Penetration Tester

We are looking for a Penetration Tester to join our internal testing team. You will deliver a range of security assurance services such as web application penetration tests, network, and infrastructure penetration tests. You will be exposed to cutting edge Cloud technologies. You may also undertake social engineering engagements and physical security assessments and secure code reviews.

We believe that the key deliverable of any security test is the report. You will prepare high-quality reports detailing findings and making key recommendations. Your findings will feed into our ongoing vulnerability management process, will have a significant impact, and will create change across the business.

You will work alongside IT and development project teams to ensure that all our services – both to our customers and to our staff – are delivered in a secure manner. You will question information that others would take on face value and remain inquisitive to improve the quality of security tests carried out against our infrastructure and applications.

Key Responsibilities

• Carry out detailed application, infrastructure and/or cloud penetration test assignments either alone or in a small team
• Write high quality reports
• Work collaboratively with the wider Information Security teams
• Assist with post incident reviews when required

Essential Experience/Skills

• Report writing skills
• Familiarity with ‘standard’ penetration testing tools

Highly Desirable Skills

• Experience in penetration testing of Applications and Infrastructure
• Familiarity with at least one cloud platform such as Microsoft Azure, Amazon AWS or Google GCP
• Understanding of the Cyber Kill Chain, MITRE ATT&CK and other information security defence and intelligence frameworks
• Programming or scripting skills in at least one modern computer language
• Experience with BurpSuite, Kali and similar common manual penetration testing tools

We provide a generous training budget. Members of the team have chosen to undertake numerous training courses and further certifications including SANS and CREST. We expect you to keep up to date on current security trends, techniques, and tools. We love gamifying security training, and staff are encouraged to take part in CTFs. You will also be encouraged to attend conferences, seminars, and industry briefings.

Salary, Benefits, and Work-Life Balance

We do not have a set salary for this position, as it will be dependent on the successful candidate’s experience. We are happy to see CVs from all candidates who meet the requirements and will be happy to discuss the remuneration package.

At Admiral, we are proud to be a diverse business where we put our people and customers first. We have great benefits to ensure employees have a great work-life balance; it's one of the reasons we’re consistently voted one of the Sunday Times Best Big Companies to work for in the UK. We want you to have an element of freedom to define a working lifestyle that supports this, so accommodate flexible hours wherever possible.

All colleagues will receive 33 days holiday (including banks holidays) when they join us, and this will increase with length of service, up to a maximum of 38 days (including banks holidays). You also have the option to buy or sell up to five days of annual leave in addition to your allocation.

You can also view some of our other key benefits here.

#LI-KG1