Penetration Testing Expert

We're looking for a seasoned Security Specialist to join our team. This is an exciting opportunity to leverage your expertise in penetration testing to identify and mitigate security vulnerabilities within our applications, networks, and IT systems.

This role requires you to conduct thorough assessments on web applications, mobile applications, network infrastructures, cloud environments, and endpoints to identify security weaknesses and vulnerabilities. You'll also simulate real-world cyberattacks to evaluate the effectiveness of our security measures and ensure that our systems are resilient against real-world threats.

• Perform thorough penetration testing to identify security weaknesses and vulnerabilities.
• Conduct assessments on web applications, mobile applications, network infrastructures, cloud environments, and endpoints.
• Simulate real-world cyberattacks to evaluate the effectiveness of security measures.
• Identify and exploit vulnerabilities in internal and external systems.
• Provide risk analysis of identified vulnerabilities based on severity, exploitability, and potential business impact.
• Prioritize findings based on risk and collaborate with technical teams to address critical issues first.
• Document and report all findings, including vulnerabilities, exploits, and recommendations for remediation.
• Deliver executive-level summaries to communicate potential business impact of security risks.
• Work closely with development, security, and IT teams to ensure vulnerabilities are remediated effectively and timely.
• Provide guidance and support for implementation of security best practices within development processes and system configurations.
• Participate in security incident response for pipeline and application-level security events, performing root cause analysis and implementing long-term remediation.

• 10+ years of experience in Information Technology, minimum 10 years' experience in Security
• 5+ years of pentesting experience Certifications:
• Certified Ethical Hacker (CEH): Industry-standard certification focused on ethical hacking and penetration testing techniques.
• Offensive Security Certified Professional (OSCP): Highly regarded certification for penetration testers, demonstrating practical skills in offensive security.
• GIAC Penetration Tester (GPEN): A certification focused on penetration testing and ethical hacking methodologies.
• Certified Cloud Security Professional (CCSP): Relevant if working with cloud environments (AWS, Azure, GCP). Additional Certifications (Optional but Beneficial):
  • CREST Registered Penetration Tester (CRT): A certification specifically for penetration testers, focusing on best practices.
• SANS GPEN or GWAPT: For deeper knowledge in web application penetration testing.
• Certified Red Team Professional (CRTP): Focuses on advanced tactics used by attackers and security testing.
• Business and commercial acumen - strong business experience with a focus on customer satisfaction.
• Vendor and partner management experience, including professional services and technology vendors.

• A competitive salary and range of benefits
• Flexible working/ work from home options
• Discounts on health insurance, travel, car, home, contents, and pet insurance products as well as Bupa services such as Dental and Optical
• A 'People First' wellness program – SMILE. Provides a range of services such as health coaches, annual skin checks and flu vaccinations, assistance with nutrition, mental and general well-being guides, and product discounts.

• A safe and inclusive workplace
• The opportunity to work with a talented team of professionals
• A chance to make a real difference in the security landscape