security teams.
Please note that this may not be a comprehensive list of available apprenticeships. To view a more complete collection, visit the Find an apprenticeship service.
Click on any card to be redirected to their vacancy page.
This page showcases various career options and the pathways to reach them. Each career listed here shares transferable skills and knowledge, making it easier for individuals to transition between them.
Your current career is highlighted to help you see how it fits into the broader landscape of potential career choices. By clicking on any career, you can learn more about it, including the training and education required to pursue it.
Remember, progressing in your career often involves further learning and training. This page provides insights into future career options as well as those that can lead up to your current one.
These career progression decisions are informed by comparing the skills and knowledge needed for different occupations, along with data on how people move between them. Explore the possibilities and discover the exciting journey ahead in your career!
A Penetration Tester and a Computer Games Tester both focus on identifying vulnerabilities or issues within a system through testing. The primary goal in each role is to find weaknesses—whether in software security or game functionality—to ensure the product is safe, reliable, and enjoyable, requiring similar analytical and technical skills.
You can get into this job through:
You could do a foundation degree, higher national diploma or degree in:
You'll usually need:
You could take a college course, which may help you to find a job as a junior tester.
Courses include:
Entry requirements for these courses vary.
You could apply to do a Software Tester Level 4 Higher Apprenticeship.
This usually takes around 2 years to complete as a mix of learning on the job and study.
You'll usually need:
You could contact games companies about part-time or short-term work experience opportunities.
You'll need good technical and problem solving skills and an in-depth understanding of different game platforms and quality assurance processes.
Some game companies release test versions of games for the public to try and to report back on.
You might also go to gaming events where you could:
You can get details about careers in gaming from ScreenSkills and Into Games.
You can also find out more about working in the creative sector from Discover Creative Careers.
Explore other careers or use our AI to discover personalised paths based on your interests.
Address
Developing Experts Limited
Exchange Street Buildings
35-37 Exchange Street
Norwich
NR2 1DP
UK
Phone
01603 273515
Email
[email protected]
Copyright 2025 Developing Experts, All rights reserved.
Unlock expert-designed lessons, resources, and assessments tailored for educators. No credit card required.
Claim Your Free Trial →
