Penetration Tester

1.Background

The Cyber Security Service Line (CS-SL) - Capability and Development branch/Evaluation and Certification cell performs penetration tests, vulnerability assessments and security reviews. Security reviews are conducted to evaluate the security posture of systems and applications before they are deployed over NATO networks.

The Evaluation and Certification cell is also responsible for the following activities:

-Support Change Control Management process;
-Development of security guidance and protective security measures;
-Security requirements engineering;
-Provision and management of vulnerabilities/countermeasures information;
-Pre-production security evaluation.

2.Description of the work to be performed

The requirement is for a penetration tester to provide direct support in all activities and services provided by the Evaluation and Certification cell, which include advanced penetration testing, vulnerability assessments, security consultancy and guidance in various domains, such as web application, network and infrastructure security.
Under the technical direction of the NCIRC TC, the contractor will perform penetration tests and security reviews on a daily basis.
All the necessary background documentation will be provided by the NCIRC TC during the execution of the project.

3.Required Skillset

The profile of the contractor shall meet the following mandatory requirements:

1.Last 3-4 years as a Full time penetration tester;
2.Hands-on experience in script development related to penetration testing activities;
3.Proven experience in testing cryptographic implementations;
4.Up to date with the latest penetration testing tools and technologies;
5.Ability to conduct penetration testing techniques, exploitation and post-exploitation;
6.Ability to define and scope penetration testing requirements;
7.Strong knowledge in Web application penetration testing;
8.Strong knowledge in Network penetration testing;
9.Source Code assessment skills in multiple language such as c, c#, PHP, ASP, Java,
10.Teamwork and adaptability;
11.High integrity
12.Communication;

Due to the nature and urgency of this post, candidates holding or who have held high level security clearance in the past are most welcome to apply. Please note successful applicants will be required to be security cleared prior to appointment which can take up to a minimum 10 weeks.

LA International Computer Consultants Ltd is an HMG Approved Consultancy and operates as an IT & Engineering Consultancy or as an Employment Business & Agency, depending upon the precise nature of the work, for security cleared jobs or non-clearance vacancies, we welcome applications from all sections of the community and from people with diverse experience and backgrounds. Award Winning LA International Computer Consultants Ltd (Recruiter Awards for Excellence - Best IT, Best Public Sector & Gold Awards) and the most prestigious award that any business can receive The Queens Award for Enterprise: International Trade 2015.