Penetration Tester

Skills
Code ReviewEthical HackingOWASPPenetration TestingSocial EngineeringVulnerabilityVulnerability Assessment
Role

What the job involves

The main requirements, responsibilities and hiring steps.

Requirements

  • Proven industry experience in web/API/mobile/thick client application penetration testing
  • Deep knowledge of various Operating Systems and network principles
  • Strong understanding of OWASP, PTES, and MITRE ATT&CK framework
  • Knowledge of how modern solutions are designed and deployed across different platforms
  • Ability to program or script in your preferred language
  • Relevant security qualifications (OSCP, CREST CRT, OSWE, CCT APP)
  • Experience leading penetration testing projects and acting as a lead technical point of contact

Nice to have

  • Knowledge of assessing cloud and/or hybrid environments
  • Knowledge of performing source code reviews
  • Knowledge in preparing and launching social engineering campaigns
  • Involvement in previous research projects
  • Tool development experience
  • Training delivery knowledge

Day to day

  • Perform formal and comprehensive penetration testing assessments, producing full written reports to appropriate standards and within agreed deadlines. Support client pre-engagement activities, including scoping and proposal drafting, and researching new vulnerabilities and technologies within the team. Manage and deliver penetration testing projects within strict deadlines, and coach and mentor Graduate and Junior penetration testers.
  • Support marketing with content development to raise the profile of Bulletproof’s Penetration Testing services. Ensure high-quality client reports are delivered in accordance with applicable Service Level Agreements. Perform any other appropriate job duties in line with associated skills and experience.
  • Perform vulnerability and attack surface assessments, providing findings with remediation actions. Research new technologies, security topics, and vulnerabilities within the wider team. Support QA processes to ensure high-quality client reports are delivered. Manage and deliver penetration testing project activities, coaching and mentoring graduate and junior testers.

Hiring process

  • Criminal records check