£85,000 Per year
Undetermined
Hybrid
Malvern
Summary: The Lead Penetration Tester will play a pivotal role in a global Software, Systems & Engineering company within the Defence Sector, leading a testing team in both CHECK and non-CHECK security testing. This position involves a mix of hands-on testing, leadership, and client engagement, with a focus on enhancing the company's security capabilities. The role is hybrid, requiring four days on-site and one day of remote work each week. Candidates must be sole UK nationals eligible for SC clearance.
Key Responsibilities:
- Undertaking CHECK and non-CHECK security testing
- Travelling to client sites to carry out security testing engagements
- Performing research and development of new attack techniques
- Developing junior colleagues and fostering collaboration within the team
- Proposing mitigations for identified vulnerabilities and writing reports
- Scoping, estimating, and bidding customer engagements as required
Key Skills:
- Ability to document, create, and sign off test reports
- Strong understanding of Active Directory, infrastructure, cloud security, and common operating systems
- Previous experience delivering security testing services as a qualified tester (CREST or Cyber Scheme)
- NCSC CHECK Team Leader status in infrastructure (CCT-INF or CSTL-INF)
- Strong understanding of relevant laws and legal frameworks for security testing
Salary (Rate): £85,000 yearly
City: Malvern
Country: United Kingdom
Working Arrangements: hybrid
IR35 Status: undetermined
Seniority Level: undetermined
Industry: IT
We are working with a global Software, Systems & Engineering company in the Defence Sector, supporting them with appointing a Lead Penetration Tester who will be working as part of a testing team undertaking CHECK and non-CHECK security testing works for customers. Day-to-day, you’ll undertake a variety of work as part of a testing team acting in a leadership capacity as an infrastructure CHECK team leader.
Salary: £75k- £85k per annum + benefits
Location: Malvern or Bristol- hybrid (4 days per week onsite; 1-day WFH)
Working hours: 37 per week
Duration: 12 months
Requirements: sole Uk nationals eligible for SC (dual nationals cannot apply)
Your responsibilities will include:
- Undertaking CHECK and non-CHECK security testing
- Travelling to client sites to carry out security testing engagements
- Performing research and development of new attack techniques that support and enhance the Company’s security testing capability
- Developing junior colleagues and operating with integrity and collaboration within the team
- Proposing mitigations for identified vulnerabilities and writing reports of security testing engagements for customers including signing off reports
- Scoping, estimating and bidding customer engagements as required and directed
Essential experience:
- The ability to be able to document, create and sign off test reports
- A Strong understanding of Active Directory, infrastructure, cloud security and common operating systems
- Previous experience delivering security testing services as a qualified (CREST or Cyber Scheme) tester
- NCSC CHECK Team Leader status in infrastructure (CCT-INF or CSTL-INF)
- A strong understanding of relevant laws and legal frameworks for security testing
Essential qualifications:
- CCT-INF or CSTL-INF
Benefits
- Matched contribution pension scheme, with life assurance
- Generous holiday allowance, with the option to purchase additional days
- Options to join Health Cash Plan, Private Medical Insurance and Dental Insurance
- Employee discount portal: Personal Accident Insurance, Travel Insurance, Restaurants, Cinema Tickets and much more
- We are proud to support the Armed Forces community by honouring the Armed Forces Covenant and maintaining our Gold Award standard in the Defence Employer Recognition Scheme
- Volunteering Opportunities - helping charities and local community