Security Testing Consultant

BAE Systems.; City Of London; Hybrid; GBP 45,000 - 70,000; Full time

Job summary

A leading defense contractor is seeking a Security Testing Consultant to deliver end-to-end security testing engagements across various sectors. The ideal candidate will have experience in security testing, stakeholder engagement, and the ability to adapt to deadlines. A strong technical background in languages like Python and C/C++ is desired, along with a commitment to knowledge sharing within the team. This role may involve travel within the UK and globally.

Qualifications

• Experience delivering security testing projects with practical knowledge of testing tools.
• Understanding of client needs and stakeholder engagement.
• Ability to work to strict deadlines and prioritize work.
• Interest in adversary emulation or vulnerability discovery.

Responsibilities

• Deliver end-to-end security testing engagements.
• Perform various application and infrastructure testing.
• Produce detailed reports for technical and non-technical stakeholders.
• Develop improvements for security testing capabilities.

Skills

Security testing projects

Stakeholder engagement

Problem-solving

Technical skills

Adversary emulation

Flexibility to travel

Tools

Python

C/C++

Vulnerability testing tools

Job description

Location

Location(s): UK, Europe & Africa : UK : London || UK, Europe & Africa : UK : Frimley || UK, Europe & Africa : UK : Leeds

Security Testing Technical Specialist

BAE Systems Digital Intelligence is seeking a Security Testing Consultant to join our team supporting customers across National Security, Defence, and Critical Infrastructure sectors. This position is part of our global Cyber Technical Services team, which includes adjacent areas of Threat Intelligence and Incident Response.

Responsibilities

• Delivery of end-to-end security testing engagements, including scoping and client wash-up meetings.
• Performing application testing, web and mobile tests, infrastructure testing, objective based tests, and intelligence-led tests.
• Production of detailed reporting and presentations for both technical and non-technical stakeholders.
• Safe and responsible use of testing tools, ensuring controls are in place to limit risks during customer engagements.
• Developing improvements in terms of scripts, tools, or techniques to enhance the Security Testing team\'s capabilities.
• Knowledge sharing with colleagues in other teams, including Threat Intelligence, Incident Response, and the wider Security Consulting community.

Requirements

• Experience delivering security testing projects, ability to demonstrate comprehensive, practical knowledge of testing tools, techniques, and procedures.
• Understanding of client needs in terms of testing outcomes, stakeholder engagement, and risk mitigation.
• Self-starter with ability to identify problems early and develop solutions using own initiative.
• The ability to work to strict deadlines and prioritise work appropriately.
• Technical skills with an interest in one or more of the following: adversary emulation, vulnerability discovery, reverse-engineering, emerging technology.
• Flexibility and willingness to travel both within the UK and globally.
• Current CHECK Team Leader, Infrastructure, Applications or Both with a level of Chartership.

Desirable skills

• Experience in a high level scripting language such as Python, mid level language such as C/C++, or low level language such as ASM.
• Skills and experience in application, operating system, database management operation, development, or security management.
• Skills and experience in testing within Government, Telecommunications, Energy, or Financial Services sectors.
• Exploit development or other in depth vulnerability research experience.