Location

Location(s): UK, Europe & Africa : UK : London || UK, Europe & Africa : UK : Frimley || UK, Europe & Africa : UK : Leeds

Security Testing Technical Specialist

BAE Systems Digital Intelligence is seeking a Security Testing Consultant to join our team supporting customers across National Security, Defence, and Critical Infrastructure sectors. This position is part of our global Cyber Technical Services team, which includes adjacent areas of Threat Intelligence and Incident Response.

Responsibilities

• Delivery of end-to-end security testing engagements, including scoping and client wash-up meetings.
• Performing application testing, web and mobile tests, infrastructure testing, objective based tests, and intelligence-led tests.
• Production of detailed reporting and presentations for both technical and non-technical stakeholders.
• Safe and responsible use of testing tools, ensuring controls are in place to limit risks during customer engagements.
• Developing improvements in terms of scripts, tools, or techniques to enhance the Security Testing team\'s capabilities.
• Knowledge sharing with colleagues in other teams, including Threat Intelligence, Incident Response, and the wider Security Consulting community.

Requirements

• Experience delivering security testing projects, ability to demonstrate comprehensive, practical knowledge of testing tools, techniques, and procedures.
• Understanding of client needs in terms of testing outcomes, stakeholder engagement, and risk mitigation.
• Self-starter with ability to identify problems early and develop solutions using own initiative.
• The ability to work to strict deadlines and prioritise work appropriately.
• Technical skills with an interest in one or more of the following: adversary emulation, vulnerability discovery, reverse-engineering, emerging technology.
• Flexibility and willingness to travel both within the UK and globally.
• Current CHECK Team Leader, Infrastructure, Applications or Both with a level of Chartership.

Desirable skills

• Experience in a high level scripting language such as Python, mid level language such as C/C++, or low level language such as ASM.
• Skills and experience in application, operating system, database management operation, development, or security management.
• Skills and experience in testing within Government, Telecommunications, Energy, or Financial Services sectors.
• Exploit development or other in depth vulnerability research experience.