Penetration tester salary UK 2026: £65,000 median for ethical hackers
By TalentDock Editorial Team · Updated 27 September 2026 · 6 min read
Penetration tester salary ranges
| Percentile | Salary | Indicative profile |
|---|---|---|
| 10th | £45,000 | Junior tester, eJPT or CPSA level |
| 25th | £50,000 | Tester with OSCP or CREST CRT |
| Median | £65,000 | Experienced consultant across web and infrastructure |
| 75th | £80,000 | Senior tester, CHECK Team Member |
| 90th | £90,000 | CHECK Team Leader, red team or principal |
Ethical hacker is not usually a separate job title in UK ads; the work and pay are the same as penetration testing. Red team roles sit at the upper end.
Why CREST, CHECK and clearance affect pay
| Requirement | Share of ads |
|---|---|
| CREST certified | 37% |
| Security cleared (any level) | 37% |
| CHECK Team Member | 25% |
| SC cleared | 24% |
| OSCP | 22% |
| CHECK Team Leader | 15% |
CREST and NCSC CHECK qualifications let testers work on accredited engagements, and clearance opens government and defence work, so these roles pay more and are harder to fill. Commercial in-house testing roles are less likely to require either.
Pen tester salary by region
| Location | Median |
|---|---|
| Remote (work from home) | £76,000 |
| South East | £67,500 |
| London | £65,000 |
| UK excluding London | £52,500 |
| South West | £50,000 |
| Midlands | £50,000 |
| North of England | £45,000 |
Regional samples are small, so treat them as directional.
Employer cost vs an offshore tester
| Option | Monthly cost |
|---|---|
| UK tester at £65,000 (salary + employer NICs + minimum pension) | ≈ £6,275 |
| External pen test engagement | Priced per test, typically by tester-day |
| TalentDock offshore penetration tester (all-in) | From £2,295 |
A dedicated tester suits continuous, authorised testing between accredited assessments; it does not replace a CREST or CHECK test where one is required.
Frequently asked questions
How much does a penetration tester earn in the UK?
The median advertised salary was £65,000 in the six months to 26 September 2026.
What does an ethical hacker earn in the UK?
The same as a penetration tester: a £65,000 median, with most roles between £50,000 and £80,000.
What does a junior penetration tester earn?
The bottom tenth of ads paid about £45,000 or less.
Does CREST certification increase salary?
It is requested in about 37% of ads and opens accredited work, which is typically better paid.
Can offshore testers do CHECK work?
No. CHECK and cleared government work requires UK-based, cleared staff.
IT Jobs Watch, penetration tester permanent job statistics, six months to 26 September 2026.
Related guides
Ready to build your offshore team?
Tell us the role, hours and tools. We send a vetted shortlist, then employ, equip and manage your hire. One all-in monthly fee from £1,195, no recruitment fee.
Offshore teams for UK businesses, managed end to end. Dedicated talent in Sri Lanka & the Philippines, trained to your standards.
© 2026 TalentDock. Built for UK businesses. Delivered from Sri Lanka & the Philippines.
All rights reserved.