Lead Penetration Tester

About the Role

Our client is seeking an accomplished Lead Penetration Tester to spearhead their offensive security initiatives from their Newcastle upon Tyne office. This role is crucial for proactively identifying vulnerabilities in our client's systems, applications, and networks before they can be exploited by malicious actors. You will lead a team of testers, design sophisticated attack simulations, and provide actionable insights to strengthen our defenses. This is a challenging opportunity for a seasoned security professional who excels at thinking like an attacker and driving significant improvements in the organization's security posture, working within a collaborative and forward-thinking IT department.

Key Responsibilities

• Plan, execute, and lead comprehensive penetration tests across web applications, networks, and infrastructure.
• Develop and refine penetration testing methodologies and tools to simulate real-world attack scenarios.
• Analyze test results, document findings meticulously, and present detailed reports with actionable remediation recommendations to stakeholders.
• Mentor and guide junior penetration testers, fostering a culture of continuous learning and skill development within the team.
• Collaborate with development and operations teams to ensure security is integrated into the software development lifecycle and system deployments.
• Research and stay current with the latest attack vectors, vulnerabilities, and security technologies.

Requirements

• Proven experience as a Penetration Tester or in a similar offensive security role.
• Strong understanding of common vulnerabilities (e.g., OWASP Top 10) and exploitation techniques.
• Proficiency with penetration testing tools and frameworks such as Metasploit, Burp Suite, Nmap, and Kali Linux.
• Experience in scripting or programming languages (e.g., Python, PowerShell) for automation and tool development.
• Excellent report writing and presentation skills, with the ability to clearly articulate complex technical issues.
• Relevant certifications such as OSCP, GPEN, or CEH are highly desirable.

Benefits

• Highly competitive salary package with performance incentives.
• Opportunity to lead a specialized security team and influence security strategy.
• Comprehensive health, dental, and vision insurance plans.
• Generous pension scheme and life assurance.
• Access to cutting-edge security tools and professional development resources.