Security Testing Consultant

You will be joining a team responsible for delivering and developing security testing capability across a range of projects and environments., As a Security Testing Consultant, you will perform internally led security testing and support the continued development of the security testing capability. You will work closely with project teams, project managers and programme leads to define, estimate and deliver agreed security testing activities., * Perform internally led security testing.

• Contribute to the development of security principles, policies and technical standards.
• Engage with project teams to identify, estimate and complete security testing activities.
• Help build team capability and establish testing methodologies.
• Create processes, playbooks and document sets to support the security testing capability.
• Produce formal technical proposals and reports using HMRC standard templates.
• Provide security testing guidance and advice to projects.
• Review testing scopes and manage engagement with third-party penetration testers where CHECK testing is required.
• Create scopes, proposals and reports for internal testing work.
• Support the development of the Security Testing Strategy and associated outputs.
• Develop a Secure by Design framework for security testing, documenting testing approaches against control sets.
• Scope, conduct and support security assessments, penetration testing and other non-functional security testing.
• Record and communicate security testing findings appropriately.
• Provide vulnerability management and continual security compliance expertise across on-premises and cloud-based solutions.
• Provide subject matter expertise across a range of security testing requirements.
• Act as an escalation point for security testing-related incidents.
• Lead assessments of threats and vulnerabilities, identifying deviations from acceptable or defined baselines.
• Communicate threat, vulnerability and risk information clearly to stakeholders.
• Assist with the development and delivery of security testing documentation.
• Research and assess new threats and security or vulnerability alerts, recommending remedial actions.

What you’ll need to succeedEssential skills and experience

• Experience performing security testing.
• Experience developing or contributing to test strategies.
• Relevant security testing experience and equivalent qualifications.
• Experience scoping and supporting security assessments and penetration testing.
• Experience producing technical testing proposals, scopes and reports.
• Vulnerability management experience.
• Security compliance experience across on-premises and cloud-based solutions.
• Experience assessing threats and vulnerabilities.
• Ability to communicate technical security risks and findings clearly to stakeholders.
• Ability to work collaboratively with project managers, programme leads and project teams.
• Eligibility for SC clearance., * Adaptability
• C++ Programming
• Incident Response
• Infrastructure Management
• Penetration Testing
• Python Programming
• Reverse Engineering
• Scripting
• Testing Skills
• Vulnerability Assessment