Lead Penetration Tester

This established financial services firm seeks an experienced and certified Penetration Tester to build and lead a new internal penetration testing service.

The firm has been using 3rd parties for penetration testing until now, but the decision has now been made to bring this in-house. This is a rare opportunity to build, own and lead the service.

The ideal candidate will be an experienced penetration tester with one of the following certifications: OSCP, CRT or GPEN. You should have hands-on webapp and infrastructure pentesting experience gained in either an in-house team or a consultancy firm doing testing for clients. Cloud and mobile testing skills are beneficial.

The role will be 80% hands-on initially, with a view to building a team under you in the medium term. Previous management experience is not required, but you must be interested to take on line management responsibilities in the future. Strong communication skills are needed with the ability to translate technical into non-technical for a wide ranging stakeholder audience.

This role offers excellent career progression as the service matures, with development of red teaming and purple teaming services in the medium to longer term.

Hybrid: 2 days a week in the London or Scotland office. Excellent base salary and bonus potential.

Unfortunately visa sponsorship is not available.