Penetration Tester (infrastructure) / Check Team Member

Summary:

CCL Solutions group are looking for Penetration Testers who want to get to the next level.

Reporting to:

Technical Director

Location:

Home Based

Department / Division:

Cyber

Application Deadline:

Main Job Summary

CCL Solutions group are looking for Penetration Testers who want to get to the next level. We are looking for people who live penetration testing and want to progress professionally to the next level. We want people with a hacker’s mind set and in return we will provide a competitive package, including training and mentoring days to help you achieve your professional goals.

‍

Main Duties & Responsibilities (other duties may be assigned):

Other duties may be assigned.

At CCL we are a team committed to making a real difference in protecting communities, businesses, and the critical infrastructure of the UK. As a Penetration Tester within CCL Solutions Group, you'll be tasked with carrying out a variety of security assessments, both onsite and remotely.

You will be assigned a Team Lead and once onboarded you will be tasked with conducting structured programs of security testing, consultancy, and research, as well as delivering detailed reports that highlight engagement outcomes, risk assessments, and remediation priorities.

Our Penetration Testers are not just a number, we invest in our team and encourage our members to progress and develop skills across the testing spectrum. We embrace mentorship for certs such as the OSCP and other industry training and exams, it is your responsibility to grow and work in a team that wants you to succeed.

Required Skill Set & Experience:

To perform this role successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

This role requires a person who can demonstrate the following capabilities:

Cyber Scheme Team Member (CSTM) or Crest Registered Penetration Tester (CRT). If you do not hold either, if you are able to demonstrate ability within infrastructure testing we want to hear from you.
Must be able to demonstrate infrastructure testing experience.
Knowledge of Cybersecurity practices, threat and vulnerability management and incident response methodologies.
Ability to work within a team and follow direction from Team Leads.
Penetration testing experience in Infrastructure environments is essential in this role. Windows Operating systems and Active Director should be part of your tool kit, and you should be able to exploit common vulnerabilities across a windows operating environment including On Premiss and Cloud architectures.

‍

Preferred:

Relevant security qualifications (such as OSCP, CREST CRT, OSEP, CCT INF)
Working knowledge of at least one of the following programming languages, PowerShell, Python, Ruby, or Perl, compiled languages such as C, C++, C#, Go, or Java.
Ability to collaborate with high-performing teams and maintain professional standards.
Agile experience and knowledge of the common frameworks is highly desired.

‍

Education:

BS/BA degree or equivalent experience

Core Role Competencies:

Knowledge of Windows/Linux/Unix/Mac operating systems; OS and software vulnerability and exploitation techniques.
Knowledge of Check Penetration Testing methodology and hold either (CSTM or CRT) or have the ability to attain this within 6 months of starting.
Working knowledge of commercial and open-source offensive security tools for reconnaissance, scanning, exploitation, and post exploitation (e.g. Metasploit, Burp Suite, Nmap).
Networking fundamentals including (all OSI layers, protocols and network services).
Knowledge of common Active Directory attacks and the ability to articulate in written and verbal form; steps to reproduce and take corrective actions.
Can produce reports and structured finding in a professional setting and manage time and communication effectivity.

Other Role Requirements:

Minimum 5 years UK residency.
Full driving licence.
Satisfactorily pass pre-hire and annual security clearance procedures in accordance with the ACPO(Association of Chief Police Officers) National Vetting Scheme.
Must hold SC or DV – OR - can attain and hold SC or DV (individuals must hold a minimum of SC (non-negotiable).

CCL is an equal opportunities employer and positively encourages applications from suitably qualified and eligible candidates regardless of sex, race, disability, age, sexual orientation, gender reassignment, religion or belief, marital status, or pregnancy and maternity. In applying for a role you acknowledge that your personal data is necessary to consider you for the advertised role. Your information will be processed in accordance with the CCL Group Privacy Notice and retained for a maximum period of 12 months.