Join a Top 10 Consultancy role - only 2 years experience needed!

Job Purpose

Our rapidly growing Cyber practice has specialists in assessing our clients security posture by attacking their systems. With the permission of their owners we prod, poke, spear and crack systems to prepare our clients for when the real threats come knocking. We give them a view on how effective their current defences are.

This is an excellent opportunity for a highly motivated and determined Penetration Tester to continue their development and work on a range of exciting projects and support us as we expand our offering and become CHECK and CREST Star Accredited. As well as testing we ensures each consultant has a dedicated annual budget for development giving access to CREST exams, and many other training courses. There is also dedicated time to carry out research and assist with developing new testing methodologies and techniques.

Either way you'll need an enquiring mind, the tenacity to overcome technical challenges, and an ability to approach problems from different perspectives using unusual or non-conventional means, and being able to articulate your work to both technical and non-technical audiences.

Role & Responsibilities

• Performing a variety of security testing assignments, including red teaming, infrastructure and applications.
• Interface with clients to address concerns, issues or escalations; track and drive to closure any issues that impact the service and its value to clients.
• Develop comprehensive and accurate reports and presentations for both technical and executive audiences.
• Working with clients to develop appropriate remediation plans.
• Providing thought leadership and direction for the Cyber Security practice on malware, attack vectors and methods to protect against threats.
• Helping recruit, retain and develop the Ethical Hacking team by bringing superior leadership skills.
• Training and mentoring of graduate entry colleagues through the sharing of professional and technical skills and experience.
• Carry out research when not on client deliverable work that can be used to enhance our services to clients.
• Work with teams across the business, providing the latest technical knowledge to collaborate on interesting client projects.

Skills, Knowledge and Experience

The following qualifications are expected from potential applicants:

• Curiosity and a desire to learn and develop to become one of the best.
• Application and infrastructure penetration testing experience above and beyond running automated tools.
• A good understanding of Unix, Microsoft Windows and network security skills.
• Excellent written and communication skills in English.
• Ability to work both independently and collaboratively in a team.
• Developing applications in one or more of the following: C#, ASP, .NET, ObjectiveC, Go, or Java (J2EE).
• Any cyber/information security certification (e.g. CREST, TIGER, Cyber Scheme, OSCP, SANS, GIAC) or equivalent.
• A degree in a STEM related subject including computer security, computer science, or equivalent experience.
• Basic working knowledge of Azure AD, Office 365 and common cloud hosting platforms.

Advantageous:

• Mobile application and IoT penetration testing experience.
• Research and Development experience
• Threat Intelligence experience .
• Ability to work both independently and perform as a team member in a group environment.
• Red team operations and purple team delivery, including adversary emulation.