As a Security Penetration Tester, you will be responsible for supporting the design, implementation, and maintenance of TVM (Threat & Vulnerability Management) solutions, controls and processes across the organisation. You will be liaising with Digital teams to ensure appropriate mitigation and remediation of vulnerabilities detected across our IT estate.
This role requires an understanding of TVM concepts, technologies, and best practices, as well as the ability to collaborate effectively with cross-functional teams. The ideal candidate will possess strong communication and will be committed to ensuring the highest level of security, compliance, and user experience.
Security Clearance: CTC (Counter Terrorist Check) clearance is essential. You must currently hold or be able to attain CTC clearance for this role.
What you'll be doing as a Security Penetration Tester
- Help support and develop an internal penetration testing function.
- Conduct network, application penetration testing, code and security reviews.
- Identify and exploit vulnerabilities through proof-of-concept testing.
- Support vulnerability management across the enterprise, ensuring that a framework for identification, categorisation and mitigation exists and is implemented and maintained.
- Responsible for supporting the creation of the operating model for vulnerability management, that it is shared, agreed and operates effectively across the business.
- Develop and maintain penetration testing documentation, policies, and procedures.
- Integrate cyber security solutions (e.g. vulnerability scanning tools) with existing systems, applications, and infrastructure.
- Evaluate and recommend technologies, tools, and vendors to meet business needs.
- Investigate newly identified cyber security vulnerabilities and provide appropriate mitigation actions.
- Liaise and coordinate with technology and business stakeholders in relation to cyber security patching and vulnerability management issues/actions.
- Maintain a cyber threat assessment methodology, align to evolving industry standards and integrate into BAU and project-based business processes.
- Support with proactive threat hunting for new and emerging cyber threats.
- Develop and maintain dashboards with cyber security threat and vulnerability metrics.
- Support compliance with relevant industry standards, regulations, and best practices, such as GDPR, NIS and ISO 27001.
What you should bring to the role
- Strong knowledge of manual penetration testing techniques and confident with operating systems and tools such as Tenable, Burp Suite, Kalli Linux.
- Exposure to remediating vulnerabilities and patch management in a complex business environment.
- Experience in remediating cyber risks in the ever-changing digital estate.
- Experience in a penetration testing enterprise environment.
- Prepare detailed reports and the ability to present findings to key stakeholders.
- Cyber security industry certification(s) such as CSTM/ CRT/ OSCP/CTL.
- Understanding of different patching management techniques and approaches for different technology stacks (e.g. SaaS, IaaS, End-User Computing, Server Estate, etc.).
- Knowledge of TVM concepts, technologies, and best practices, including OSINT tools, vulnerability assessment, threat modelling, etc
GCS is acting as an Employment Agency in relation to this vacancy.
Security Penetration Tester
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- IT Support & Infrastructure
- Project Management
- BI & Data Analytics
- Engineering
- Software Development
- Network security consultant
- Controls & Automation
- Manufacturing & Production
- Data
- DevOps
- Engineering Technology
- Testing & QA
LATEST JOBS
- Embedded Software Engineer
- Automation Engineer
- Fiber Analyst
- ASAP
- Embedded Engineer
- Controls Engineer
- Senior Fiber Engineer
- Data Architect (Generalist)
- Data Engineer
- Graduate Engineer Trainee
- Team Lead / Software Engineeri...
- Project Manager
TOP SEARCHES
LOCATIONS
- Engineer
- Data Scientist
- Senior Data Scientist
- Head of Data Science
- Trainee Data Scientist
- Data Science Graduate
- Senior Financial Accountant
- Management Accountant
- Cost Accountant
- Civil Engineer
- Senior Civil Engineer
- Civil Design Engineer