Cyber Penetration Tester

Six Degrees Group

Six Degrees is a leading secure, integrated cloud services provider, where everyone is welcome. We believe success lies in harnessing a truly diverse and inclusive culture.

Our business protects UK organisations with the goal of enabling them to operate effectively and securely in the cloud, by giving them secure platforms to innovate and grow. We support our customers on their digital transformation journey regardless of their maturity.

Our vision is to be the UK’s nuber one provider of secure, integrated cloud services to the small to mid-size market.

The Cyber Penetration Tester team consist of experienced and highly qualified penetration testers, they are also experts in forensics and are responsible for testing 1000’s of applications, systems, environments, and devices every year.

Although this role is remote, as the Cyber Penetration Tester, you may still need to visit client sites as required. The team conducts regular research on vulnerabilities, compiles threat intelligence, and supports clients in enhancing their data security.

Our Cyber Penetration Testers are responsible for working under general supervision and on discrete tasks when performing penetration tests and general cyber security consultancy.

They will demonstrate an analytical and systemic approach to penetration testing, act as a subject matter expert while performing consultancy, and be able to apply their own initiative and work on given tasks without prompt.

KEY RESPONSIBILITIES

• Performs penetration tests and consultancy, which may be complex and non-routine, in a variety of environments.

• Scopes penetration tests accurately and ensures personal compliance with relevant legislation and standards.

• Ensures appropriate tools and techniques are used during a penetration test.

• Works under guidance with little input from senior staff while maintaining a high level of professionalism (including time management).

• Expert use of enumeration tools and techniques, as well as exploitation frameworks.

• Check, compile and use exploitation code.

• Identify and exploit complex vulnerabilities.

• Complete reports unguided and to a high standard.

• Undertake effective regular working level communication with customers.

• Manually validates accuracy of automated results, without relying on automated tools.

• Communicates penetration test results to both technical and non-technical audiences, facilitating collaboration between stakeholders where necessary.

• Has and maintains expert level knowledge in a specialist area.

EXPERIENCE

• Experience within multiple areas of testing (e.g., Mobile Applications, Thick Clients, Internal/External Infrastructures, Social Engineering, Configuration Reviews)

• Influences peers and customers by delivering presentations, papers, and reports on the results of penetration testing

• Understands information technology and actively maintains awareness of developments in the penetration testing and information security fields

• Participates in technical and/or professional development activities beyond their own team, sharing knowledge with colleagues to improve the penetration testing services.

SKILLS

• Excellent communication skills.

• High integrity and honesty.

• A proven enthusiast, who can work well within a penetration test team.

• An active member in the penetration testing community.

• Professional, driven and independent by nature.

• Innovative and creative.

• Highly driven and motivated.

• Results-oriented with a keen sense for priorities and deadlines.

MUST HAVE

• Cyber Scheme Team Member

• CREST Registered Tester

• CHECK Team Member

• OSCP

• AWS Certified Cloud Practitioner

• CISSP