Go to job search

Penetration Test Lead

NTT DATA, City of Westminster

Penetration Test Lead

Salary not available. View on company website.

NTT DATA, City of Westminster

  • Full time
  • Permanent
  • Onsite working

Posted today, 23 Nov | Get your application in now to be one of the first to apply.

Closing date: Closing date not specified

job Ref: 9e15c46bc3a1447cb3790bdb8b56b94d

Full Job Description

  • Providing high-quality reporting and communicating findings to clients.
  • Document test plans, execution plans and Use Cases
  • Conducting security research and creating technical content
  • Ability to support Security Monitoring (blue team) to ensure tests are adequately detected and responded to appropriately.
  • Manage client's annual penetration testing schedule Responsible for Cybersecurity OT & IT Annual Penetration testing lifecycle.
    • Responsible for delivering defined volume of pen tests across Application, Infrastructure, Websites, Api's, O365, Azure, AWS and OT environments. Responsible for identifying & tiering OT & IT assets, services & systems to build on the current Tiering system identified in the Discovery phase. Prioritisation, detailed planning & scheduling of all Pen Test engagements. Ensuring weekly, monthly & annual testing exercises and scheduled based on Tiering. Engage with Product Group owners & internal stakeholders as part of the discovery phase to ensure that there will be no duplications of effort around pre-existing / pre-planned pen test engagements (Application, Infrastructure, Websites, Api's, O365, Azure, AWS and OT environments) Manage Annual Pen test Supplier engagements and relationships. Manage all onboarding and offboarding of 3rd party Supplier resources, ensuring they have all required accounts / privilege / physical security badges etc to be able to start their engagement. Build and own all required and relevant policies and procedures around pen testing adhering Best Practices & NCSC guidance. Review 3rd parties pen test reports, briefing internal stakeholders on findings. Capture and document the findings, risks and exceptions and recommend remediation. Collaborate with IT and cybersecurity teams to enhance security protocols and remediate finding. Tracking progression of remediation tasks. Reporting on a weekly basis to internal stakeholders on progress and any blockers. Building secure Power Bi dashboards to report on progress. Update the CMDB with the relevant vulnerabilities. Ensure this is highly secured. Provide monthly reporting on remediation activities and track progress to Cybersecurity & I. T Management team. Manage the patching regime to remediate the identified pen test vulnerabilities. Confirm with BAU Vulnerability Management team that there is no duplication of effort., We offer a range of tailored benefits that support your physical, emotional, and financial wellbeing. Our Learning and Development team ensure that there are continuous growth and development opportunities for our people.

  • Professional penetration testing experience covering one or more of the following domains : OT, networks, API's, web application, Cloud, red teaming and social engineering.
  • SC Clearance, or capable of obtaining SC Clearance
  • Strong understanding of both OT & IT asset profiles, technology & security best practice principles.
  • Strong understanding of network protocols, cryptography, and security vulnerabilities.
  • Hold at least an OSCP, CREST CRT or equivalent certification.
  • Experience of scoping penetration tests.
  • Proficiency with penetration testing tools.
  • Strong stakeholder engagement and relationship management
  • Excellent written and verbal communication skills.
  • Good organisation and time management ability.
    • In addition, the following would be desirable :
  • Breach Attack Simulation
  • Vulnerability Management
  • Risk Management
  • AWS, Azure, GCP security review experience.
  • ISO 27001 auditing / implementation experience.
  • Other cyber security certifications such as CISM, CISSP, ECSA, CREST CCT.

    NTT DATA is one of the worlds largest Global Security services providers with over 7,500 Security SMEs and Integration partner to many of the worlds most recognised Security Technology providers.
    • We strive to hire exceptional, innovative, and passionate individuals who want to grow with us. In a constantly changing world, we work together with our people, clients and communities to enable them to fulfil their potential to do great things. We believe that by bringing everyone together, we can solve problems using innovative technology that can create a world that is sustainable and secure., We're a business with a global reach that empowers local teams, and we undertake hugely exciting work that is genuinely changing the world. Our advanced portfolio of consulting, applications, business process, cloud, and infrastructure services will allow you to achieve great things by working with brilliant colleagues, and clients, on exciting projects. Our inclusive work environment prioritises mutual respect, accountability, and continuous learning for all our people. This approach fosters collaboration, well-being, growth, and agility, leading to a more diverse, innovative, and competitive organisation. We are also proud to share that we have a range of Inclusion Networks such as : the Women's Business Network, Cultural and Ethnicity Network, LGBTQ+ & Allies Network, Neurodiversity Network and the Parent Network.

Relevant jobs