Penetration Tester

Summary about this job

Detail information about job Penetration Tester. Terms and conditions vacancy

Intalock is looking for an experienced penetration tester to join our Offensive Security team. We want someone who can challenge the defensive mindset of security teams by bringing an attacker mindset.

The primary objectives of the Penetration Tester are to execute offensive engagements with our clients. Additionally, you will work alongside our SOC team to ensure our services are of the highest quality.

You will need to be highly technical. Able to perform penetration testing against web applications, networks and cloud platforms. Experience with social attacks, and physical security would also be of benefit.

This is a customer facing role. You will be scoping engagements, executing and discussing your findings with clients. You will be supported by the full capabilities of our security practice.

Responsibilities:

• Perform application and infrastructure penetration tests, as well as physical security review and social engineering tests for our clients
• Perform security reviews of application designs, source code and deployments as required, covering all types of applications (web application, web services, mobile applications and SaaS)
• Participate in Security Assessments of networks, systems and applications
• As well as identifying vulnerabilities, the Security Penetration Tester should also provide indications of the level of risk for each of the vulnerability identified and where possible, propose one or more mitigation strategies to reduce or negate the risks.

Technical Knowledge:

• Bachelor degree or higher, technical discipline preferred
• Three (3) years’ experience in IT Security, with exposure to application security testing (source code review and application penetration tests)
• Working knowledge of Security principles, techniques and technologies
• Excellent understanding of network protocols, design and operations
• Strong analytical skills and efficient problem solving
• Relevant offensive security certifications. CEH, OSCP, etc.
• Application development background and security knowledge – example of languages include C, C#, Java, J2EE
• Vulnerability and threat management experience
• Experience with various security defensive platforms, and offensive products
• Good understanding of the components of a secure DLC/SDLC
• Vulnerability analysis and application reversing skills