Penetration Tester

Essential Roles & Responsibilities

As a Penetration Tester at Claranet, you will able to deliver you own web application tests and through training and partnering, you will be involved in a full range of testing work from mobile app and infrastructure testing to social engineering and Red Team exercises.

Key Responsibilities:

• Undertaking web and mobile application testing and infrastructure testing engagements

• Using the opportunities provided by the business to improve skills and capabilities into all areas of testing

• Working with key clients providing bespoke consultancy, analysis and expertise

• Collaborating with other Claranet Business Units on large client digital transformation projects

• Assisting with pre/post sales activities as required

• Encouraging a positive, proactive, collaborative and solution-oriented approach among colleagues

• Communicating within Claranet and with clients, both orally and in writing

• Contribute to the writing and publishing of whitepapers and advisories

• Developing and delivering webinar content

• Delivering targeted research and development in line with direction of the business

• If not achieved already, working towards CREST qualifications; CPSA, CRT and CCT Essential Technical:

• Have a good understanding of web & mobile application and infrastructure testing and methodologies

• Able to manually and proficiently exploit web application and network infrastructure vulnerabilities

• Have a logical and time-conscious approach to report writing

• Have a working knowledge of common programming languages such as C, C++, C#, Java

• Have experience of at least one scripting language such as Ruby, Python or Perl Essential Experience:

• Delivering chargeable web app testing engagements

• Providing remediation advice

• Producing accurate technical reports

• Working under pressure of deadlines and structuring workload accordingly

• Problem-solving, helping others to understand complex ideas Essential General:

• Client facing, able to confidently and professionally represent the company

• Must be self-motivated and able to work in an independent manner as well as part of a team

• Excellent written and oral communications skills

• Positive, collaborative and enthusiastic

• Conducting penetration testing work out of normal office hours on occasion

• Willing to travel to deliver onsite work as required

• Appetite to shadow, train and develop to improve capabilities into all areas of security testing In Addition, The Following Are Highly Desirable:

• Security clearance (or eligibility for clearance)

• CTM or CTL status

• CISSP, CISA, CEH, OSCP or equivalent reputable information security certifications

• Familiarity with testing cloud environments

• Public speaking experience

• Full UK driving license