Security Testing Technical Specialist

Location(s): UK, Europe & Africa: London || UK, Europe & Africa: Frimley || UK, Europe & Africa: Leeds

Responsibilities

• Delivery of end-to-end security testing engagements, including scoping and client wash-up meetings.
• Performing application testing, web and mobile tests, infrastructure testing, objective based tests, and intelligence-led tests.
• Production of detailed reporting and presentations for both technical and non-technical stakeholders.
• Safe and responsible use of testing tools, ensuring controls are in place to limit risks during customer engagements.
• Developing improvements in terms of scripts, tools, or techniques to enhance the Security Testing team's capabilities.
• Knowledge sharing with colleagues in other teams, including Threat Intelligence, Incident Response, and the wider Security Consulting community.

Requirements

• Experience delivering security testing projects, ability to demonstrate comprehensive, practical knowledge of testing tools, techniques, and procedures.
• Understanding of client needs in terms of testing outcomes, stakeholder engagement, and risk mitigation.
• Self-starter with ability to identify problems early and develop solutions using own initiative.
• The ability to work to strict deadlines and prioritise work appropriately.
• Technical skills with an interest in one or more of the following: adversary emulation, vulnerability discovery, reverse-engineering, emerging technology.
• Flexibility and willingness to travel both within the UK and globally.
• Current CHECK Team Leader, Infrastructure, Applications or Both with a level of Chartership.

Desirable Skills

• Experience in a high level scripting language such as Python, mid level language such as C/C++, or low level language such as ASM.
• Skills and experience in application, operating system, database management operation, development, or security management.
• Skills and experience in testing within Government, Telecommunications, Energy, or Financial Services sectors.
• Exploit development or other in depth vulnerability research experience.