Penetration Tester

This is a brand new Level 1 position and we are urgently seeking to fill two positions by March 1st 2017; these will be long term and last at least 2017 and likely into 2018. This is a new role only released this week so even if you have previously applied for a similar position it is worth registering your interest in this role.

This role will require you to perform a high amount of penetration tests in short time scales (almost one per week where you will need to provide detailed analysis). All of these have to be made with high precision and using various technologies (which requires a wide and detailed knowledge of many IT areas). Pressure for each of tests is very high because of the risk placed in case of any vulnerability missed (especially at the operational level).

MUST HAVE CURRENT NATO SECRET CLEARANCE or a valid SC clearance - the ideal candidate will have CTS/DV in place, or you have the ability to obtain this.

REQUIREMENTS

The profile of the contractor shall meet the following mandatory requirements:

1. Last 3-4 years as a Full time Penetration Tester

2. Hands-on experience in script development related to penetration testing activities

3. Experience in testing cryptographic implementations

4. Up to date with latest penetration testing tools and technologies

5. Ability to conduct penetration testing techniques, exploitation and post-exploitation

6. Ability to define and scope penetration testing requirements

7. Strong knowledge in Web application penetration testing

8. Strong knowledge in Network penetration testing

9. Source Code assessment skills in multiple language such as C, C#, PHP, ASP, Java etc

10. Teamwork and adaptability with high integrity and work ethics; and a good communicator

The profile of the contractor should also meet the following desirable requirements:

1. Certified CHECK team member/leader or equivalent (Crest or TIGER or SANS GPEN or GXPN)

2. Published security research/vulnerabilities (possibly with CVE attribution) or winner of CTF/bug bounty programs

3. Tools Development (Shell Scripting, Python, Ruby, etc)

4. Social Engineering skills

5. Exploit development experience and ability to defeat protection mechanisms

MUST HAVE MINIMUM CURRENT NATO SECRET CLEARANCE - WITHOUT THIS YOU WILL NOT BE SHORTLISTED FOR THE ROLE!

Apply now for a conversation and CV submission today!