Security Testing Consultant

Job Description

A Security testing consultant would be Embedded within the CLIENT team and would work at the direction of the Client Security Testing Capability lead.

• This consultant will be able to perform internal led security testing and hold relevant equivalent experience and qualifications
• Contribute to the development of Security Principles, Policies and Technical Standards
• Engage with CLIENT project teams as required to identify, estimate, and complete agreed security testing activities.
• Help build team capabilities, and establish testing methodologies
• Creation of required process, playbooks and document sets to support Security Testing capability
• For each test, the testers will produce a formal technical proposal and report utilising CLIENT standard templates
• Provide testing guidance and advice to projects
• Review scopes and where CHECK testing required manage engagement with 3rd party pen testers
• Create scope/proposals/reports for internal testing work
• Aid with the development of Security Testing Strategy and production of outputs
• Develop Secure by design framework for security testing, documenting testing approaches against control sets
• Scope, conduct and support security assessments, pen testing and other non-functional security testing, appropriately recording and sharing any findings.
• Provide Vulnerability management and continual security compliance expertise across on premise and cloud-based solutions.
• Work collaboratively with project managers and programme leads to provide subject matter expertise on a range of security testing requirements
• Act as escalation point to deal with security testing related incidents
• Lead assessments of threats and vulnerabilities determine deviations from acceptable/defined baselines.
• Communicate threat, vulnerabilities, and risk information to stakeholders in a clear and concise manner.
• Assist in the development and delivery of Security testing documentation sets.
• Research and assess new threats and security/vulnerability alerts, and recommend remedial actions

Skills

Security Testing

Test Strategy