Penetration Tester

Vacancy: Penetration Tester

Reference: PT/BSE/11/2024

Date: 21st November 2024

Contract: Permanent

Hours of Work: Full Time (36.25 hours per week)

Reporting to: Cyber Security Director

Location: Hybrid Model from our Bury St Edmunds Office

At Xperience we deliver business efficiencies through Digital Transformation.

We put our clients at the heart of everything we do, helping them create better, faster processes, build stronger customer relationships, strengthen data security, accelerate profitability and position them for growth. That’s why we’ve got over 1,100 clients who are more efficient, more productive and more profitable just because they work with us. And, it’s why 95% of our clients say they would recommend us. But really, it’s our people that make the difference at Xperience. They have the expertise and ambition to collaborate with our clients to guide them towards the optimum solution. Together as a team and through partnerships with world leaders in technology, we provide smart solutions that provide real digital transformation in businesses, including Cloud, ERP, CRM, Managed IT, and Cyber Security.

The Role

We are undergoing an exciting time in our evolution and now seek to add a highly motivated, enthusiastic Penetration Tester to our Cybersecurity division .

As a Penetration tester you will be responsible for interacting with a range of clients, using excellent communication skills along with your proven technical ability to provide a first-class customer experience. You will also be required to create high-quality reports from your findings, discussing solutions with a variety of stakeholders.

As a wider Cyber Security team, we benefit from partner status with market leading vendors including Sophos, Tenable and Microsoft, enabling us to successfully protect our customers from security threats. As a successful and growing area of our business, this newly created role will help meet current demand from our customer base. It presents an excellent opportunity for a driven individual to work with experienced cybersecurity professionals, adding-value quickly within a dynamic and growing organisation.

Key Responsibilities:

• Conduct a range of security assessments including infrastructure, web application and red team engagements.
• Manage priorities and tasks to achieve delivery utilisation targets.
• Conduct scoping calls with clients
• Operate with professionalism both internally and with clients.
• Continue to develop professional skills with relevant industry specific certifications. Maintains strong depth of knowledge in the practice area.
• Collaborate with project managers, sales and other delivery team members to drive customer satisfaction and meet project deliverables
• Keep up to date with the latest security and technology developments
• Generate reports for both technical and non-technical staff and stakeholders
• Liaise with customers in relation to cybersecurity issues and provide future recommendations
• Build effective working relationships and become a trusted advisor for clients
• Mentor junior team members

Person Specification

Essential:

• Hold industry recognised certifications such as CREST CRT
• Excellent communication skills (both written and verbal)
• Minimum of 2 years practical penetration testing experience
• Experience in testing external and internal infrastructure, active directory networks and web applications.
• Demonstrable organisation skills, with a logical approach to problem solving
• Proven ability to prioritise work to meet deadlines, and cope with fluctuations in workloads
• Desire to help build and maintain the team though internal training, building infrastructure and tooling or helping to plan and execute engagements
• Ability to occasionally travel to client site for on-site testing when required
• Valid Right to Work in the UK (We do not currently hold a visa sponsorship licence)
• Willingness to undergo a pre-employment DBS check and a Counter Terrorist Check if successful, due to the nature of our client

Desirable:

• Offensive Security Certified Professional/Crest Registered Tester, Certified Red Team Operator
• Scripting Skills (Python, GO, NIM etc).

Benefits Package:

• 30 days annual leave plus 8 bank holidays
• 1 additional day’s leave for your birthday
• Employer pension contribution of 3%
• Hybrid working
• Cycle to Work Scheme
• IT Purchase Scheme
• Access to Skillsoft Learning and Development Platform

*T&Cs apply based on contract

Competencies required for role:

Teamwork & Collaboration

Shares knowledge continuously and encourages others to do the same

Results Focused/Problem Solving

Regularly reviews plans, priorities and actions to changing circumstances and adapts accordingly

Developing Yourself & Others

Takes on new challenges willingly, with positivity and energy

Communication

Chooses the appropriate method/medium of communication dependant on situation

Xperience is an equal opportunities employer.

Closing Date is Friday 6th December 2024