Security Testing Consultant

BAE Systems Applied Intelligence is seeking a Security Testing Consultant to join our team supporting customers across commercial and government sectors. This position is part of our global Cyber Technical Services team, which includes adjacent areas of Threat Intelligence and Incident Response.

Responsibilities:

Delivery of end-to-end security testing engagements, including scoping and client wash-up meetings.

Performing application testing, web and mobile tests, infrastructure testing, objective based tests, intelligence-led tests.

Production of detailed reporting and presentations for both technical and non-technical stakeholders.

Safe and responsible use of testing tools, ensuring controls are in place to limit risks during customer engagements.

Developing improvements in terms of scripts, tools, or techniques to enhance the Security Testing team's capabilities.

Knowledge sharing with colleagues in other teams, such as Threat Intelligence, Incident Response, and the wider Security Consulting community.

Skills/Experience

Required:

Experience in delivery of security testing projects, ability to demonstrate comprehensive, practical knowledge of testing tools, techniques, and procedures.

Gained or are close to attaining Crest Registered Tester (CRT) / Crest Practitioner Security Analyst (CPSA)

Understanding of client needs in terms of testing outcomes, stakeholder engagement, and risk mitigation.

Self-starter with ability to identify problems early and come up with solutions using own initiative.

The ability to work to strict deadlines and prioritise work appropriately.

Technical skills with an interest in one or more of the following: adversary emulation, vulnerability discovery, reverse-engineering, emerging technology.

Flexibility and willingness to travel both within the UK and globally.

Desirable (one or more of the following):

Experience in a high level scripting language such as Python, a mid level language such as C/C++, or low level language such as ASM

Offensive Security Certified Professional (OSCP) / ZeroPoint Security Certified Red Team Operator (CRTO)

Skills and experience in application, operating system, database management operation, development, or security management.

Skills and experience in testing within Government, Telecommunications, Energy, or Financial Services sector.

Exploit development or other in depth vulnerability research experience.

Life at BAE Systems Digital Intelligence

We are embracing Hybrid Working. This means you and your colleagues may be working in different locations, such as from home, another BAE Systems office or client site, some or all of the time, and work might be going on at different times of the day. By embracing technology, we can interact, collaborate and create together, even when we're working remotely from one another. Hybrid Working allows for increased flexibility in when and where we work, helping us to balance our work and personal life more effectively, and enhance well-being.

Diversity and inclusion are integral to the success of BAE Systems Digital Intelligence. We are proud to have an organisational culture where employees with varying perspectives, skills, life experiences and backgrounds - the best and brightest minds - can work together to achieve excellence and realise individual and organisational potential.

About BAE Systems Digital Intelligence

BAE Systems Digital Intelligence is home to 4,800 digital, cyber and intelligence experts. We work collaboratively across 16 countries to collect, connect and understand complex data, so that governments, nation states, armed forces and commercial businesses can unlock digital advantage in the most demanding environments.

Launched in 2022, Digital Intelligence is part of BAE Systems, and has a rich heritage in helping to defend nations and businesses around the world from advanced threats.