Penetration Tester

As a penetration tester at Claranet, you will able to deliver you own web application tests and through training and partnering, you will be involved in a full range of testing work from mobile app and infrastructure testing to social engineering and Red Team exercises.

Key Responsibilities:

• Undertaking web application and internal infrastructure testing engagements
• Using the opportunities provided by the business to improve skills and capabilities into all areas of testing
• Assisting with pre/post sales activities as required
• Encouraging a positive, proactive, collaborative and solution-oriented approach among colleagues
• Communicating within Claranet and with clients, both orally and in writing
• Contribute to the writing and publishing of whitepapers and advisories
• Developing and delivering webinar content
• Delivering targeted research and development in line with direction of the business
• Working towards CREST qualifications; CPSA, CRT and CCT

Essential Technical

• Have a good understanding of web application testing and methodologies
• Able to manually and proficiently exploit web application vulnerabilities
• Have a logical and time-conscious approach to report writing
• Have a working knowledge of common programming languages such as C, C++, C#, Java
• Have experience of at least one scripting language such as Ruby, Python or Perl

Essential Experience

• Delivering chargeable web app testing engagements
• Providing remediation advice
• Producing accurate technical reports
• Working under pressure of deadlines and structuring workload accordingly
• Problem-solving, helping others to understand complex ideas

Essential General

• Client facing, able to confidently and professionally represent the company
• Must be self-motivated and able to work in an independent manner as well as part of a team
• Excellent written and oral communications skills
• Positive, collaborative and enthusiastic
• Conducting penetration testing work out of normal office hours on occasion
• Willing to travel to deliver onsite work as required
• Appetite to shadow, train and develop to improve capabilities into all areas of security testing

In addition, the following are highly desirable:

• Security clearance
• CPSA
• CISSP, CISA, CEH, OSCP or equivalent reputable information security certifications
• Familiarity with testing cloud environments
• Public speaking experience
• Full UK driving license

Claranet combines pioneering technologies, practices, and expertise to propel our customers ambitions. Through a vibrant customer-centric culture of collaboration, learning, and opportunity, we nurture a dynamic community of the best technology and service expertise spanning cybersecurity, cloud, networks and unified communications. 

Founded in 1996, Claranet has evolved into a multi-disciplinary technology services provider with global reach. The company has annualised revenues of circa £350 million, over 6,500 customers, and more than 2,000 employees in nine countries. In the UK we have over 500 staff working in London, Gloucester, Warrington, Bristol and Leeds, or as homeworkers.  

Claranet consistently appears in The Sunday Times Top Track 250 as one of the fastest growing privately-owned businesses in the UK.

Claranet Cyber Security is a world class business unit within Claranet, designed to give customers access to market-leading information security expertise and services spanning; penetration testing, compliance consulting, training and managed services.

The penetration testing team at Claranet Cyber Security is composed of highly skilled, professional ethical hackers with a real passion for improving our clients’ security posture by demonstrating how systems can be compromised and what steps can be taken to defend. Team members work on everything from client projects to development work and training, dealing with large corporate penetration tests to gaining credit for published advisories. Our team is growing, and we need inspiring people to join us at all levels and help us to continue building a world leading cyber security operation whilst benefiting from a truly unique opportunity to fulfil their potential.