Security Engineer - Penetration Tester

Description

• Work with internal teams to determine test activities, for example the number and type of systems in scope for testing
• Plan and create penetration methods, scripts, and tests
• Carry out testing of the infrastructure to expose weakness in security controls
• Simulate security breaches to test a system's relative security
• Create reports from your findings, including the security issues uncovered, level of risk, and recommend risk treatments
• Identify problems, you may also provide advice on how to minimize risks and provide advice on methods to fix or lower security risks to systems
• Present your findings, risk and conclusions to stakeholders
• Consider the impact your 'attack' will have on the business and its users
• Understand and effectively communicate how the flaws you identify can affect the business, or business function, if they're not fixed

• Computer science
• Computing and information systems
• Cyber security
• Forensic computing
• Network management
• Computer systems engineering
• If your degree is in an unrelated subject, in-depth knowledge of computer operating systems with demonstrable skills in compromising computer systems is required

• Offensive Security Certified Professional (OSCP)
• GIAC Penetration Tester (GPEN) Certification
• GIAC Web Application Penetration Tester (GWAPT)
• Industry certification from major vendors and equipment providers like Microsoft (MCP, MCSE) or Cisco (CCNA Security )

• An In depth understanding of computer systems and their operation
• Excellent spoken and written communication to explain your methods to a technical and non-technical audience
• Attention to detail, to be able to plan and execute tests while considering requirements
• The ability to think creatively and strategically to penetrate security systems
• Good time management and organizational skills to meet deadlines
• Ethical integrity to be trusted with a high level of confidential information
• The ability to think laterally and 'outside the box'
• Teamwork skills, to support colleagues and share techniques
• Exceptional analytical and problem-solving skills and the persistence to apply different techniques to get the job done
• Business skills to understand the implications of any weaknesses you find
• Commitment to continuously update your technical knowledge base
• Experience using common penetration test tools such as Burp Suite Pro, application scanners, Nessus, Nmap, Metasploit Pro, and Kali-Linux tools - required
• Experience in application development highly desirable
• Experience in penetration testing against OWASP, SANS and other Secure Development strategies highly desirable