The median Penetration Tester salary in United Kingdom is £110K in 2026, with a typical range from £100K to £118K. Year-on-year movement is still building as more matched salary data is published. London currently leads city pay at £60K. This is base salary for permanent employees. Contracting instead? See day rates for this role below.
What does A Penetration Tester do?
A Penetration Tester is responsible for conducting authorised penetration testing and ethical hacking against networks, web applications, and infrastructure to identify vulnerabilities before malicious actors can exploit them.
Day-to-day responsibilities
- Conducting network and web application penetration tests using OWASP methodologies
- Performing vulnerability assessments and exploiting weaknesses in controlled environments
- Writing detailed technical reports with findings and remediation recommendations
- Collaborating with development and infrastructure teams on remediation
- Researching attack techniques and tools
- Developing custom Python and PowerShell exploit scripts
Low demand+16% Web application penetration testing (OWASP)+15% Network penetration testing+13% Kali Linux and penetration testing tools