Senior Penetration Tester / Head of Penetration Testing – London - £75k-95k DOE

Opportunity working for a leading independent cyber security consulting firm based in London but operating across the UK. Specialising in Penetration Testing and Security Advisory Services dedicated to delivering world-class service to their clients, many of whom work exclusively to advance their security. We have built an impressive client base that includes major clients within the financial services, telecoms, ecommerce, defence and energy sectors.

The right candidate will be offered unmatched career progression and grow through levels in one of the industry's leading independently owned cyber security companies.

The role would suit an ambitious candidate that is looking to move on from a large security consulting firm, accelerate their career; and progress to Senior Penetration Tester level.

Benefits:

• Research / lab time – Got a pet security project? We’ll give you the time to finish it; and explore options for further research.
• Speaking opportunities – Our pen test team is well respected, and we would expect you to present on a regular basis to the community.
• Flexible working – Work can be carried out from home where business needs permit.
• Training – Each of our consultants is assigned to an ongoing professional training programme, agreed upon commencement and each year thereafter.
• Conferences – We expect the penetration testing team to make a visible presence at industry conferences, such as OWASP, Black Hat and DefCon.
• Your voice will be heard - You will have the opportunity to become directly involved and influence our direction.
• Benefits - 25 days annual leave; Annual Company Bonus; Contributory company pension; Corporate sick pay scheme; Interest free season ticket loan; Cycle to Work scheme; Subsidised gym membership; Perkbox Employee Benefit scheme; Childcare vouchers;

Responsibilities: 

• Delivering a range of assessment types including Web Application, API, Mobile and Infrastructure tests.
• Leading Cyber Essentials projects for clients.
• Producing high quality reports to clients that highlight areas of identified weaknesses.
• Providing advice to clients on remediation routes.
• Delivering all projects to the very high standards our clients expect.
• Work with other members of the team to share knowledge and experience, and to find creative ways of solving technical issues.
• Attending project commencement calls and meetings to finalise the scope for upcoming projects.
• Helping scope up projects and assist the sales team in developing competitive proposals that win business.
• Achieving CHECK Team Leader (CTL) within the first 12 months.
• Pre-sales and post-sales client support.

• Responsible for the management and coordination of all penetration testing activities in the organisation, ensuring that Client and regulatory testing requirements are adhered to.
• Ensure that testing is appropriately scoped and tested in accordance with the agreed testing deadlines.
• Manage supplier and 3rd party relationships.
• Allocate testing activities to the pentesting team to ensure all deadlines are met.
• Responsible and accountable for penetration team management and associated HR activities such as mentoring, training and performance reviews.
• Manage the budget and penetration testing finances.
• Maintain a test register /schedule tracker identifying test status and annual testing dates.
• Set strategic vision including the review and update of existing supporting processes and procedures.
• Maintain your testing knowledge and skills
• Manage and coordinate red team and purple team activities.
• Validate the quality and standards of the team deliverables against best practice and processes and support their day to day activities.
• Validate that the team are providing accurate /timely reporting of findings with appropriately recommended counter measures or mitigating controls.
• Produce MI reports pertaining to all pentesting testing metrics and present to the senior leadership team. 

Required Experience:

• At least eight year’s experience working as a full time penetration tester.
• Having managed a team of pen testers beneath them.
• BSc in Computer Science, Engineering or equivalent.
• Confidence and ability to carry out assessments independently.
• At least one of the following qualifications: CREST CRT, OSCP or Tigerscheme QSTM.
• The ability to work towards client-led or internal deadlines. 
• Highly organised approach with an attention to detail.
• Familiarity with the OWASP Top 10 and SANS CWE Top 25 and an understanding of how these vulnerabilities can be exploited.

Personal Qualities:

• A creative approach to performing thorough proven-method tests.
•  Excellent verbal and written communication skills, and the ability to write strong technical reports.
• An articulate and confident presentation style.
• The ability to explain how exploits were successful, and how a client could remediate the vulnerabilities raised during an assessment.
• Highly professional and dependable.
• Willingness to travel.

Desired Experience:

• Knowledge of hardware and embedded system security.
• Red teaming experience.
• Ability to carry out cloud security assessments on AWS, Google Cloud or Azure.

Penetration Tester – London - £45k-70k DOE

Opportunity working for a leading independent cyber security consulting firm based in London but operating across the UK. Specialising in Penetration Testing and Security Advisory Services dedicated to delivering world-class service to their clients, many of whom work exclusively to advance their security. We have built an impressive client base that includes major clients within the financial services, telecoms, ecommerce, defence and energy sectors.

The right candidate will be offered unmatched career progression and grow through levels in one of the industry's leading independently owned cyber security companies.

The role would suit an ambitious candidate that is looking to move on from a large security consulting firm, accelerate their career; and progress to Senior Penetration Tester level.

Benefits:

• Research / lab time – Got a pet security project? We’ll give you the time to finish it; and explore options for further research.
• Speaking opportunities – Our pen test team is well respected, and we would expect you to present on a regular basis to the community.
• Flexible working – Work can be carried out from home where business needs permit.
• Training – Each of our consultants is assigned to an ongoing professional training programme, agreed upon commencement and each year thereafter.
• Conferences – We expect the penetration testing team to make a visible presence at industry conferences, such as OWASP, Black Hat and DefCon.
• Your voice will be heard - You will have the opportunity to become directly involved and influence our direction.
• Benefits - 25 days annual leave; Annual Company Bonus; Contributory company pension; Corporate sick pay scheme; Interest free season ticket loan; Cycle to Work scheme; Subsidised gym membership; Perkbox Employee Benefit scheme; Childcare vouchers;

Responsibilities: 

• Delivering a range of assessment types including Web Application, API, Mobile and Infrastructure tests.
• Leading Cyber Essentials projects for clients.
• Producing high quality reports to clients that highlight areas of identified weaknesses.
• Providing advice to clients on remediation routes.
• Delivering all projects to the very high standards our clients expect.
• Work with other members of the team to share knowledge and experience, and to find creative ways of solving technical issues.
• Attending project commencement calls and meetings to finalise the scope for upcoming projects.
• Helping scope up projects and assist the sales team in developing competitive proposals that win business.
• Achieving CHECK Team Leader (CTL) within the first 12 months.
• Pre-sales and post-sales client support.

Required Experience:

• At least three-six year’s experience working as a full time penetration tester.
• BSc in Computer Science, Engineering or equivalent.
• Confidence and ability to carry out assessments independently.
• At least one of the following qualifications: CREST CRT, OSCP or Tigerscheme QSTM.
• The ability to work towards client-led or internal deadlines. 
• Highly organised approach with an attention to detail.
• Familiarity with the OWASP Top 10 and SANS CWE Top 25 and an understanding of how these vulnerabilities can be exploited.

Personal Qualities:

• A creative approach to performing thorough proven-method tests.
•  Excellent verbal and written communication skills, and the ability to write strong technical reports.
• An articulate and confident presentation style.
• The ability to explain how exploits were successful, and how a client could remediate the vulnerabilities raised during an assessment.
• Highly professional and dependable.
• Willingness to travel.

Desired Experience:

• Knowledge of hardware and embedded system security.
• Red teaming experience.
• Ability to carry out cloud security assessments on AWS, Google Cloud or Azure.

Junior Penetration Tester – London - £40k DOE

Opportunity working for a leading independent cyber security consulting firm based in London but operating across the UK. Specialising in Penetration Testing and Security Advisory Services dedicated to delivering world-class service to their clients, many of whom work exclusively to advance their security. We have built an impressive client base that includes major clients within the financial services, telecoms, ecommerce, defence and energy sectors.

The right candidate will be offered unmatched career progression and grow through levels in one of the industry's leading independently owned cyber security companies.

The role would suit an ambitious candidate that is looking to move on from a large security consulting firm, accelerate their career; and progress to Senior Penetration Tester level.

Benefits:

• Research / lab time – Got a pet security project? We’ll give you the time to finish it; and explore options for further research.
• Speaking opportunities – Our pen test team is well respected, and we would expect you to present on a regular basis to the community.
• Flexible working – Work can be carried out from home where business needs permit.
• Training – Each of our consultants is assigned to an ongoing professional training programme, agreed upon commencement and each year thereafter.
• Conferences – We expect the penetration testing team to make a visible presence at industry conferences, such as OWASP, Black Hat and DefCon.
• Your voice will be heard - You will have the opportunity to become directly involved and influence our direction.
• Benefits - 25 days annual leave; Annual Company Bonus; Contributory company pension; Corporate sick pay scheme; Interest free season ticket loan; Cycle to Work scheme; Subsidised gym membership; Perkbox Employee Benefit scheme; Childcare vouchers;

Responsibilities: 

• Delivering a range of assessment types including Web Application, API, Mobile and Infrastructure tests.
• Leading Cyber Essentials projects for clients.
• Producing high quality reports to clients that highlight areas of identified weaknesses.
• Providing advice to clients on remediation routes.
• Delivering all projects to the very high standards our clients expect.
• Work with other members of the team to share knowledge and experience, and to find creative ways of solving technical issues.
• Attending project commencement calls and meetings to finalise the scope for upcoming projects.
• Helping scope up projects and assist the sales team in developing competitive proposals that win business.
• Achieving CHECK Team Leader (CTL) within the first 12 months.
• Pre-sales and post-sales client support.

Required Experience:

• At least two year’s experience working as a full time penetration tester.
• BSc in Computer Science, Engineering or equivalent.
• Confidence and ability to carry out assessments independently.
• At least one of the following qualifications: CREST CRT, OSCP or Tigerscheme QSTM.
• The ability to work towards client-led or internal deadlines. 
• Highly organised approach with an attention to detail.
• Familiarity with the OWASP Top 10 and SANS CWE Top 25 and an understanding of how these vulnerabilities can be exploited.

Personal Qualities:

• A creative approach to performing thorough proven-method tests.
•  Excellent verbal and written communication skills, and the ability to write strong technical reports.
• An articulate and confident presentation style.
• The ability to explain how exploits were successful, and how a client could remediate the vulnerabilities raised during an assessment.
• Highly professional and dependable.
• Willingness to travel.

Desired Experience:

• Knowledge of hardware and embedded system security.
• Red teaming experience.
• Ability to carry out cloud security assessments on AWS, Google Cloud or Azure.

Key Skills: Cyber Security, Cyber, Security, Network Security, Threat Intelligence, Vulnerability, Security Assurance, Resilience,

Our leading central London based client requires a Cyber Security Analyst to join their team on a permanent basis.

You will have a proven background of conducting security assurance assessments and audits and will be responsible for managing remediation plans.

Key Responsibilities:

• Support the roll out of a threat intelligence lead vulnerability testing scheme that is to be introduced across the major Communications Provider community. This will include, working with stakeholders in scoping, agreeing, managing and monitoring progress against a remedial action plan of vulnerability tests.  
• Working closely with other regulators, both within the UK and beyond.
• Work with other members of the team in responding to and assessing telecoms and digital infrastructure company responses to security incidents that occur in their infrastructure which are reported.
• Work with colleagues within the investigations teams to provide technical support in relation to any enforcement activity.

Essential Skills:

• Experience and understanding of conducting security assurance assessments and audits and managing remediation plans.
• Understanding of the types of threat actors that would target the sector and cyber security threats they present.
• Experience with evaluating technical vulnerabilities and identifying reasonable and appropriate control measures.
• Experience across all cyber security risk management domains (strategy; governance and risk management; protection, detection, response, recovery and resumption of services; situational awareness; testing).
• Solid understanding of the internet suite of protocols, networking, routing and DNS.
• Understanding of network topologies including fixed and mobile
• Experience in practical application of leading practice cyber standards and guidance, such as 10 Steps to Cyber Security
• Written and oral communication skills including clear and effective presentation to both internal and external audiences.

If this role is of interest, please submit your CV for immediate consideration.

Key Skills: Cyber Security, Cyber, Security, Network Security, Threat Intelligence, Vulnerability, Penetration Testing

Our leading central London based client requires a Cyber Security Analyst to join their team on a permanent basis.

You will have a proven background within Penetration testing although the role will not involve undertaking penetration testing, experience of either conducting or managing the technical aspects of penetration testing will be required.

Key Responsibilities:

• Support the roll out of a threat intelligence lead vulnerability testing scheme that is to be introduced across the major Communications Provider community. This will include, working with stakeholders in scoping, agreeing, managing and monitoring progress against a remedial action plan of vulnerability tests.  
• Working closely with other regulators, both within the UK and beyond.
• Work with other members of the team in responding to and assessing telecoms and digital infrastructure company responses to security incidents that occur in their infrastructure which are reported.
• Work with colleagues within the investigations teams to provide technical support in relation to any enforcement activity.

Essential Skills:

• Experience and understanding of networking (TCP/IP) and application security
• Good understanding of operating systems (Unix, Windows)
• Although the role will not involve undertaking penetration testing, as this will be performed by third parties, experience of either conducting, or managing the technical aspects of penetration testing is required
• Experience and understanding of security compliance assessments and audits and identifying weaknesses and opportunities to strengthen security controls.
• Understanding of threats and experience of assessing vulnerabilities.
• Written and oral communication skills including clear and effective presentation to both internal and external audiences.

If this role is of interest, please submit your CV for immediate consideration.

Functional Security Consultant / Deputy CISO required to join an expanding technology team for a global household brand based in Paris, France.

Title: Functional Security Consultant / Deputy CISO

Location: Paris, France

Contract: Full time

Package: €57,000

Due to expansion and growth a Functional Security Consultant / Deputy CISO is required to join and undertake the responsibilities of developing security architecture strategy in align with regulations. This is a proactive position where you'll track changes in the digital business landscape to ensure threats are accounted for in strategy plans. You'll also participate in projects, draft procedures, set standards and conduct vulnerability assessments of mission-critical systems.

Daily tasks can consist of the following:

• Council and Governance SSI
• Operational management of security
• Integration of security in IS projects
• Security checks
• Assistance to CISOs
• Audits and risk analysis

Required Skills:

• 6-8yrs Experience
• Versatility in AMOA SSI
• Functional and technical SSI skills
• Skills in risk analysis
• ISO 27K certification
• Bi-lingual French & English required
  
  In order to be considered you'll come from a similar position with 6-8yrs of experience. You'll be comfortable dealing with people up to C-level, communicating clearly practices and procedures as necessary. You'll also have a proven track record mediating risk. A CISSP/CISM qualification is desired but not required.
  
  This is a fantastic opportunity to join a growing, household brand who are one of the biggest players in their field. The position is paying up to €57k with the view to earn much more after initial training and development.

Please apply to find out more. Send your cv to fz@idpp.com or call in 0208 334 7537

My client is major government body, looking for an experienced Cyber Security Analyst to join their technology team based in Central London.

About the Role

The ideal candidate will be an experienced Cyber Security Analyst with experience and understanding of conducting security assurance assessments and audits and managing remediation plans, within the Communication Provider/Telco and NIS sector. They will thrive in a collaborative environment, working closely within a team to support the roll out, management and progress monitoring of a cyber security assurance scheme that is being introduced across companies in the NIS Digital Infrastructure sector and the Communications Provider community. This will include, developing incident reporting thresholds and processes, developing and drafting compliance guidance, carrying out and/or managing security assessments.

Key Skills

• Experience of conducting security assurance assessments and audits.

• Experience with evaluating technical vulnerabilities and identifying reasonable and appropriate control measures.

• Experience across all cyber security risk management domains (strategy; governance and risk management; protection, detection, response, recovery and resumption of services; situational awareness; testing).

• Solid understanding of the internet suite of protocols, networking, routing and DNS.

• Understanding of network topologies including fixed and mobile

• Experience in practical application of leading practice cyber standards and guidance, such as 10 Steps to Cyber Security and the NIST framework.

• Written and oral communication skills.

Desirable

• Experience and understanding of managing and monitoring assurance programmes.

• Experience of project management including developing and delivering against plans, managing risks and issues along the way.

• Preferably educated to degree level (or equivalent) or with substantial relevant information security, network or systems experience.

• Desirable to have an industry recognised qualification e.g. CISA, CISM, CISSP etc.

Our client; a UK wide leader of Health Services operating in 150 centres, are seeking to expand their Service Desk Team at their Kent site providing 1^st/2^nd Line Technical support to their customers.

This fantastic permanent opportunity would suit an IT Support Professional who is passionate about delivering the highest quality IT Support through the delivery of excellent customer service and would like to continue their career within this environment.

Main Duties and Responsibilities:

• To work as part of a centralised ICT Service Desk, acting as the first point of contact for all ICT support queries whether it be via phone, email or face to face.
• To provide the highest level of 1^st and 2^nd line user support, both technical and non-technical, to new and existing Clinical and Administrative members of staff across the Group, this may include areas of system training using remote tools, in person or a group.
• To assist in maintaining and developing the positive reputation of the team and of ICT and where possible create and sustain proactive links with ward staff, hospital management and other departments across the group.
• Undertake any reasonable request within own competencies and understanding.
• Ensure the security of data and adhere to policies & procedures.
• Provide any additional support to any team member as required.

Knowledge/ Experience required:

• Minimum 3 years work experience in ICT industry
• Minimum 2 years’ experience in a comparable network environment
• Working knowledge of Windows 7, 8, 8.1 & 10
• Basic understanding of WAN and LAN technologies
• Use of Active Directory and Microsoft Exchange
• Installation and configuration of Microsoft Office production applications
• Configuration of Microsoft Outlook from an end user prospective
• Installation of both local and network printers
• Good broad working knowledge of computer and network connectivity technologies at the hardware level.
• Experience of configuring and supporting mobile phones

If this of interest, please apply today with your up to date CV for immediate consideration!