Penetration Tester - Cloud Security, Active Directory, APIs

Market Rate (Inside IR35)

6 Months initially

Hybrid in London

A client of mine is looking for a hands-on Penetration Tester to support their cybersecurity function, with some responsibilities across security operations and incident response. The right candidate will have experience conducting infrastructure, Web Application, API, Cloud and Active Directory penetration tests within complex environments.

Key Requirements:

• Proven commercial experience as a Penetration Tester, within a large enterprise environment.
• Strong hands-on Penetration Testing experience across Web Applications, APIs, infrastructure, Active Directory and cloud environments.
• Proven experience conducting End-to-End Penetration Testing including scoping, execution, reporting and retesting.
• Comfortable identifying, exploiting and validating vulnerabilities and providing remediation recommendations.
• Knowledge of technologies such as Pentera, AppCheck, Microsoft Defender, Splunk, CrowdStrike or similar.
• Exposure to vulnerability management and working with technical teams to remediate findings.
• Comfortable supporting incident response activities, including triage, investigation and containment.
• Experience using SIEM and security monitoring tools for alert analysis and threat detection.
• Strong communication skills with the ability to explain technical findings to technical and non-technical stakeholders.

Nice to have:

• Immediately Available
• Experience with vulnerability management programmes and MSSP engagement.
• Relevant certifications such as OSCP, CREST CRT/CCT, CTM, CISSP or GIAC.
• Previous experience within Higher Education, Public Sector or a large complex enterprise environment.

4828163 - Raluca

A client of mine is looking for a hands-on Penetration Tester to support their cybersecurity function, with some responsibilities across security operations and incident response. The right candidate will have experience conducting infrastructure, Web Application, API, Cloud and Active Directory penetration tests within complex environments.

Key Requirements:

• Proven commercial experience as a Penetration Tester, within a large enterprise environment.
• Strong hands-on Penetration Testing experience across Web Applications, APIs, infrastructure, Active Directory and cloud environments.
• Proven experience conducting End-to-End Penetration Testing including scoping, execution, reporting and retesting.
• Comfortable identifying, exploiting and validating vulnerabilities and providing remediation recommendations.
• Knowledge of technologies such as Pentera, AppCheck, Microsoft Defender, Splunk, CrowdStrike or similar.
• Exposure to vulnerability management and working with technical teams to remediate findings.
• Comfortable supporting incident response activities, including triage, investigation and containment.
• Experience using SIEM and security monitoring tools for alert analysis and threat detection.
• Strong communication skills with the ability to explain technical findings to technical and non-technical stakeholders.

Nice to have:

• Immediately Available
• Experience with vulnerability management programmes and MSSP engagement.
• Relevant certifications such as OSCP, CREST CRT/CCT, CTM, CISSP or GIAC.
• Previous experience within Higher Education, Public Sector or a large complex enterprise environment.