Web Application Penetration Tester

Waterstons; North East; On-site; GBP 40,000 - 80,000; Full time

Job summary

An established industry player is seeking a technical security expert to join their dynamic Cyber team. This role involves leading penetration tests, conducting vulnerability assessments, and ensuring compliance for national and international clients. With a focus on blending technology and strategy, the company offers a supportive environment that values hard work and innovation. Enjoy perks like unlimited holidays, flexible working, and private medical healthcare while making a significant impact on the security landscape. If you're ready to take on new challenges and grow your career, this opportunity is perfect for you.

Benefits

Unlimited Holiday Allowance

Flexible Working

Private Medical Healthcare

EV Car Scheme

Room for Growth

Enhanced Family Policies

Company Sick Pay

Life Assurance

Employee Assistance Programme

Dental Scheme

Qualifications

• Experience in penetration testing of web applications and APIs.
• Knowledge of security vulnerabilities and risk mitigation techniques.
• Understanding of network and cloud infrastructure security.

Responsibilities

• Lead web application penetration testing and participate in security audits.
• Write clear reports for technical and non-technical stakeholders.
• Maintain knowledge of emerging security threats and trends.

Skills

Penetration Testing

Network Security

Cloud Infrastructure Security

Risk Mitigation Techniques

Scripting Languages (Python, Bash, PowerShell)

Education

CRT

CHECK Team Member (CTM)

OSCP

Tools

Metasploit

Nmap

Burp Suite

OWASP Zap

BloodHound

Eyewitness

NIKTO

Job description

A Bit About Us

Our main focus at Waterstons is to help our customers build a better business by blending technology and strategy. We have offices in the UK and Australia. Our team also work across the globe to provide unique business solutions that directly adds value to our clients’ businesses.

Our clients tell us our people are our greatest strength, and who are we to disagree? We believe in our colleagues, and we make it a priority to reward their hard work. Unlimited holidays, flexible working, and private medical healthcare. These are only some of the amazing things we offer.

Did we also mention that we’ve been awarded Gold Investors in People for a fourth consecutive time?

About The Role

A technical security expert with the ability to conduct penetration tests and the appetite to deliver a wide spectrum of interesting security-related work, seeking a new challenge to join our growing Cyber team to help shape the company’s security and compliance services nationwide for a leading IT and business consultancy, supporting national and international clients.

Day To Day Responsibilities

• Leading and delivering web application penetration testing, with an expectation to participate in infrastructure penetration testing, vulnerability assessments, and security audits across various business functions as needed
• Lead technical scoping activities and understand a client’s requirements to ensure they get the most out of their engagement with Waterstons
• Write clear, concise, and professional reports that are understandable to both technical and non-technical stakeholders.
• Maintain up-to-date knowledge of emerging security threats and trends.
• Being available to travel to client sites when required
• Improving areas of work, such as methodologies, tools and processes used by the team
• Helping upskill junior members and the wider cyber team
• Ability to manage multiple client engagements concurrently
• Act as a trusted partner to all of our clients

Essential Skills

• Proven experience in performing penetration tests across a broad range of systems, more specifically web applications and APIs
• Wider technical knowledge of network and cloud infrastructure security
• Understanding of security vulnerabilities and risk mitigation techniques
• Extensive tooling experience in Metasploit, Nmap, BloodHound, Eyewitness, Burp Suite, NIKTO, OWASP Zap, etc.

Nice to Have

• Qualifications such as: CRT, CHECK Team Member (CTM) or CSTL, OSCP, CSTL
• Be a Cyber Essentials Plus Auditor
• Experience with scripting languages such as Python, Bash, or PowerShell
• Experience with Mobile Application Penetration Testing.

Waterstons Perks

• As well as offering a competitive salary, we have an attractive benefits package including:
• A healthy work-life balance with flexible and agile working being the norm
• Unlimited holiday allowance
• EV car scheme (salary sacrifice)
• Rest days
• Room to grow with supported development opportunities and sponsored training
• Enhanced family policies
• If you ever need it, company sick pay and life assurance
• Supported wellbeing with regular initiatives, an employee assistance programme and private medical insurance
• Flexible benefits such as a dental scheme, eye care support, season ticket loan and cycle to work

We require a security check to be carried out on all colleagues due to the nature of some of our clients’ industries.

Waterstons is committed to creating an inclusive, understanding, and flexible place to work. We value diversity, equality, and inclusion and encourage everyone to 'bring their whole selves' to work. We believe that a company that embraces and values diversity creates an environment where everyone from any background can do their best work and feel valued and appreciated.

Privacy Statement

Waterstons is gathering the data in this application for the purpose of recruitment and to ensure we can contact you regarding this application. For more information on how we handle your personal data, see our Privacy Notice.