Penetration Tester

Essential-Roles-&-Responsibilities

As-a-Penetration-Tester-at-Claranet,-you-will-able-to-deliver-you-own-web-application-tests-and-through-training-and-partnering,-you-will-be-involved-in-a-full-range-of-testing-work-from-mobile-app-and-infrastructure-testing-to-social-engineering-and-Red-Team-exercises.

Key-Responsibilities:

• Undertaking-web-and-mobile-application-testing-and-infrastructure-testing-engagements
• Using-the-opportunities-provided-by-the-business-to-improve-skills-and-capabilities-into-all-areas-of-testing
• Working-with-key-clients-providing-bespoke-consultancy,-analysis-and-expertise
• Collaborating-with-other-Claranet-Business-Units-on-large-client-digital-transformation-projects
• Delivering-targeted-research-and-development-in-line-with-direction-of-the-business
• If-not-achieved-already,-working-towards-CREST-qualifications;-CPSA,-CRT-and-CCT

Essential-Technical:

• Have-a-good-understanding-of-web-&-mobile-application-and-infrastructure-testing-and-methodologies
• Able-to-manually-and-proficiently-exploit-web-application-and-network-infrastructure-vulnerabilities
• Have-a-logical-and-time-conscious-approach-to-report-writing
• Have-a-working-knowledge-of-common-programming-languages-such-as-C,-C++,-C#,-Java
• Have-experience-of-at-least-one-scripting-language-such-as-Ruby,-Python-or-Perl

Essential-Experience:

• Delivering-chargeable-web-app-testing-engagements
• Providing-remediation-advice
• Producing-accurate-technical-reports
• Working-under-pressure-of-deadlines-and-structuring-workload-accordingly
• Problem-solving,-helping-others-to-understand-complex-ideas

Essential-General:

• Client-facing,-able-to-confidently-and-professionally-represent-the-company
• Must-be-self-motivated-and-able-to-work-in-an-independent-manner-as-well-as-part-of-a-team
• Excellent-written-and-oral-communications-skills

In-Addition,-The-Following-Are-Highly-Desirable:

• Security-clearance-(or-eligibility-for-clearance)
• CTM-or-CTL-status
• CISSP,-CISA,-CEH,-OSCP-or-equivalent-reputable-information-security-certifications
• Familiarity-with-testing-cloud-environments
• Public-speaking-experience
• Full-UK-driving-license