Security Consultant / Penetration Tester, Intruder
£35-65k
Cloud-based vulnerability scanner
Job no longer available
Cloud-based vulnerability scanner
21-100 employees
Job no longer available
£35-65k
21-100 employees
Company mission
To find cyber security weaknesses before the hackers do.
Role
Who you are
- Have at least 1 year of industry experience in offensive security
- Be comfortable with client-facing calls, and penetration test scoping
- Have a technical academic background in cyber security or software engineering
- Have attained one or more of the following industry qualifications:
- CREST Certified Infrastructure Tester (CCT INF)
- CREST Certified Web Application Tester (CCT APP)
- CREST Registered Penetration Tester (CRT)
- Offensive Security Certified Professional (OSCP)
- Offensive Security Evasion Techniques and Breaching Defences (OSEP)
- Offensive Security Web Expert (OSWE)
- Penetration Testing and Ethical Hacking/Purple Team SANS courses
- Have experience in at least five of the following:
- Network penetration testing and a thorough understanding of network protocols
- Web application penetration testing and a thorough understanding of application layer vulnerabilities
- Automation of simple tasks and complex chains using Python, Ruby, or Go (Golang)
- Developing, extending, or modifying detection and fingerprinting in different formats, including NASL, YML, Python, Java
- Developing, extending, or modifying exploit code, shellcode or exploit tools
- Strong knowledge of tools used for web application, and network security testing including commercial vulnerability scanning engines
- Cloud services, including how to interact with, and assess them for weaknesses
- Demonstrate a high standard of technical aptitude
- Have excellent command of written English language
- Ability to document and explain technical details in a concise, understandable manner
- Be able and willing to manage their own time across multiple tasks
What the job involves
- You will be required to conduct continuous vulnerability discovery/bug hunting against a subset of our customers
- You will need to carry out checks from the penetration testing methodology at scale against multiple customers simultaneously
- This will require a problem-solving mindset and an ability to rapidly automate tasks
- As part of the continuous vulnerability discovery/bug hunting you will have to review automated scan results and triage results to determine whether findings are accurate
- You will also be required to independently perform external infrastructure, web application, and cloud-focused penetration tests. This will include the full delivery lifecycle from scoping through to final report delivery
- We need you to help maintain our methodologies and tooling and where appropriate suggest changes and make improvements, to ensure that we continue to detect the most recent vulnerabilities
- A core part of your role will be to contribute to the continuous improvement and maintenance of the Intruder platform itself
- Researching and appraising novel vulnerability detection and discovery techniques which can be incorporated into improved vulnerability scanning plans
- Identifying new and novel ways to reduce false-positive detections within our platform and working to provide proof-of-concept code
- Writing new security issue descriptions and recommendations to ensure that they are accurate, business impact focused, actionable, and comprehensive
- Tracking emerging vulnerabilities and attack techniques to discover additional weaknesses on Intruder customer networks
- You will also be expected to contribute to Intruder’s blog, either by producing content or helping others in the team develop content
- We're still a small team, so you'll also occasionally need to weigh in on a request from a customer or help at an event
Salary benchmarks
Our take
Intruder is a proactive security monitoring platform for internet-facing systems. It aims to help organisations reduce their cyber attack exposure by providing effortless cyber security.
Intruder was founded in 2015 to help solve the information overload crisis in vulnerability management. Having worked both as an ethical hacker for tier one companies, and for blue teams defending critical national infrastructure, Founder Chris Wallis noticed that while vulnerability management tools were great at finding issues, they were less useful when it came to prioritising them, tracking them, and timely alerting when problems arose. Quite simply - the most important issues were often getting lost in the noise. Intruder aims to help divide the needles from the haystack, focusing on what matters, while ignoring the rest. Effective cyber security is about getting the basics right - Intruder helps clients do that, saving time on the easy stuff, so they can focus on the rest.
Intruder believes that cyber threats are ever-changing and require dedicated oversight while existing services are overly complex to configure and operate. The jargon produced is often confusing, requiring specialist interpretation. Intruder aspires to provide a simple cloud-based security solution which continually scans clients' digital assets, highlighting vulnerabilities and outlining remediation advice in the simplest terms.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 3 rounds)
Oct 2020
$0.9m
SEED
Dec 2018
$0.5m
SEED
Total funding: $1.4m
Company benefits
- Share options so you can benefit from our success
- 28 days paid holiday plus bank holidays, and an additional 5 unpaid if you wish to take them
- Flexible working - you can work from home, but you should be in a position to work from our Shoreditch office 1-2 times a week if you're London-based
- Regular (optional) socials to have some fun. In the past we've explored virtual worlds, played laser tag in VR, and had way too much fun at the cabaret
Company HQ
London, UK
Leadership
Chris Wallis
(Co-Founder)Over a decade experience in cyber security. Worked for big four consulting and international finance organisations. Has advised numerous FTSE 100 companies on cyber security.
Patrick Craston
(CTO & Co-Founder)PhD. Computer Science specialising in artificial neural networks. Expert domain knowledge from six years experience working at one of the UK’s leading cyber security agencies.
Share this job