Penetration Tester

Essential Roles & Responsibilities

As a Penetration Tester at Claranet, you will able to deliver you own web application tests and through training and partnering, you will be involved in a full range of testing work from mobile app and infrastructure testing to social engineering and Red Team exercises.

Key Responsibilities:

\n
• Undertaking web and mobile application testing and infrastructure testing engagements
\n
• Using the opportunities provided by the business to improve skills and capabilities into all areas of testing
\n
• Working with key clients providing bespoke consultancy, analysis and expertise
\n
• Collaborating with other Claranet Business Units on large client digital transformation projects
\n
• Assisting with pre/post sales activities as required
\n
• Encouraging a positive, proactive, collaborative and solution-oriented approach among colleagues
\n
• Communicating within Claranet and with clients, both orally and in writing
\n
• Contribute to the writing and publishing of whitepapers and advisories
\n
• Developing and delivering webinar content
\n
• Delivering targeted research and development in line with direction of the business
\n
• If not achieved already, working towards CREST qualifications; CPSA, CRT and CCT
\n

Essential Technical:

\n
• Have a good understanding of web & mobile application and infrastructure testing and methodologies
\n
• Able to manually and proficiently exploit web application and network infrastructure vulnerabilities
\n
• Have a logical and time-conscious approach to report writing
\n
• Have a working knowledge of common programming languages such as C, C++, C#, Java
\n
• Have experience of at least one scripting language such as Ruby, Python or Perl
\n

Essential Experience:

\n
• Delivering chargeable web app testing engagements
\n
• Providing remediation advice
\n
• Producing accurate technical reports
\n
• Working under pressure of deadlines and structuring workload accordingly
\n
• Problem-solving, helping others to understand complex ideas
\n

Essential General:

\n
• Client facing, able to confidently and professionally represent the company
\n
• Must be self-motivated and able to work in an independent manner as well as part of a team
\n
• Excellent written and oral communications skills
\n
• Positive, collaborative and enthusiastic
\n
• Conducting penetration testing work out of normal office hours on occasion
\n
• Willing to travel to deliver onsite work as required
\n
• Appetite to shadow, train and develop to improve capabilities into all areas of security testing
\n

In Addition, The Following Are Highly Desirable:

\n
• Security clearance (or eligibility for clearance)
\n
• CTM or CTL status
\n
• CISSP, CISA, CEH, OSCP or equivalent reputable information security certifications
\n
• Familiarity with testing cloud environments
\n
• Public speaking experience
\n
• Full UK driving license
\n