Security Penetration Tester

Security Penetration Tester

Location: Leicester

Salary: £36,000 – £72,000

Role
This is a brilliant opportunity for a security penetration tester to work for a market leading e-commerce company based in Leicester.
Their IT Security department is looking for an experienced Senior Penetration Tester to support the IT Security Manager in protecting the confidentiality, integrity and availability of our key information assets and to ensure we meet our compliance obligations.
Responsible for performing security assessments and penetration tests, you will work with the Systems Department and the Business to identify and reduce inherent risks, and to develop meaningful hardening and mitigation strategies.
The role will involve Network and application penetration testing, physical security assessments, logical security audits, and hands-on technical security evaluations and implementations.
You are expected to develop and become a subject matter expert in the field of IT security.
Key responsibilities:

– Planning, scheduling and performing penetration tests & vulnerability assessments on company assets and 3rd Parties
– Creating, maintaining, & presenting metrics to measure the effectiveness of the application risk management efforts over time
– Communicating assessment results to multiple tiers of leadership, & managing communication around remediation of the risks
– Developing & presenting plans for IT Security requirements
– Working closely with development teams to define security requirements, build secure architecture design models, & drive security initiatives
– Supporting compliance, PCI/DSS, IS Security policies, standards and controls
– Develop and implement departmental IS Security Standards, Policies & Configurations.
– Conduct regular reviews of existing Policies & Standards against the PCI/DSS standards
– Working with business and the Systems Department to ensure owners remediate issues and preventative measures are implemented
– Maintaining and enhancing knowledge and ensuring continually up to date with the latest Security risks, threats and solutions

Support the Operational IT Security Team

– Internal IT Security Management co-ordination – act as incident/escalation for IS Security Incidents, & provide expertise to readdress issues, which could affect compliancy
– Support & advise analysts during Security incidents conduct post incident investigations to resolution & amend any processes or procedures to enhance protection against future exploits/vulnerabilities.
– Compile statistical compliancy reports and metrics on key security compliancy devices and infrastructure

Essential Skills

– Technical certifications such as: CEH, CREST, OSCP, OSCE, GWAPT, GPEN, GCIH,
– Demonstrable knowledge of PCI/DSS
– Security testing (Pen-testing/application/Networking/Server rule base reviews)
– Experience with software security testing and testing tools
– Demonstrable skills in common types of penetration testing such as web/application and infrastructure testing, wireless network testing, VoIP, firewall rule set review.
– Knowledge of open source, freeware, and commercial vulnerability assessment tools.
– Experience with penetration testing frameworks
– Working and designing security information management systems
– In depth knowledge of anti-virus, malware and desktop tools
– Proven report and document writer
– Knowledge of Operating System Control Security
– Advanced Knowledge of Perimeter controls security (IDS/IPS, SIMM, Data Leakage, Firewall, Mail/Gateway security, AV, Proxies, VPN’s and Zoning).

The role is based in Leicester so is easily commutable from Loughborough, Coventry, Melton Mowbray and Rugby. The company offer a range of benefits and plenty of opportunity to grow and move up.