Penetration Tester

Claranet; Greater London; On-site; GBP 45,000 - 65,000; Full time

Job summary

Claranet is seeking a Penetration Tester to deliver web and mobile application tests, infrastructure testing, and red-team related activities. You will engage with clients, publish advisories, and contribute to whitepapers while advancing your CREST qualifications where possible.

You will collaborate across Claranet units, support pre/post sales, and present findings clearly in written reports. Occasional after-hours testing and travel to onsite locations may be required.

Qualifications

• Experience performing web and mobile application testing and infrastructure testing.
• Ability to exploit vulnerabilities and provide remediation advice.
• Ability to write accurate technical reports and communicate findings clearly.
• Willing to travel and work onsite as required.

Responsibilities

• Undertaking web and mobile application testing and infrastructure testing engagements.
• Using the opportunities provided by the business to improve skills and capabilities into all areas of testing.
• Working with key clients providing bespoke consultancy, analysis and expertise.
• Collaborating with other Claranet Business Units on large client digital transformation projects.
• Assisting with pre/post sales activities as required.
• Communicating within Claranet and with clients, both orally and in writing.
• Developing and delivering webinar content.
• Delivering targeted research and development in line with direction of the business.
• Providing remediation advice.
• Producing accurate technical reports.

Skills

Penetration testing

Web/mobile testing

Report writing

Client communication

Independent work

Education

CREST CPSA/CRT/CCT

Tools

C

C++

C#

Java

Ruby

Python

Perl

Job description

As a Penetration Tester at Claranet, you will able to deliver you own web application tests and through training and partnering, you will be involved in a full range of testing work from mobile app and infrastructure testing to social engineering and Red Team exercises.

Key Responsibilities:

• Undertaking web and mobile application testing and infrastructure testing engagements
• Using the opportunities provided by the business to improve skills and capabilities into all areas of testing
• Working with key clients providing bespoke consultancy, analysis and expertise
• Collaborating with other Claranet Business Units on large client digital transformation projects
• Assisting with pre/post sales activities as required
• Encouraging a positive, proactive, collaborative and solution-oriented approach among colleagues
• Communicating within Claranet and with clients, both orally and in writing
• Contribute to the writing and publishing of whitepapers and advisories
• Developing and delivering webinar content
• Delivering targeted research and development in line with direction of the business
• If not achieved already, working towards CREST qualifications; CPSA, CRT and CCT
• Have a good understanding of web & mobile application and infrastructure testing and methodologies
• Able to manually and proficiently exploit web application and network infrastructure vulnerabilities
• Have a logical and time-conscious approach to report writing
• Have a working knowledge of common programming languages such as C, C++, C#, Java
• Have experience of at least one scripting language such as Ruby, Python or Perl
• Providing remediation advice
• Producing accurate technical reports
• Working under pressure of deadlines and structuring workload accordingly
• Problem-solving, helping others to understand complex ideas
• Client facing, able to confidently and professionally represent the company
• Must be self-motivated and able to work in an independent manner as well as part of a team
• Excellent written and oral communications skills
• Positive, collaborative and enthusiastic
• Conducting penetration testing work out of normal office hours on occasion
• Willing to travel to deliver onsite work as required
• Appetite to shadow, train and develop to improve capabilities into all areas of security testing

In Addition, The Following Are Highly Desirable:

• Security clearance (or eligibility for clearance)
• CTM or CTL status
• CISSP, CISA, CEH, OSCP or equivalent reputable information security certifications
• Familiarity with testing cloud environments