Penetration Tester - Red Team Operator
Sam Williams
*Penetration Tester – Red Team Operator – Hybrid – North West – Midlands - £80,000 *
*This roles does not accept any Visa or Sponsorship applications and will be rejected*
We are working with a client who is looking for someone with hands-on experience and a deep understanding of hacking techniques, avoiding over-reliance on automated tools. You will be tasked with evaluating internal and external services utilized by their employees and external customers across their applications and infrastructure. These services may be developed or hosted internally but are exposed externally, and it will be your responsibility to confirm their secure construction and configuration.
What’s In it for you?
- Competitive Salary
- Full Autonomy within the role, you will head up this project to a brand new red team
- Hybrid Working
- Bonus Scheme
- Knowledge of structured methodologies for conducting and reporting on security assessments.
- Assisting the current application security team by testing in-house developed applications within test environments.
- An advanced working knowledge of penetration testing techniques, best practices in application security, and industry-standard tools.
- Strong ability to plan and execute security assessments in a methodical manner within predefined environments and deadlines.
- Familiarity with command and control frameworks, active directory, and cloud penetration techniques.
- Exceptional documentation skills with meticulous attention to detail.
- OSCP or Equivalent CREST Certification
- Conducting both manual and automated security testing.
- Performing security vulnerability analysis and assessments.
- Identifying and appropriately managing security flaws in business software and infrastructure, while coordinating with colleagues in vulnerability management and internal/external resolver groups.
- Seamless collaboration with development, infrastructure, and security teams to bolster our systems against cyber threats.
- Streamlining processes and operations through the creation and maintenance of technical documentation, custom tools, and scripts.