Penetration Tester

If you are a lateral thinker, have excellent attention to detail, with analytical skills and strong technical abilities, then the role of a SecQuest (‘SQ’) Penetration Tester will suit you. As a SQ Penetration Tester, you'll simulate attacks in order to identify and report security vulnerabilities on networks, systems, and applications, including Mobile, IoT, SCADA and VSAT devices.

To meet your responsibilities, you will need to:

• Understand complex computer systems and technical cyber security terms.
• Carry out remote testing of a client's network, or onsite testing of their infrastructure, to identify security vulnerabilities.
• Work with clients to determine scope, approach and test requirements.
• Plan penetration methods, scripts and tests.
• Consider the impact of security vulnerabilities on the target business.
• Advise on methods to remediate security vulnerabilities.
• Create reports and recommendations from your test findings.
• Present the security vulnerabilities and business risk to technical and non-technical audiences.

What to expect:

You will work from our Southampton Office, in conjunction with agreed home working; plus, on occasion there will be travel to meet clients. You'll have a high level of responsibility; plus, maintain a high level of concentration with attention to detail. You'll need to dress smartly when meeting clients. You need to be a self-starter and be comfortable working on your own.

Qualifications

To join SQ you'll need an in-depth knowledge of computer operating systems and at least two to four years of experience in a role related to information security. Useful degree subjects include: Computer science, Cyber security, Forensic computing, Computing and information systems, Network management, Computer systems engineering.

As well as relevant degree qualifications, you will be expected to have one or more professional qualifications such as:

• GIAC Penetration Tester (GPEN) Certification.
• Offensive Security Certified Professional (OSCP) certification.
• Check Team Member (CTM) or equivalence; and or Company certification schemes from major vendors and equipment providers like Microsoft (MCP, MCSE) or CISCO (CCNA Security).

It is possible to work as a SQ Penetration Tester without a degree, if you have significant experience in information security and hold industry certifications. All applicants will need to undertake the SQ technical on-boarding assessment, in conjunction with UK security clearance checks. Training for a qualification such as CSTM will be offered to the right candidate.

Skills

You will need to have:

• Excellent spoken and written communication to explain your methods to a technical and non-technical audience.
• The ability to think creatively and strategically to penetrate security systems.
• Good time management and organisational skills to meet strict client deadlines.
• Ethical integrity to be trusted with a high level of confidential information.
• Commitment to continuously updating your technical knowledge base.
• Teamwork skills, to support colleagues and share techniques.
• Exceptional problem-solving skills and the persistence to apply different techniques to get the job done.

Working hours

A 37-hour working week is standard in this role; however, flexible working practices are common - plus, you may need to work outside of a typical 9AM to 5:30PM pattern. You must be UK based - we are unable to provide visa sponsorship.