10/20/2026 updated
100 % available
Penetration Tester | CREST CPSA & OSCP | Web, API, Cloud, Infrastructure, Other | Fully Remote
Hull, United Kingdom
Only remote
BA (Hons) Media Production, Staffordshire University, 2011About me
CREST CPSA and OSCP-certified Penetration Tester with over 6 years of hands-on experience delivering high-impact security assessments for global clients across retail, e-commerce, finance, banking, and government sectors.
Application Programming Interfaces (APIs)Penetration TestingMicrosoft AzureBlack-Box TestingCertified Ethical HackerCloud TestingCompTIA Security+Ethical HackingVirtual Private Networks (VPN)Vulnerability ScanningOpen Source IntelligenceOffensive Security Certified ProfessionalOWASPSecurity TestingVulnerability Management
Web Application & API Penetration Testing
Extensive experience conducting black-box, grey-box, and white-box web application and API penetration tests for clients across retail, e-commerce, finance, banking, and government sectors, using tools such as Burp Suite, SQLMap, ffuf, and Nikto, following OWASP Top 10 and CVSS methodologies.
Internal & External Infrastructure Testing
Proven track record delivering internal and external infrastructure penetration testing engagements, leveraging tools including Nmap, BloodHound, CrackMapExec/netexec, Mimikatz, Responder, and Metasploit to identify and exploit critical vulnerabilities and support effective remediation.
Cloud Security Testing (Azure)
Specialisation in cloud security assessments, particularly on Microsoft Azure environments, assessing cloud configurations and identifying security weaknesses as part of comprehensive penetration testing engagements.
AI/LLM Security Testing
Specialised testing of AI and large language model (LLM) systems to identify security vulnerabilities and weaknesses unique to these emerging technologies.
Wireless & Firewall/VPN Testing
Conducting wireless network assessments, firewall/VPN, and MDM security configuration reviews.
Recon & OSINT
Proficient use of reconnaissance and open-source intelligence tools including Shodan, theHarvester, Amass, Subfinder, Maltego, and Spiderfoot to support pre-engagement intelligence gathering.
Vulnerability Management & Remediation Tracking
Creation of standardised reporting templates and centralised vulnerability databases to streamline remediation tracking, reduce reporting time, and improve consistency across security engagements.
Client Scoping, Reporting & Debriefing
Conducting pre-engagement scoping calls and post-assessment debriefs with technical and non-technical stakeholders, producing detailed technical reports with clear remediation guidance.
Methodologies & Frameworks
Application of industry-standard methodologies and frameworks including OWASP Top 10, CVSS, PCI DSS, and ISO 27001/27002 across all security assessment engagements.
Experience
Professional experience5 - 10 years
Freelancer since2023
Languages
EnglishNative speaker
Project history
Led external infrastructure and web application penetration testing engagements. Identified vulnerabilities and produced detailed technical reports with clear remediation guidance.
Led various penetration testing engagements for a global retail client, identifying critical vulnerabilities and supporting remediation to improve overall security posture. Conducted pre-engagement scoping calls and post-assessment debriefs with technical and non-technical stakeholders. Created standardised reporting templates and a centralised vulnerability database. Mentored and trained junior team members on testing methodologies, tool usage, and professional report writing.
Carried out web application and external infrastructure penetration tests for clients across various sectors. Identified vulnerabilities and produced detailed technical reports with clear remediation guidance.