At a Glance
- Tasks: Lead and deliver end-to-end penetration testing engagements across diverse environments.
- Company: Join a large international organisation with a strong focus on cyber security.
- Benefits: Competitive daily rate, remote work, and opportunities for professional growth.
- Other info: Collaborate with international teams and contribute to a mature security programme.
- Why this job: Shape the future of security while tackling real-world challenges in a dynamic team.
- Qualifications: Strong experience in penetration testing and excellent communication skills.
The predicted salary is between 54000 - 66000 £ per year.
- PENETRATION TESTER
- REMOTE (OCCASIONAL TRAVEL TO OFFICE IN BATTERSEA)
- OUTSIDE IR35
- DECEMBER START
This is an opportunity to join a growing in-house cyber security function that is continuing to expand its penetration testing capability across multiple business units.
You'll take ownership of end-to-end testing engagements, working independently while helping shape the future direction of a mature and evolving security programme.
The Company
They are a large international organisation with a diverse portfolio of consumer-focused businesses operating across multiple regions.
Over recent years, they have invested significantly in building internal cyber security capabilities, creating a consultancy-style function that supports a broad range of technology environments.
Their security team works closely with stakeholders across Europe and Asia, delivering high-quality testing and security assurance services.
The Role and Deliverables
- Lead and deliver end-to-end infrastructure and network penetration testing engagements.
- Perform in-depth assessments of enterprise network architectures and identify security weaknesses beyond standard vulnerability scanning.
- Conduct security testing across network boundaries and complex infrastructure environments.
- Engage directly with stakeholders to scope testing activities and communicate findings.
- Produce clear technical reports and present remediation recommendations to both technical and non-technical audiences.
- Contribute to the ongoing development and maturity of the internal security testing capability.
- Your Skills & Experience
- Strong experience delivering infrastructure and network penetration testing engagements.
- Proven capability in assessing complex network architectures and identifying exploitable weaknesses.
- Experience managing the full penetration testing lifecycle independently, from scoping through to reporting.
- Ability to communicate technical findings and recommendations clearly to a range of stakeholders.
- Strong client-facing and report-writing skills.
- Experience working across large, complex environments with multiple stakeholders.
- Exposure to Operational Technology (OT) security testing would be advantageous.
- Experience within telecommunications, retail, critical infrastructure, or similarly complex environments would be beneficial.
- Comfortable collaborating with international teams across different regions and time zones.
- Desired Skills and Experience
Infrastructure & Network Penetration Testing, Network Architecture Assessments, End-to-End Penetration Testing, Vulnerability Identification & Exploitation, Security Reporting, Stakeholder Management, Technical Presentations, Enterprise Network Security, Risk Assessment, Consultancy-Style Security Testing, OT Security (desirable), Telecommunications/Retail Security (desirable).
#J-18808-Ljbffr
Penetration Tester in London employer: Harnham
As a leading specialist data consultancy, we pride ourselves on fostering a collaborative and innovative work culture that empowers our Analytics Engineering Consultants to thrive. With a focus on professional development, we offer extensive growth opportunities and the chance to work on high-impact projects across diverse industries, all while enjoying the flexibility of remote work in the UK. Join us to be part of a team that values your expertise and encourages you to influence strategy and drive meaningful change for our clients.
StudySmarter Expert Advice🤫
We think this is how you could land Penetration Tester in London
✨Get Active on Cybersecurity Forums
Join platforms like Stack Exchange and Reddit’s r/cybersecurity to hang out with industry pros, learn the latest, and share your insights. This will not only boost your visibility but also help you connect with potential clients who might need your freelance services.
✨Show Off Your Skills with Public Projects
Create a few open-source projects or contribute to existing ones that showcase your cybersecurity skills. Use GitHub to display your work, as this is an excellent way to attract clients looking for freelancers with a proven track record.
✨Attend Local Conferences and Meetups
Make sure to hit up cybersecurity meetups, workshops, and conferences in your area. These events are goldmines for networking, and you’ll often find people looking for freelancers after a chat over a coffee – so come prepared with your business cards and a killer elevator pitch!
✨Market Yourself Smartly
Set up a professional website that showcases your portfolio, expertise, and client testimonials. Optimise it for SEO with relevant keywords so potential clients searching for cybersecurity freelancers can easily find you. Don’t forget to link to your site on all your social media and profiles!
We think you need these skills to ace Penetration Tester in London
Some tips for your application 🫡
Show Your Skills Through a Strong Portfolio:Since you're applying for a freelance role in cybersecurity, it's crucial to showcase your technical skills through a detailed portfolio. Include case studies of projects you've worked on, any security tools you've developed or assessed, and specifics on the methodologies you’ve used. This will help Harnham understand what you're capable of.
Certifications Matter!:Make sure to list any relevant certifications you hold, such as CISSP, CEH, or CompTIA Security+. Freelance clients often value these credentials as they reflect your expertise and commitment to the field. If you’re actively pursuing more certifications, don’t hesitate to mention that too!
Rates, Availability, and Your Work Style:In your application, it’s essential to be clear about your freelance rates and availability. Clients appreciate transparency. Mention how many hours a week you can dedicate and your preferred working hours, as this sets expectations from the start and shows you're organised and professional.
Tailor Your CV to Highlight Cybersecurity Experience:When crafting your CV, make sure to tailor it specifically to cybersecurity. Highlight projects, tasks, and achievements related to security assessments, vulnerabilities you've mitigated, or compliance work you've undertaken. Keywords relevant to the job can grab attention and increase your chances of landing a spot at Harnham.
How to prepare for a job interview at Harnham
✨Showcase Your Cybersecurity Skills
As a freelancer in cybersecurity, it’s crucial we demonstrate not just our knowledge but our practical skills too. Be ready to discuss specific tools you’ve used, like Wireshark or Metasploit, and share relevant experiences where you identified vulnerabilities or mitigated risks in past projects.
✨Prepare Your Portfolio
Unlike traditional roles, freelancing relies heavily on your portfolio. Let’s curate a selection of past work that showcases our best projects. If we’ve handled penetration tests, audits, or incident responses, be sure to highlight these in your portfolio, and share any client testimonials if we have them.
✨Stay Updated on Trends and Tools
Cybersecurity is an ever-evolving field, so we should be prepared to chat about recent developments and how they impact our work. Familiarise ourselves with the latest threats, tools, and frameworks, like MITRE ATT&CK, that are pertinent to the projects we’re pitching.
✨Pitching Your Value as a Freelancer
When freelancing, we often need to negotiate our rates and value propositions. Be ready to explain how our skills can help Harnham protect their assets and manage risks. It can help to outline some potential strategies or improvements we could implement for them based on their current setup.
