Penetration Tester

Essential Roles & Responsibilities

As a Penetration Tester at Claranet, you will able to deliver you own web application tests and through training and partnering, you will be involved in a full range of testing work from mobile app and infrastructure testing to social engineering and Red Team exercises.

Key Responsibilities:

• Undertaking web and mobile application testing and infrastructure testing engagements

• Using the opportunities provided by the business to improve skills and capabilities into all areas of testing

• Working with key clients providing bespoke consultancy, analysis and expertise

• Collaborating with other Claranet Business Units on large client digital transformation projects

• Delivering targeted research and development in line with direction of the business

• If not achieved already, working towards CREST qualifications; CPSA, CRT and CCT

Essential Technical:

• Have a good understanding of web & mobile application and infrastructure testing and methodologies

• Able to manually and proficiently exploit web application and network infrastructure vulnerabilities

• Have a logical and time-conscious approach to report writing

• Have a working knowledge of common programming languages such as C, C++, C#, Java

• Have experience of at least one scripting language such as Ruby, Python or Perl

Essential Experience:

• Delivering chargeable web app testing engagements

• Providing remediation advice

• Producing accurate technical reports

• Working under pressure of deadlines and structuring workload accordingly

• Problem-solving, helping others to understand complex ideas

Essential General:

• Client facing, able to confidently and professionally represent the company

• Must be self-motivated and able to work in an independent manner as well as part of a team

• Excellent written and oral communications skills

In Addition, The Following Are Highly Desirable:

• Security clearance (or eligibility for clearance)

• CTM or CTL status

• CISSP, CISA, CEH, OSCP or equivalent reputable information security certifications

• Familiarity with testing cloud environments

• Public speaking experience

• Full UK driving license