Penetration Testing Lead

Motor Insurers' Bureau (MIB); Milton Keynes; On-site; GBP 55,000 - 75,000; Full time

Benefits offered by this job

Contributory pension scheme

Life Assurance

Employee Incentive Scheme

Sports and Social Club

24/7 Employee Assistance Programme

Free online health tools

Enhanced family leave

Volunteer day and charity funding

Job summary

Motor Insurers' Bureau (MIB) is seeking a Cyber Security Test Lead based in Milton Keynes. The role involves leading security testing activities, developing strategies for vulnerability assessments, and mentoring team members. The ideal candidate has significant cyber security experience, knowledge of security testing tools, and relevant certifications such as OSCP or CISSP. Offering hybrid work, company perks include a pension scheme, life assurance, and wellness support.

Qualifications

• Significant experience in cyber security, with lead or senior role.
• Experience managing penetration tests and security audits.
• Knowledge of security testing tools and web application vulnerabilities.

Responsibilities

• Lead security testing activities across the organization.
• Develop a comprehensive security testing strategy.
• Mentor team members in information security.

Skills

Cyber security experience

Penetration testing

Vulnerability assessments

Security audits

Knowledge of OWASP Top 10

Communication skills

Leadership skills

Cloud security testing

Scripting/programming (Python, Ruby)

Threat modelling

Education

Relevant certifications (OSCP, CEH, CISSP)

Tools

Burp Suite

Nmap

Metasploit

Kali Linux

Job description

At MIB our people are passionate about making roads safer by getting uninsured and hit-and-run drivers off our roads. Working in partnership with the Police, Insurers and Government our collective aim is to make it a thing of the past but, until that’s accomplished, we’re here to compensate victims quickly, fairly and compassionately.

Last year we helped more than 34,000 people struck by uninsured and hit-and-run drivers and paid over £400 million in compensation to support victims rebuild their lives.

About Our Role

• As Cyber Security Test Lead, you will be responsible for leading and managing all security testing activities across the organisation. You will develop and implement a comprehensive security testing strategy, oversee penetration testing and vulnerability assessments, and ensure that security findings are managed and remediated effectively. You will provide technical direction, collaborate with cross-functional teams, and mentor team members to foster their professional growth and technical skills. You will also act as the primary point of contact between MIB and third parties who provide testing capability. Your work will help ensure that MIB systems and applications remain secure and resilient against evolving threats.

Key Responsibilities

Security Testing Leadership

• Lead and manage security testing activities, including (but not limited to) network, application, cloud, and internal security testing.
• Develop and implement a comprehensive security testing strategy and roadmap ensuring full coverage of the MIB estate.
• Provide technical guidance and support on complex security vulnerabilities and remediation efforts.
• Mentor and manage other members in the information security team involved in testing, supporting their professional development.

Testing Vulnerability Management

• Manage security findings from penetration tests, vulnerability scans, and internal security assessments, working with development teams to ensure timely remediation.
• Provide technical guidance and analysis of complex vulnerabilities as well as proposed remediation efforts.
• Ensure reliable validation of remediation actions.

Collaboration and Integration of Testing

• Collaborate with development, product, infrastructure, change and project teams to integrate security testing into the Secure Software Development Life Cycle (SSDLC).
• Prepare and present detailed reporting on security testing findings and the overall security posture to both technical and non-technical stakeholders.

Business Continuity and Continual Improvement

• Assist with business continuity testing, ensuring security controls and processes support organisational resilience.
• Stay up to date with the latest security threats, trends, and testing methodologies.
• Foster a culture of continuous improvement within the security testing team.

Skills and Experience

• Significant experience in cyber security, with at least experience in a lead or senior role.
• Proven experience in managing and conducting penetration tests, vulnerability assessments, internal security testing, and security audits.
• In-depth knowledge of security testing tools such as Burp Suite, Nmap, Metasploit, and Kali Linux.
• Strong understanding of common web application vulnerabilities (OWASP Top 10) and network protocols.
• Excellent communication and leadership skills, with the ability to articulate complex security concepts to diverse audiences.
• Relevant certifications such as OSCP, CEH, or CISSP.
• Experience with cloud security testing (AWS, Azure, GCP).
• Familiarity with DevSecOps principles and practices.
• Scripting or programming experience in Python, Ruby, or similar languages.
• Experience with threat modelling.
• Experience assisting with business continuity testing and planning.

Job Title: Cyber Security Testing Lead

Working Hours: 35

Working Pattern: 9am - 5pm, Monday - Friday

Office Location: Milton Keynes

Job Type: Permanent

IT kit supplied to you

£320 (before tax) start up allowance

Hybrid working (2 days in the office per week)

Other Benefits include:

• Contributory Group Stakeholder Personal pension scheme
• Life Assurance
• Employee Incentive Scheme
• Sports and Social Club
• 24/7 Employee Assistance Programme
• Free access to online tools to support mental and physical health
• Enhanced maternity, paternity and adoption leave
• 1 volunteer day each year and charity matched funding scheme

We believe in a workplace where everyone can be themselves. Through our different ideas, personalities and experiences, we redefine what is possible every day. And regardless of your colour, age, race, gender, sexual orientation or anything else you consider yourself to be, there is a place for you at MIB. A place where you can bring your best self to work every day.

So, if you think big, love a challenge and want to make a difference to people’s lives, we want to hear from you.

We aim to keep this advert open until the closing date, but on occasion we may close it early if application numbers are high