UK Penetration Tester

This job has now expired please search on the home page to find live IT Jobs.

Are you looking for your next career move, a chance to become part of an established and sustained company, or just simply looking for a change, then this is a chance not to be missed!

Spring Technology is currently recruiting on behalf of one of our leading clients.

Based in Warwick the client is looking for a UK Penetration Tester on an initial 9 month contract.

The Client seeking an individual to be part of the team during this growth phase. The team will carry out penetration testing across a number of environments including web app, infrastructure and mobile platforms. In addition, you will participate in red team exercises based on Cyber Threat Intelligence, alongside the senior tester.

Essential

* Ideally we would like 3 years of hands on Penetration Testing of web applications and

infrastructure experience

* Experience of using Open Source and COTS for penetration testing which could include Nmap, Nessus, Metasploit, Kali Linux, Burp Suite Pro and similar

* OSINT and social engineering engagement experience

* Experience of Red Teaming

* Experience in common scripting languages such as Python, Ruby, LUA, Powershell or BASH

* Experience in at least one development language e.g. Java, C, C# or similar

* A good understanding of the OSI stack and the various protocols from layer 1 - 7 including SNMP, HTTP, VPN, 802.11.

* Good appreciation of other security roles such as intelligence, vulnerability and patch management, Risk, auditing, Awareness and Security Architecture

* A good understanding of Cloud based architectures including Azure, AWS and OpenStack

* Excellent communication skills with the ability to communicate at a technical and business user level

* Ability to incorporate testing results into a report.

* Ability to write statements of work.

* Ability to advise on remediation planning.

* Ability to peer review reporting

* Ability to manipulate data

* Ability to write methodology

* Knowledge of MITRE ATT&CK

Desirable

* Able to work in both waterfall and agile software delivery projects

* Good understanding of Industrial control systems including SCADA

* Good understanding of the Energy industry

* Computer Science, Mathematics, Engineering or Security related degree (or higher)

* OSCE

* CBEST framework experience

Formal certification in one of our level 1,2& 3 stage qualifications:

o Level 1 SANs GPEN, GWAP, OSCP, Pentest+, CAST

o Level 2 CSTA, AST, CPSA

o Level 3 CSTM, Tiger Scheme Qualified, CREST Registered Tester

If this is a role that you are interested in and you have the skills and experience needed for the role then please send your CV directly to [email protected] for consideration.

Spring acts as an employment agency for permanent recruitment and an employment business for the supply of temporary workers. The Spring Group UK is an Equal Opportunities Employer.

By applying for this role your details will be submitted to Spring. Our Candidate Privacy Information Statement explains how we will use your information - please copy and paste the following link in to your browser: www.spring.com/candidate-privacy-information-statement