Penetration Tester

Responsibilities

• Perform formal and comprehensive application, infrastructure and other penetration testing assessments where appropriate and required
• Provide well-written, concise, technical and non-technical reports in English
• Perform vulnerability assessments and provide findings with remediation actions
• Support with various client pre-engagement interactions, including scoping activities and proposal drafting to ensure that client needs are met
• Manage and deliver penetration testing project activities within strict deadlines
• Support the QA process to ensure high quality client reports are delivered in accordance with applicable Service Level Agreement (SLA)
• Any other appropriate job duties in line with the associated skill and experience of the post holder

Skills and experience required

• Proven industry experience in application and infrastructure penetration testing
• CTM Status
• Deep knowledge of assessing both Windows and Linux environments, including strong knowledge of Active Directory and wireless technologies
• Ability in preparing and launching social engineering campaigns (both phishing and vishing)
• Strong understanding of OWASP, PTES and other penetration testing methodologies
• Knowledge of how modern web apps are designed, developed and deployed across different platforms
• Ability to program or script in your preferred language
• Relevant degree in Computer Science, Ethical Hacking, Engineering or other relevant subject
• Relevant security qualifications (such as OSCP, CEH, GPEN)
• Good knowledge and understanding of network and OS principles
• Good knowledge of various operating systems
• Good knowledge of virtualisation

Nice to have