Senior Penetration Tester

POSITION DETAILS:

Position Title:

Reports to (POSITION):

Team:

Department:

PURPOSE OF JOB:

(OVERALL DESCRIPTION OF THE POST WITHIN THE TEAM AND ORGANISATION)

Bytes are a CREST certified penetration testing organisation and have significant growth and expansion plans.  This role is to join the assurance testing team working with Bytes customers across all aspects of penetration testing.  We are seeking individuals that have both a broad range of skills or are focused on specific aspects of penetration testing and red teaming.  The role is ideal for anyone that has been providing penetration testing and security consulting services to customers and is now looking for the next step up in their career, or just a great company / team to work with.  The role will include delivering customer testing engagements and working on R&D projects, scoping customer engagements, completing statements of work, mentoring, training, and helping to develop new consulting services as well as increasing Bytes’ presence in thought leadership for penetration and assurance testing services.  This role will shape the future of our customers technical security landscape.

KEY RESPONSIBILITIES:

• Delivering penetration testing service, including but not limited to infrastructure, web application, API, wireless, desktop applications, and mobile application testing for customers.

• Carry out configuration reviews including but not limited to cloud, firewalls, workstations, and servers.

• Carry out in-depth red team and social engineering engagements.

• To work under the direction of the Head of Assurance on internal projects, research and development, tool creation and increasing the effectiveness of our services by bringing new ideas and ways of working.

• Provide guidance, support, and mentorship to junior penetration testers, helping them develop their technical skills, critical thinking abilities and problem-solving capabilities.

INDIVIDUAL RESPONSIBILITIES:

• Delivering penetration testing, red teaming and configuration review services to customers.

• Interacting with the sales team to ensure that new business is scoped appropriately for delivery of testing engagements.

• Managing customer engagements and being responsible for the quality / timeliness of all work delivered for that customer.

• Delivering high quality engagements to customers and delivering real value to them.

• Document findings, vulnerabilities, and recommendations in detailed reports, providing clear and actionable information to customers or internal stakeholders.

WIDER TEAM NETWORK

(WHICH TEAMS WILL THE POSITION WORK WITH DIRECTLY AND WHO WILL THEY RELATE TO EXTERNALLY)

Internal

• Audit, Advisory & Strategy and Assurance teams in Cyber Consulting
• Sales teams
• Pre-Sales teams
• Security team
• IT

External

• Customers
• Vendors
• Partners / Suppliers
• Distribution

QUALIFICATIONS, EXPERIENCE, & SKILLS:

(DELETE AS REQUIRED IF ESSENTIAL OR DESIRABLE, REMOVE UNNECESSARY REQUIRENENTs)

Educational Qualifications:

• BSc degree

DESIRABLE

Professional Qualifications

• CREST CCT-INF / CCT-APP or equivalent

ESSENTIAL

Years of Experience

• 3 years penetration testing consulting experience

ESSENTIAL

Other Requirements

• Ability to pass BPSS or HMG SC vetting requirements

ESSENTIAL

CORE Competencies & SKILLS – BASED ON POSITION AND GRADE (IF APPLICABLE)

(INCLUDE CORE COMPETENCIES & SKILLS REQUIRED FOR THIS POSITION BASED ON THE GRADE)

• Good time management, can handle conflicting priorities, and deliver excellent levels of quality across all services.

• Strong customer focus – able to meet the demands of internal and external customers.

• Excellent communication skills – providing verbal and written communication that are outstanding to the Head of Testing as well as other stakeholders including customers.

• Ability to work both independently and as a team and enjoy working in an environment that requires continuous learning and development.

• Ability to adapt to a fast-moving security landscape and keep pace with latest thinking.

• Strong code of ethics and morals.

MEASURES & GOALS

(HOW WILL THE SUCCESS OF THE PERSON IN THIS POSITION BE MEASURED – WHAT ARE THE EXPECTED OUTPUTS)

OBJECTIVE

MEASURE

FREQUENCY

Consulting delivery

13 days per month

Quarterly

Quality output / attention to detail

Feedback from QA team and customer engagements

Quarterly

Positive engagement with management, stakeholders, peers, and customers

Feedback whether positive or negative from personnel engaged with

Quarterly

Positive engagement with team and demonstration of team skills

Feedback from the team

Quarterly