At a Glance
- Tasks: Lead high-quality penetration tests and deliver impactful security assessments for clients.
- Company: Join Bridewell, a forward-thinking company committed to creating a safe digital world.
- Benefits: Enjoy 25 days holiday, flexible working, private healthcare, and personal development opportunities.
- Other info: Embrace a culture of inclusivity and continuous growth with exciting career prospects.
- Why this job: Make a real difference in cybersecurity while advancing your skills in a supportive environment.
- Qualifications: Must have strong penetration testing experience and relevant certifications like CCT or CTL.
The predicted salary is between 56700 - 69300 £ per year.
Description
As a result of growth, we are looking for an experienced Senior Penetration Tester with solid experience of infrastructure and web application testing to deliver testing engagements on a range of key client work.
This is an excellent opportunity for a highly motivated and determined Penetration Tester to continue their development and work on a range of exciting projects. As well as delivering testing, Bridewell ensures each consultant has access to a dedicated annual team budget for personal development. This gives access to CREST, Cyber Scheme exams, online platforms such as Hack the Box, TSCM and TryHackMe, and many other training courses. There is also dedicated time to carry out research and assist with developing new testing methodologies and techniques.
Requirements
What you’ll be doing
- Deliver and lead high quality offensive security assessments (web application, API and infrastructure), meeting client expectations
- Get involved in and lead on team assessments as required
- Produce written and verbal reports to clients to an excellent standard.
- Support the sales team with pre-sales and assist with technical input into tenders and proposals
- Carry out research and service development when not on client deliverable work that can be used to enhance our services to clients
- Perform report QA.
- Work with teams across the business, providing the latest technical knowledge to collaborate on interesting client projects.
You will need to have experience in:
- Strong experience in a client-facing role. Customer oriented and able to communicate with all levels of an organisation with appropriate technical content.
- Highly proficient in performing a variety of penetration tests such as infrastructure, web application API testing and device configuration reviews, etc.
- CREST Certified Tester (CCT) or Cyber Scheme Team Leader (CSTM) with infrastructure specialism - mandatory
- NCSC CHECK Team Leader (CTL) with at least Principal Cyber Security Professional (PriCSP) title - mandatory.
- Self-motivated and able to work independently and as part of a larger team
- Produce high-quality technical and executive reports tailored to both technical and non-technical audiences.
- Holds or is able and willing to obtain a minimum of DV clearance
Desirable
- OSCP, OSCE, CRTO
- Knowledge of cloud security (AWS, Azure, GCP)
- Experience in LLM/AI testing
- Experience in Adversary Simulation / Red Teaming
- Proficiency in coding or scripting (Python, Powershell, Bash)
Benefits
Our vision is to create a safe, inclusive digital world where people and organisations can thrive. Our values of Do the Right Thing, One Team and Above and Beyond emphasises the importance of the part we play in society, and our commitment to our people and clients. Our story to-date has been phenomenal, but success doesn’t end here and as we continue to grow and scale, we want to keep the same culture, passion and commitment to high quality that has enabled us to get this far. Bridewell will provide a great career opportunity with continual development as well as the following:
- 25 Days Holiday - Plus buy and sell options
- Flexible Working (around core office hours)
- Company Pension
- Employee Shareholder Scheme
- Personal Day & Birthday Off - After 1 year of service
- Family Leave – After 1 year of service
- Enhanced Maternity based on length of service
- Life Assurance
- Electric Vehicle Scheme & Cycle to Work Scheme
- Private Healthcare (incl. Gym discounts and vison care)
Location: Bridewell operates a hybrid and flexible working policy, however you will be required to travel to different sites on occasion, in particular our London office.
Note: To be eligible for this job you must either hold UK Security Clearance or be eligible and willing to go through this security clearance.
Bridewell values diversity and is an equal opportunity employer. We are dedicated to fostering an inclusive environment where all employees feel respected, supported, and empowered to do their best work. If you require any reasonable adjustments throughout the interview process please let us know.
Senior Penetration Tester - CTL in London employer: Bridewell
Bridewell is an exceptional employer that prioritises employee well-being and professional development, offering a hybrid working policy that promotes work-life balance. With a strong focus on performance incentives, private healthcare, and a dedicated training budget, employees are empowered to grow their skills while contributing to meaningful client engagements in the dynamic field of data privacy. Join us in a collaborative culture where your expertise will help shape the future of cyber security compliance.
StudySmarter Expert Advice🤫
We think this is how you could land Senior Penetration Tester - CTL in London
✨Get Involved in the Cybersecurity Community
Diving into the cybersecurity community is key for landing that full-time gig. Join forums like Reddit's r/cybersecurity or attend local meetups to connect with industry veterans and other job seekers. Networking is everything in this field—don’t just be a passive lurker!
✨Show Off Your Skills with Capture the Flag Competitions
Participate in Capture the Flag (CTF) competitions; these are not just a fun way to boost your skills but also a chance to showcase your talent to potential employers. Many companies, including Bridewell, love seeing candidates who actively engage in these challenges.
✨Tailor Your Online Presence
Make sure your LinkedIn and any professional profiles reflect your cybersecurity expertise. Share your projects, whether they’re personal or from a previous role, to catch the eye of hiring managers. This is how they’ll find your passion and commitment to the field!
✨Apply Directly Through Bridewell
Don’t forget to head straight to our website and check out any openings for cybersecurity roles at Bridewell. Applying directly can sometimes give you an edge, especially if you can mention that you've been following our work or engaging in the community.
We think you need these skills to ace Senior Penetration Tester - CTL in London
Some tips for your application 🫡
Show off your technical skills:In cybersecurity, it's crucial to highlight your technical prowess. Make sure your CV showcases specific skills like network security, penetration testing, or threat analysis. If you have relevant certifications (like CEH or CISSP), pop those on the front page to grab attention!
Tailor your portfolio for the role:Even for a full-time role, a portfolio can set you apart. If you've worked on any cybersecurity projects—be it CTF challenges, security assessments, or research papers—include these in your application. This demonstrates not just your skills, but also your hands-on experience!
Use real-world examples:When writing your cover letter, don’t just stick to your qualifications. Share real-world examples of how you’ve tackled security issues or vulnerabilities. This gives the hiring team at Bridewell insight into your practical problem-solving abilities and makes your application memorable.
Demonstrate your passion for cybersecurity:Cybersecurity is an ever-evolving field, so show us that you’re always learning! Mention any recent courses, webinars, or industry events you’ve attended. This not only exhibits your enthusiasm but also signals to Bridewell that you’re committed to staying ahead in the game.
How to prepare for a job interview at Bridewell
✨Sharpen Your Technical Skills
For a role in cybersecurity, it’s essential to be up-to-date with the latest tools and techniques. Brush up on your knowledge of firewalls, intrusion detection systems, and vulnerability assessment tools. Be ready to discuss specific scenarios where you’ve applied these skills, as hands-on experience can really set us apart in interviews.
✨Prepare for Scenario-Based Questions
Expect the interviewers at Bridewell to throw in some hypothetical situations to see how you’d handle them. Think about common security breaches or incidents and be prepared to explain how you would respond. This not only shows your problem-solving skills but also your understanding of real-world cybersecurity challenges.
✨Highlight Your Certifications
Certifications like CompTIA Security+, CISSP, or CEH can give you a significant edge in a full-time role in cybersecurity. Make sure to mention these during your interview and be prepared to discuss what you learned through those certifications and how they relate to the position at Bridewell.
✨Show Your Passion for Cybersecurity
Since you’re going for a full-time gig, showing genuine enthusiasm for the field can make all the difference. Share any personal projects, blogs, or communities you’re part of that relate to cybersecurity. This not only showcases your passion but also your commitment to staying engaged in this ever-evolving field.
