Penetration Tester (Web, Infrastructure, Red Team) for...

Find the weakness before anyone else does.

A multinational defence organisation is adding a penetration tester to its offensive security cell. The work is a genuine mix: hands-on testing, red and blue team play during large military exercises, and the design reviews that stop a weakness being built in the first place.

What you would be doing

• Testing web applications, infrastructure and application layers, with the tooling and methodology the job deserves rather than a scanner and a template
• Leading or joining red and blue team activity during military exercises
• Reviewing security designs against policy, and advising projects before decisions harden
• Briefing what you found to engineers, boards and senior officers, and writing it up so each audience can act on it
• Working closely with accreditation and configuration control bodies so findings turn into fixes

What you would bring

• More than three years of web application and IT infrastructure penetration testing
• Network security architecture, and vulnerability assessment across operating systems, software, protocols and networks
• System and network administration on both UNIX and Windows
• Scripting in at least one of Perl, Python, Ruby or a shell
• Authentication and security protocols, cryptography, application security, malware techniques and the defences against them
• Report writing you are proud of: executive summary, technical findings, a remediation plan

Why this one is worth a look

Real offensive work against serious targets, with exercises that most testers never get near.