Penetration Tester Full Time

King’s Cross, Isle Of Arran
SKY
We believe in better. And we make it happen.

Better content. Better products. And better careers.

Working in Tech, Product or Data at Sky is about building the next and the new. From broadband to broadcast, streaming to mobile, SkyQ to Sky Glass, we never stand still. We optimise and innovate.

We turn big ideas into the products, content and services millions of people love.

And we do it all right here at Sky.

What you’ll do:

As Sky continue to innovate and evolve its products and services, cyber security testing is required to ensure a proactive approach to identifying and managing weaknesses in the physical and logical technology infrastructure, applications, people, or processes through techniques such as penetration testing and Red Team exercises.

This role is an exciting opportunity to join us and work within our Cyber Security Testing Team. The successful candidate will be managing large projects, conducting QA on security testing reports, improving processes and procedures of the department and being technical point of contact for security issues.

• Presents exciting opportunity for an ambitious individual looking to broaden their technical skills.
• There will be a s trong focus on infrastructure and application penetration tests including web, mobile, and desktop applications, wireless network testing, VoIP, IoT, network device s, and cloud rule set review across different Sky products and services.
• The candidate will manage security test projects, working closely with the requestors to understand the scope and overall risk , deliver the security test, report, and help teams remediate security findings.
• Manage security related projects and be able to delegate tasks within these projects.
• Become a subject matter expert within different areas of penetration testing.
• Creat e new penetration testing methods and writ e scripts to identify vulnerabilities.
• Work on personal security related projects of your choosing including contributing to technical blogs and other internal resources.
• Help build and maintain the team though internal training, building our infrastructure and tooling or helping to plan and execute engagements.

What you’ll bring:

• Passionate about Cyber Security.
• 6+ years practical experience with Penetration Testing.
• Efficient spoken , written communication and presentation skills with strong attention to detail and accuracy.

• Proactive and able to work independently and as part of a team.
• Excellent teamwork skills to collaborate, share and support colleagues.
• Ethical integrity to be trusted with confidential information.
• Unique problem-solving skills, analytical with a can-do attitude and the ability to think laterally. Able to think creatively and strategically to penetrate security systems.
• Strong understanding of open source, freeware, and commercial penetration testing and vulnerability assessment tools.
• Experience with penetration testing frameworks.
• Good time management and organisational skills to meet strict deadlines.
• Self-motivation with a commitment to continued development.
• Commitment to continuously update and improve internal processes and technical knowledge base.
• Able to explain your methods to a technical and non-technical audience.

Knowledge of common pen tests and application security tools, such as:

• Kali Linux
• Burpsuite
• Metasploit
• Wireshark
• Nipper
• Nmap
• Nessus, and others.

Qualifications

To qualify for the role, you should have either one or more of the following:

• Offensive Security Certified Professional (OSCP (PEN200), OSEP (PEN300), WEB200 (OSWA), WEB300 (OSWE), PEN-210 (OSWP
• CREST Certificated Tester (C CT APP and/or CCT INF )
• CREST Practitioner Security Analyst (CPSA)
• Cyber Scheme Team Member (CSTM)
• GIAC

Team overview

Cyber Security

Our products, platforms and technologies are constantly evolving that’s why keeping Sky safe from cyber-attacks is one of our top priorities. Our Cyber Security team helps the business grow while protecting our customers, colleagues and partners from increasingly sophisticated cyber threats. Our team includes Cyber Fusion Centre, Security Services, Risk and Compliance, Programme Delivery and Business Security, and we work across the UK, Italy and Germany. Join us and you’ll get involved in tackling challenges and future threats in an ever-changing cyber landscape.

The rewards

There’s one thing people can’t stop talking about when it comes to : the perks . Here’s a taster:

• Sky Q, for the TV you lov