Penetration Tester

Description:

Essential Roles & Responsibilities

As a Penetration Tester at Claranet, you will able to deliver you own web application tests and through training and partnering, you will be involved in a full range of testing work from mobile app and infrastructure testing to social engineering and Red Team exercises.

Key Responsibilities:

* Undertaking web and mobile application testing and infrastructure testing engagements

* Using the opportunities provided by the business to improve skills and capabilities into all areas of testing

* Working with key clients providing bespoke consultancy, analysis and expertise

* Collaborating with other Claranet Business Units on large client digital transformation projects

* Delivering targeted research and development in line with direction of the business

* If not achieved already, working towards CREST qualifications; CPSA, CRT and CCT

Essential Technical:

* Have a good understanding of web & mobile application and infrastructure testing and methodologies

* Able to manually and proficiently exploit web application and network infrastructure vulnerabilities

* Have a logical and time-conscious approach to report writing

* Have a working knowledge of common programming languages such as C, C++, C#, Java

* Have experience of at least one scripting language such as Ruby, Python or Perl

Essential Experience:

* Delivering chargeable web app testing engagements

* Providing remediation advice

* Producing accurate technical reports

* Working under pressure of deadlines and structuring workload accordingly

* Problem-solving, helping others to understand complex ideas

Essential General:

* Client facing, able to confidently and professionally represent the company

* Must be self-motivated and able to work in an independent manner as well as part of a team

* Excellent written and oral communications skills

In Addition, The Following Are Highly Desirable:

* Security clearance (or eligibility for clearance)

* CTM or CTL status

* CISSP, CISA, CEH, OSCP or equivalent reputable information security certifications

* Familiarity with testing cloud environments

* Public speaking experience

* Full UK driving license