Senior Security Consultant

Responsibilities

• Work individually or as a part of team delivering security assessments to NotSoSecure clients both remotely and onsite
• Perform web application penetration testing, infrastructure penetration testing, code reviews and/or mobile application penetration testing
• Exploit vulnerabilities identified in client systems
• Create assessment reports explaining technical and business risk of the vulnerabilities discovered including remediation recommendations for the clients
• Communicate vulnerabilities to clients
• Manage project related tasks as per communicated deadlines
• Handle client communication and collaborate with the team
• Keep abreast with latest technology risks and utilise them in projects
• Participate in project conference calls and lead the technical content on the call
• Support sales team during business development calls
• Participate in scoping efforts
• Provide technical mentorship to junior team members

Contribute to the security industry through presentations, whitepapers and/or 

Key Skills and Requirements

• 3+ years of experience in Information Security focussing on penetration testing
• 2+ years of client facing consulting work experience performing penetration testing
• Strong technical skills in the areas of web application and web services penetration testing, infrastructure penetration testing and mobile apps penetration testing
• Experience of code review in at least one programming language
• Familiarity with public cloud platforms such as AWS, Azure and Google Cloud Platform
• Programming language skills such as Java, .NET, C or C++ (nice to have)
• Experience working with at least one scripting languages such as Python, Ruby, Bash, Javascript, etc.
• Strong operating systems skills such as Windows, Linux etc
• Excellent english language skills and ability communicate complex vulnerabilities to clients
• Produced research papers, delivered presentations, and/or contributed to blogs
• Demonstrate high ethical standards 
• Ability and Desire to travel upto 25% of the time (both nationally and globally)

Claranet combine pioneering technologies, practices, and expertise to propel our customers ambitions. Through a vibrant customer centric culture of collaboration, learning, and opportunity, we nurture a dynamic community of the best technology and service expertise spanning cloud, cybersecurity, networks and unified communications.  

Founded in 1996, Claranet has evolved into a multi-disciplinary technology services provider with global reach. The company has annualised revenues of over £400 million, over 10,000 business customers, and more than 2,500 employees in ten countries. 

Claranet Cyber Security is a world class business unit within Claranet, giving customers access to market-leading information security services spanning cybersecurity training, consulting, and managed security services. Formed through the combined forces of NotSoSecure, the UK Security Business Unit (previously known as Sec-1), and units in France and Portugal. 

NotSoSecure has a strong heritage of security training and penetration testing for leading worldwide brands, built on the quality of its technical team and excellent customer service. R&D remains core to maintaining and growing our capability, recently allowing us to claim considerable expertise in cloud security testing and in proactively driving the security of applications (including through ‘DevSecOps’ work). Built on the foundations of the NotSoSecure business, the Claranet Cyber Security operation in India provides services to Claranet customers all over the globe and we are planning on considerable expansion of both capability and capacity in the coming years.