Senior Penetration Tester

Description

As a crucial part of our cyber security team, the Senior Pen Tester will proactively identify and exploit vulnerabilities within Enterprise and Critical National Infrastructure (CNI) systems to strengthen the resilience and security of gas transmission nationwide.

• Analyse network configurations and security architectures to identify and address vulnerabilities that could be exploited by attackers.
• Keep cybersecurity training and knowledge current by monitoring the latest security threats and vulnerabilities.
• Collaborate with IT and development teams to facilitate the implementation of security measures and remediation of identified vulnerabilities.
• Ensure that penetration testing activities align with industry regulations, compliance standards, and organizational security policies.
• Scope and perform penetration testing and vulnerability research of complex proprietary software and hardware.
• Write clear and concise penetration testing reports detailing findings and recommendations
• Contribute to tool development, both software and hardware, as well as processes and infrastructure, to advance the capabilities of the practice.
• Provide recommendations for remediation of identified vulnerabilities.
• Some travel (approximately once a month, to operational sites)
• Identify and assess vulnerabilities in systems and applications.

Requirements

Senior Pen Tester

The successful candidate must be able to achieve and maintain Security Check (SC) security clearance for this role.

• Ideally relevant experience in both IT and OT/ICS/CNI cyber security environments.
• Experience with cloud and container technologies (e.g. AWS, Azure, Kubernetes).
• Knowledge of web application security testing
• Strong presenting and report writing skills, with the ability to succinctly convey technical topic to a non-technical audience.
• Experience with a variety of security tools and techniques and the ability to write scripts to automate tasks.
• Strong attention to detail.
• Proven penetration testing / ethical hacking experience.
• A recognised current penetration testing certification such as CREST or OSCP.
• Intimate knowledge of CIS controls, NIST CSF, etc.
• Strong knowledge of various operating systems and networks (especially Linux, Windows, and Active Directory).

Benefits

£65,000-£70,000 + bens

Warwick based, hybrid working

• Financial protection with 10x salary death in service and financial support if you're unable to work due to long term illness or injury,
• Salary £65,000-£70,000 dependant on experience
• Employee assistance programme offering free confidential professional counselling 24/7,
• Annual performance bonus of up to 6%,
• Career progression, professional training, courses & certifications,
• Financial support to cover the cost of professional membership subscriptions relevant to your role.
• 26 days' holiday, plus 8 statutory days - plus option to buy 5 additional days,
• Double-match pension - every £1 you put in we add £2 (max company contribution 12%),
• Free parking.
• Free gym and exercise classes onsite at our Warwick office,
• Opt-In flexible benefit scheme, including salary sacrifice private healthcare, dental insurance, technology plans, car plan and more,
• Hybrid working
• Excellent family friendly provisions - maternity/paternity/adoption/surrogacy/ shared parental leave,
• Canteen and coffee shop onsite,

Training + Development

Interview process

Visa Sponsorship

Security clearance