Overview
We are seeking a Cyber Security Consultant to lead penetration testing initiatives within a Government environment as part of our commitment to enhancing security capabilities. This role requires an experienced individual who can blend technical prowess with leadership, mentoring junior staff, and contributing strategic insights. The successful candidate will manage various security assessment activities across cloud platforms and traditional infrastructures, ensuring effective communication of findings to both technical and non-technical stakeholders. The position is offered as a remote, outside IR35 contract, allowing flexibility while focusing on enhancing an organization's security posture.
Responsibilities
- Plan, scope, and lead penetration testing assignments from engagement to final reporting.
- Conduct security testing across cloud platforms, applications, networks, and infrastructure.
- Assess the security of environments hosted within Microsoft Azure and Amazon Web Services (AWS).
- Perform web application and infrastructure penetration testing, identifying and demonstrating vulnerabilities.
- Evaluate security within containerized environments and CI/CD pipelines.
- Review architectural designs to pinpoint vulnerabilities and suggest improvements.
- Produce detailed technical reports documenting vulnerabilities, risks, and remediation recommendations.
- Coach and support junior and mid-level penetration testers through knowledge sharing and development activities.
Requirements
- Extensive experience in performing security testing within Azure and AWS environments.
- Strong background in web application penetration testing and network security assessments.
- Proficient in identifying, exploiting, and validating vulnerabilities in complex environments.
- Familiarity with containerized environments and understanding security implications of Docker and Kubernetes.
- In-depth knowledge of automated deployment and CI/CD pipeline security challenges.
- Ability to assess security architectures from an attacker's perspective.
- Active UK Security Check (SC) clearance is mandatory.
- Full and unrestricted Right to Work in the United Kingdom is required.