Cyber Security Specialist – Pen Test

We are seeking a highly skilled and motivated Penetration Tester to join our growing security focused team. As a Penetration Tester, you will play a critical role in identifying vulnerabilities, conducting risk analysis, provide remediation recommendations, conduct research and development work to uplift our internal penetration testing capabilities.

You will have led the technical response to cyber security within your existing role and would like to make the move to an organisation with the focus and resources to allow you to progress your career in cyber security.

You will be able to comfortably hold and contribute to technical discussion across a wide range of technical disciplines such as networks, servers, storage applications and developers.

Key Accountabilities:

• Commitment to continuous improvement – Having the experience to apply creative and diverse thinking and share innovative approaches in an ever changing cyber environment.
• Creating an adaptive operating environment – working across different systems and services with a strategic mindset, and coordinating teams and resources.
• Planning and Prioritising – strategically managing time, priorities and responsibilities within projects.
• Writing and preparing written documents to a high standard, whilst applying lateral thinking to our security approaches.
• Upholding integrity – Ensuring the highest ethical standards are applied and upheld.
• Enabling through leadership – Developing the capability of our people by ensuring the have the correct tools and technology to safely deliver Our Business.

Ideally, a successful candidate should possess the following attributes:

• Relevant professional certification such as OSCP and eCPPT is required.
• Proficiency in penetration testing tools such as Nmap, FFUF, BurpSuite, Impacket.
• Familiarity with programming and scripting languages (e.g. Python, Perl, Bash) for automation and tool development.
• Good understanding of penetration testing standards and methodologies such as OWASP, OSSTMM, PTES.
• Strong understanding of security frameworks such as the NZISM, MITRE ATT&CK, NIST, CIS.
• Strong general knowledge in computer science, such as operating system, file systems, OSI network stack.
• Strong communications and report writing abilities to effectively convey technical information to both technical and non-technical stakeholders.

Salt is acting as an Employment Agency in relation to this vacancy.