Penetration Testing Specialist

Cyber Security training courses; United Kingdom; Hybrid; GBP 71,000 - 82,000; Full time

Benefits offered by this job

Hybrid working

Possible bonus

Pension match

Parental leave pay

Job summary

Cyber Security training courses is seeking a Penetration Testing Specialist. This permanent role offers £71k–£82k and hybrid working in South Wales.

You will plan, perform and coordinate internal and external penetration tests, and report findings with clear remediation guidance. You must demonstrate strong pentesting methods, OT security testing experience, and CREST/ CHECK certification, with the ability to gain UK Security Clearance.

Qualifications

• Proven experience delivering infrastructure and application penetration tests.
• Strong knowledge of OT testing and OT security assurance.
• Understanding attacker TTPs and vulnerability assessment.
• Excellent communication and interpersonal skills.
• Ability to obtain UK Security Clearance.

Responsibilities

• Define and manage the penetration testing schedule.
• Conduct internal penetration testing of applications and systems
• Manage external vendors providing penetration services and arrange and schedule their work.
• Proactively research vulnerabilities in external and internal-facing systems and infrastructure (IT and OT)
• Social engineering
• Proactively research internal and external information leakage that may assist malicious actors in preparing for or executing an attack
• Prepare detailed reporting on vulnerabilities and the remedial actions recommended
• Accurately quantify discovered vulnerabilities in risk terms.

Skills

Penetration testing

OT security testing

Security risk assessment

Communication skills

UK Security Clearance

Education

CREST / CHECK certification

Tools

Penetration testing tools

Job description

Penetration Testing Specialist

Permanent - £71k - £82k + strong benefits

Location: Hybrid - South Wales

Your new company:

The role responsibilities:

This is an interesting time to join the company. Lots of investment into their IT, OT, and Cyber Security functions over the last few years, with ongoing investment and growth happening. This is a key role. They're looking for someone who's inquisitive, experienced, and willing to safely get access into almost anything. Key parts of the role:

• Define and manage the penetration testing schedule.
• Conduct internal penetration testing of applications and systems
• Manage external vendors providing penetration services and arrange and schedule their work.
• Proactively research vulnerabilities in external and internal-facing systems and infrastructure (IT and OT)
• Social engineering
• Proactively research internal and external information leakage that may assist malicious actors in preparing for or executing an attack
• Prepare detailed reporting on vulnerabilities and the remedial actions recommended
• Accurately quantify discovered vulnerabilities in risk terms.

You will need:

• Strong understanding of penetration testing principles, methodologies and tooling with proven experience of delivering infrastructure and application penetration tests safely and efficiently
• Strong understanding of safe approaches required for OT testing and proven experience of OT security assurance testing
• Strong understanding of attacker TTPs & vulnerability assessment
• Strong understanding of security risk assessment and risk management concepts and approaches
• Ability to work on your own initiative and to think "outside the box"
• Experience with operational technology in the utilities sector or other industrial CNI environments will be highly advantageous
• Excellent communication and interpersonal skills.
• Ability to obtain UK Security Clearance
• CREST / CHECK certification (essential)

What you'll get in return:

• Salary of between £71k-£82k
• Hybrid working 2/3 days in South Wales per week
• Possible bonus
• 5% pension contribution from you, the company pays 10%
• Enhanced pay for parental leave
• And more!

#4817782 - Daryl Angel