Lead Penetration Tester

Techniche Global Ltd; Gloucester; Hybrid; GBP 75,000 - 85,000; Full time

Job summary

A global Software and Engineering company in the Defence Sector is seeking a Lead Penetration Tester for a hybrid role in the United Kingdom. Responsibilities include undertaking security testing, developing team members, and documenting test reports. Ideal candidates will have relevant qualifications, including NCSC CHECK Team Leader status, and a strong background in security testing. This position offers a competitive salary of £75k-£85k per annum plus benefits, with options for additional holidays and health plans.

Benefits

Matched contribution pension scheme

Generous holiday allowance

Health Cash Plan options

Employee discount portal

Volunteering Opportunities

Qualifications

• Must be a sole UK national eligible for SC clearance.
• Strong understanding of infrastructure and security.

Responsibilities

• Undertake CHECK and non-CHECK security testing.
• Travel to client sites for security testing engagements.
• Document, create, and sign off test reports.
• Develop junior colleagues and collaborate within the team.
• Propose mitigations for identified vulnerabilities.
• Scope, estimate, and bid customer engagements.

Skills

Documentation of test reports

Understanding of Active Directory

Cloud security expertise

Knowledge of operating systems

Security Testing Services

NCSC CHECK Team Leader status

Understanding of laws for security testing

Education

CCT-INF or CSTL-INF

Job description

We are working with a global Software, Systems & Engineering company in the Defence Sector, supporting them with appointing a Lead Penetration Tester who will be working as part of a testing team undertaking CHECK and non-CHECK security testing works for customers. Day-to-day, you ll undertake a variety of work as part of a testing team acting in a leadership capacity as an infrastructure CHECK team leader.

Salary: £75k- £85k per annum + benefits

Location: Malvern or Bristol - hybrid (4 days per week onsite; 1-day WFH)

Working hours: 37 per week

Duration: 12 months

Requirements

sole UK nationals eligible for SC (dual nationals cannot apply)

Your responsibilities will include

• Undertaking CHECK and non-CHECK security testing
• Travelling to client sites to carry out security testing engagements
• Performing research and development of new attack techniques that support and enhance the Company s security testing capability
• Developing junior colleagues and operating with integrity and collaboration within the team
• Proposing mitigations for identified vulnerabilities and writing reports of security testing engagements for customers including signing off reports
• Scoping, estimating and bidding customer engagements as required and directed

Essential experience

• The ability to be able to document, create and sign off test reports
• A Strong understanding of Active Directory, infrastructure, cloud security and common operating systems
• Previous experience delivering security testing services as a qualified (CREST or Cyber Scheme) tester
• NCSC CHECK Team Leader status in infrastructure (CCT-INF or CSTL-INF)
• A strong understanding of relevant laws and legal frameworks for security testing

Essential qualifications

• CCT-INF or CSTL-INF

Benefits

• Matched contribution pension scheme, with life assurance
• Generous holiday allowance, with the option to purchase additional days
• Options to join Health Cash Plan, Private Medical Insurance and Dental Insurance
• Employee discount portal: Personal Accident Insurance, Travel Insurance, Restaurants, Cinema Tickets and much more
• We are proud to support the Armed Forces community by honouring the Armed Forces Covenant and maintaining our Gold Award standard in the Defence Employer Recognition Scheme
• Volunteering Opportunities - helping charities and local community