Job Description
Penetration Testers are required for a long-term client and global financial services firm. The role will be centred around conducting penetration testing for applications.
The Secure Application Tester will:

• Secure Application Testing of Tribe Sprint Release items.
• Plan and conduct tests and record vulnerabilities accordingly.
• Work with asset owners and IT Teams to plan and drive vulnerability remediation.
• Write high quality reports.
• Create actionable metrics and reports for executive and technical leadership.
• Work collaboratively with the wider Information Security teams.
• Assist the team in building new as well as maintaining current assets

Essential Experience /Skills:

• 1 years' experience of working in a DevOps / Agile environment.
• 1 years' experience of software testing.
• 1 years' experience of automation - eg Azure DevOps
• Excellent Java programming skills.
• Report writing skills.
• Familiarity with the OWASP top ten web application risks.
• Understanding of the Cyber Kill Chain, MITRE ATT&CK and other information security defence and intelligence frameworks.
• Familiarity with at least one cloud platform such as Microsoft Azure, Amazon AWS, or Google GCP.
• Knowledge of APIs and standard formats such as REST.
• Knowledge of infrastructure as code, such as Terraform.
• One or more of the following:

Highly Desirable Skills:

• ISTQB/ISEB Test Foundation Certificate.
• ISTQB/ISEB Information Security Management Principles.
• Recognised programming qualification (Java)
• AZ-400: Designing and Implementing Microsoft DevOps Solutions

As an ideal candidate, you will have an industry certification such as CEH, CPT, CEPT, and OSCE. You will have expert knowledge of Information Security Penetration Testing. You will also have a proven track record of delivery in a similar role.