Senior Penetration Tester

RMT Accountants & Business Advisors Ltd; England; Sur place; GBP 85 000 - 110 000; Plein temps

Résumé du poste

Sumer Group, via its RMT Operations - IT, seeks an experienced Lead Penetration Tester to join its Cyber Security practice on client-site engagements. You will lead penetration tests, Cyber Essentials assessments, and security reviews for diverse environments.

With five-plus years in pen testing, you will mentor juniors, shape testing methodologies and deliver high-quality reports to stakeholders.

Qualifications

• Minimum five years' experience delivering penetration testing engagements.

Responsabilités

• Lead and deliver infrastructure, web application and cloud security penetration testing engagements.
• Conduct Cyber Essentials and Cyber Essentials Plus assessments.
• Deliver technical security reviews and vulnerability assessments.
• Produce high-quality technical and executive reports with clear remediation guidance.
• Scope, plan and manage penetration testing engagements.
• Mentor and support junior consultants to develop technical capability.
• Contribute to testing methodologies, tools and service offerings.
• Support pre-sales activities, proposals and client presentations when required.
• Maintain awareness of emerging threats, vulnerabilities and industry best practice.

Connaissances

Penetration testing

External/internal/web

Security assessments

Report writing

Stakeholder communication

Mentoring juniors

Formation

CREST CRT

OSCP

CSTM

CHECK Team Member

Outils

Burp Suite Professional

Nessus

Qualys

OpenVAS

Nmap

Metasploit

Kali Linux

Description du poste

Description

In 2023, RMT became part of Sumer Group - a collaboration of renowned regional accountancy practices with a shared vision to champion local small to medium-sized enterprises.

Department: Operations - IT

Location: Client Site

In 2023, RMT became part of Sumer Group - a collaboration of renowned regional accountancy practices with a shared vision to champion local small to medium-sized enterprises.

By bringing together the best in advisory & business services, Sumer Group retains the value that community-based practices offer and combines this with the scale, breadth of expertise and technologies that only a national organisation can muster. Through our unique approach, we believe we can make a real positive impact and achieve growth for our company, our colleagues and our clients. Together, we are about doing the right things, putting people first and delivering the best possible services to those who sit at the heart of our economy and communities.

We are seeking an experienced Lead Penetration Tester to join our growing Cyber Security practice. With a minimum of five years' experience delivering penetration testing and technical security assessments, you will play a key role in leading client engagements, developing our service offerings and mentoring junior consultants.

Working closely with the wider RMT Technology IT and Cyber team, you will deliver and oversee a broad range of services including penetration testing, Cyber Essentials Plus assessments, technical information security reviews and security assessments aligned to recognised frameworks such as NIST, ISO 27001 and PCI-DSS.

As a senior member of the team, you will provide technical leadership, assure the quality of assessment outputs, contribute to service development and support client-facing activities. You will maintain awareness of emerging threats, vulnerabilities and best practice to ensure our clients receive practical, risk-based security advice.

Key Responsibilities

• Lead and deliver infrastructure, web application and cloud security penetration testing engagements.
• Conduct Cyber Essentials and Cyber Essentials Plus assessments.
• Deliver technical security reviews and vulnerability assessments.
• Produce high-quality technical and executive reports with clear remediation guidance.
• Scope, plan and manage penetration testing engagements.
• Mentor and support junior consultants to develop technical capability.
• Contribute to the development of testing methodologies, tools and service offerings.
• Support pre-sales activities, proposals and client presentations where required.
• Maintain awareness of emerging threats, vulnerabilities and industry best practice.

Skills, Knowledge & Expertise

Essential

• Minimum five years' experience delivering penetration testing engagements.
• Strong experience conducting external, internal and web application penetration testing.
• Experience conducting technical security reviews and vulnerability assessments.
• Proficiency with tools such as Burp Suite Professional, Nessus, Qualys, OpenVAS, Nmap, Metasploit, Kali Linux and related security testing tools.
• Strong understanding of common attack techniques, vulnerability assessment methodologies and remediation approaches.
• Excellent report-writing and communication skills.
• Ability to explain technical findings to both technical and non-technical stakeholders.
• Strong client relationship and stakeholder management skills.
• Industry-recognised certifications such as CREST CRT, OSCP, CSTM, CHECK Team Member or equivalent.

Desirable

• Experience delivering Cyber Essentials Plus assessments.
• Experience with cloud security assessments across Microsoft Azure and Microsoft 365 environments.
• Exposure to SIEM, EDR and security monitoring platforms.
• Understanding of frameworks including NIST CSF, ISO 27001, PCI-DSS and CIS Controls.
• Experience leading teams or mentoring junior consultants.

Belong @ Sumer

At Sumer, we know everyone's journey is different. That’s why we’re committed to fairness, removing barriers and giving people the support they need to do their best work. If you need any support during the hiring process, just let us know.

Our values represent what matters most to us and guide how we work every day:

• We Shine Together
• We Do the Right Thing
• We Make It Count

We know diverse teams make us stronger. That’s why we’re creating an inclusive workplace where everyone belongs and differences are valued and celebrated.