Consultant Penetration Tester

NTT; London; On-site; GBP 70,000 - 90,000; Full time

Job summary

A leading global company is seeking an Offensive Security Consultant in London with expertise in penetration testing and threat intelligence. The successful candidate will lead complex security assessments, provide actionable recommendations, and enhance client security postures. This role requires excellent communication and organizational skills, as well as relevant certifications and experience in both IT and OT environments.

Benefits

Flexible Work Options

Ongoing Learning Opportunities

Wellbeing Benefits

Qualifications

• 5+ years of experience in penetration testing with a focus on adversarial tactics.
• Proficiency in using penetration testing and threat intelligence tools.
• Strong organizational and communication skills to manage complex engagements.

Responsibilities

• Lead and manage complex penetration testing engagements.
• Develop test plans based on threat intelligence analysis.
• Produce detailed reports with findings and remediation recommendations.

Skills

Penetration Testing

Threat Intelligence

Communication

Project Management

Security Monitoring

Education

Current CREST CRT Certification

Additional Certifications (CISM, CISSP, ECSA, CREST CCT)

Tools

Penetration Testing Tools

Breach Attack Simulation Tools

Vulnerability Management Tools

Job description

We are seeking a highly skilled and experienced Offensive Security Consultant with a strong focus on threat intelligence and attack methods. The ideal candidate will manage and conduct advanced penetration testing engagements, leveraging threat intelligence to simulate real-world attacks across various environments, including OT, IT, web applications, cloud infrastructure, and APIs. This role requires a deep understanding of adversarial approaches, excellent communication skills, and the ability to provide strategic, actionable recommendations to enhance our clients' security posture.

Responsibilities:

• Lead and manage complex penetration testing engagements, applying a threat intelligence-led approach.
• Execute advanced tests across environments such as applications, infrastructure, web, APIs, O365, Azure, AWS, and OT, informed by current threat landscapes.
• Develop and maintain test and execution plans based on threat intelligence analysis.
• Identify and prioritize assets based on criticality and exposure to threats.
• Plan and schedule testing based on threat assessments and client needs.
• Produce detailed reports with technical findings, business impact, and remediation recommendations.
• Communicate complex security concepts and threat insights to diverse audiences.
• Collaborate with client teams to improve security protocols and remediate vulnerabilities.
• Track remediation progress and update stakeholders regularly.
• Conduct security research and contribute to technical content on emerging threats and attack techniques.
• Enhance security monitoring capabilities by providing insights into offensive techniques.
• Drive patching efforts prioritizing threats and potential exploits.

Experience and Skills:

• At least 5 years in penetration testing with emphasis on adversarial tactics and threat intelligence.
• Understanding of OT and IT assets, technologies, and security best practices within the threat landscape.
• Knowledge of network protocols, cryptography, vulnerabilities, and attack vectors.
• Proficiency with penetration testing tools and threat intelligence analysis methodologies.
• Experience in executing complex, threat-informed penetration tests.
• Excellent communication skills for technical and non-technical audiences.
• Strong organizational skills to manage multiple engagements.
• Current CREST CRT certification or higher is required.
• Eligibility for SC Clearance.
• Experience with Breach Attack Simulation tools, Vulnerability Management, and cloud environments (AWS, Azure, GCP).
• Knowledge of Risk Management frameworks and ISO 27001.
• Additional certifications such as CISM, CISSP, ECSA, CREST CCT are advantageous.

About Us:

We’re a global company empowering local teams with exciting work that impacts the world. Our portfolio includes consulting, applications, cloud, and infrastructure services. We foster an inclusive environment that values mutual respect, accountability, and continuous learning, supporting diversity through various Inclusion Networks.

What We Offer:

We provide benefits supporting your wellbeing, ongoing learning opportunities, and flexible work options. More about NTT DATA UK & Ireland can be found on our website. We are committed to diversity and inclusion, guaranteeing interviews for applicants with disabilities who meet minimum role requirements, and providing reasonable adjustments during recruitment. Join us in building a diverse and empowered team.