Penetration Tester

Offensive Security Consultant (Penetration Tester)

At WorkNest Secure, we help organizations strengthen their cyber security posture through industry-leading security services and solutions. As we continue to grow, we're looking for talented CHECK Team Members to join our Offensive Security team.

This is an exciting opportunity to join a fast-growing cyber security business, where you'll play a key role in helping our clients identify and mitigate security risks. You'll deliver CHECK-accredited penetration tests across a range of technologies and environments, providing clear, actionable insights that help organizations remain secure and resilient. Working alongside a highly skilled team, you'll have the opportunity to contribute to challenging engagements, develop your expertise, and make a meaningful impact for our clients.

Responsibilities:

• Perform formal and comprehensive application, infrastructure and other penetration testing assessments where appropriate and required
• Provide well-written, concise, technical and non-technical reports in English
• Perform vulnerability assessments and provide findings with remediation actions
• Support with various client pre-engagement interactions, including scoping activities and proposal drafting to ensure that client needs are met
• Manage and deliver penetration testing project activities within strict deadlines
• Support the QA process to ensure high quality client reports are delivered in accordance with applicable Service Level Agreement (SLA)
• Any other appropriate job duties in line with the associated skill and experience of the post holder

Skills and experience required:

• Proven industry experience in application and infrastructure penetration testing
• CTM Status
• Deep knowledge of assessing both Windows and Linux environments, including strong knowledge of Active Directory and wireless technologies
• Ability in preparing and launching social engineering campaigns (both phishing and vishing)
• Strong understanding of OWASP, PTES and other penetration testing methodologies
• Knowledge of how modern web apps are designed, developed and deployed across different platforms
• Ability to program or script in your preferred language
• Relevant degree in Computer Science, Ethical Hacking, Engineering or other relevant subject
• Relevant security qualifications (such as OSCP, CEH, GPEN)
• Good knowledge and understanding of network and OS principles
• Good knowledge of various operating systems
• Good knowledge of virtualisation

Nice to have:

• Knowledge of assessing cloud and hybrid environments (AWS and Azure)
• Knowledge of assessing mobile applications (iOS/Android)
• Knowledge of assessing hardware and embedded IoT devices

Personal Attributes:

• Excellent spoken and written communication skills with strong attention-to-detail and accuracy
• A passion for security and networks
• Analytical and problem-solving skills with a can-do attitude and the ability to think laterally
• Self-motivation with a commitment to continued development
• Ability to work independently and as part of a team
• Influencing and negotiation skills with the ability to build relationships at all levels
• Willingness to learn

Benefits:

• 25 days annual leave plus birthday leave
• Company pension
• Subsidised gym membership
• Employee benefits platform
• Regular team events
• Private healthcare (individual cover)
• Learning allowance for personal development
• Flexible working policy

If you're passionate about offensive security and committed to technical excellence, we'd love for you to join our team.