Job Description

Penetration Tester

Role Purpose 

The Penetration Tester role is part of the Penetration Testing Practice  which provides high quality security services, such as Penetration Testing, Security Consulting, Training, security assessments and audits for our new and existing client base. The role will require a broad range of security and technical skills and the ability to exercise excellent judgement, act on priorities, communicate and liaise effectively with clients and co-workers while demonstrating exceptional time and task management. As a Penetration Tester, you will work in all areas of penetration testing and utilise your experience in social engineering, network, web assessments, wireless assessments, reverse engineering, red/blue teaming and so on to have a positive impact on our clients and the company. 

What attracts testers to our team, in terms of day to day is our team, our flexible working and the ability to work in all areas of Penetration Testing, testers are not locked into one realm like at other testing firms (but usually testers specialise in one or two areas). 

Experience & Knowledge 

1. Proven 2+ years of commercial penetration testing experience, including but not limited to Web Apps, Wireless, Network, AD, AAD & ADCS, Social Engineering, and Cloud. 
2. Certifications and experience with post-exploitation activities, such as exploiting local vulnerabilities, performing lateral movement & privilege escalation activities, and exploiting vulnerabilities in AD, ADCS, wireless & wired networks.   
3. Hold certifications such as CRTP, OSCP, CREST (Highly desirable), PNPT &/or CARTP. 
4. You will be a person that loves continuously learning, and utilises platforms such as HTB, TryHackMe, CTFs and Bug Bounty. 
5. Broad range of fundamental IT/Networking skills. 
6. Able to obtain and hold relevant police security clearance. 
7. Experience in presenting to stakeholders of all levels and tying findings back to business risk.