Cyber Security Analyst

Experis UK; Warton; Hybrid; GBP 60,000 - 90,000; Full time

Job summary

Experis UK is seeking a security testing professional to support Red Team exercises and continuous validation of security controls across UK-wide environments. You will perform penetration testing on infrastructure and web applications, utilizing Kali and Parrot OS, and produce actionable reports for resolver groups to drive remediation.

The role requires broad knowledge across firewalls, IDS/IPS, AD, endpoints, Windows and Linux, with the ability to brief stakeholders on findings and risk, and

Qualifications

• Experience conducting security testing and validation of controls.
• Ability to develop comprehensive testing reports for internal audiences.
• Experience with infrastructure and web application security testing.
• Understanding of attacker tactics, techniques, and procedures.

Responsibilities

• Support Red Team activities including exercises and assessments.
• Develop accurate vulnerability reports and coordinate resolutions.
• Identify misconfigurations and security weaknesses for escalation.
• Contribute to Red Team service development with process and tech improvements.
• Deliver security testing briefings when required.

Skills

Red Team Exercises

Penetration Testing

Security testing methodologies

Threat awareness

Tools

Kali

Parrot OS

Open-source testing tools

Job description

Mostly Remote Based role (2 Days a month onsite) - Various UK Wide Locations

The Role:

You will be responsible for the continual testing and validation of security controls and SOC detection capabilities, providing assurance that defensive measures remain effective against evolving threats.

• Support the Red Team with the following activities; Red Team Exercises, Critical Control Testing, Cyber Hygiene Assessments and Penetration Testing
• Develop comprehensive and accurate reports for internal audiences, ensuring the grading of vulnerabilities within the context of the client, and passing onto resolver groups for resolution. Ensures resolution is being conducted in line with documented process
• Identify security weaknesses and misconfigurations to ensure they are raised with the appropriate resolver groups
• Contributes to the development of Red Team services through people, process, and technology where appropriate
• Maintains a broad understanding of the external threat environment and attacker tactics, techniques, and procedure
• Proven experience in both infrastructure and web application security testing utilising proven testing methodologies
• Demonstrable experience with open-source security testing tools such as Kali and Parrot operating systems
• An understanding of software engineering principles
• Confident in delivering comprehensive and accurate security testing reports for internal audiences and delivering briefings on the outcome if required
• Broad and detailed experience of technologies including but not limited to firewalls, IDS/IPS, Active Directory, endpoint protection, Windows Server, Linux, TCP/IP, Networks, Cloud, CDN's and Vulnerability Management