Penetration Tester, Ekco
Cloud and digital transformation provider
Be an early applicant
Cloud and digital transformation provider
201-500 employees
Be an early applicant
201-500 employees
Company mission
To enable companies to progress along the path of cloud maturity, managing transformation and driving better outcomes from our customers’ existing technology investments.
Role
Who you are
- Excellent written and verbal communication skills, with the ability to convey technical concepts in a clear and concise manner to both technical and non-technical clients
- Degree in Computer Science, Information Security, or experience in a related field
- Relevant industry certifications (e.g., OSCP, PNPT, CREST CPSA,CRT accredited certs, SANS) and/or experience in mobile applications, thick client applications, Citrix and Secure Code Review are highly desirable
- Proven track record as a Penetration Tester, with significant experience in application, infrastructure and API security testing. A minimum of 1-2 years of experience in professional penetration testing is required
- Extensive expertise in security vulnerabilities, threats, and attack vectors, coupled with a thorough understanding of industry best practices and standards (e.g., OWASP, NIST, PTES)
- Solid understanding of application frameworks and architectures, operating systems (Windows, Unix), and underlying technologies
- Hands-on experience performing mobile application penetration testing across Android and iOS platforms is highly desirable, including analysis of mobile app architectures, secure storage, authentication mechanisms, and inter-app communication
- Proficiency in using cutting-edge penetration testing tools and frameworks (e.g., Burp Suite Professional, Nmap, Nessus, Metasploit, SoapUI/Postman/ReadyAPI)
- Strong understanding of programming and scripting (e.g., Python, Bash) to automate testing processes and develop custom scripts tailored to client’s specific needs is a plus
- Demonstrated ability to work independently and collaboratively within a team, effectively managing multiple testing engagements, meeting deadlines, and delivering high-quality results
What the job involves
- We are looking for a skilled and aspiring Penetration Tester to join our team of security consultants. This is a hybrid role, where you may be required to perform Penetration Testing engagements on client-site locations.
- As a Penetration Tester, you will play a crucial role in assessing and reporting on the security posture of our internal client’s applications, infrastructure, APIs, servers and endpoints, identifying vulnerabilities that could be exploited by malicious individuals or attackers.
- Your deep knowledge of app security, penetration testing methodologies, and industry best practices will be instrumental in ensuring the confidentiality, integrity, and availability of our client’s systems
- Conduct comprehensive penetration tests on clients' systems across various platforms (including web applications, thick client applications, infrastructure, APIs, cloud platforms) to identify security vulnerabilities, weaknesses, and potential risks
- Carry out Penetration Tests both onsite, at client locations and remotely, depending on the requirements of the project
- Utilise, develop and execute customized test plans, methodologies, and tools for penetration testing, focusing on both network and application layers, tailored to the client’s specific needs and requirements. Follow leading testing standards and methodologies such as OWASP and NIST
- Evaluate system architectures and designs to identify potential security flaws and provide strategic recommendations for risk mitigation
- Collaborate closely with clients and their development teams to gain a deep understanding of the architecture, codebase, and underlying technologies, offering guidance on issue remediation and secure coding practices
- Utilise a wide range of manual and automated tools to conduct penetration testing
- Prepare detailed and comprehensive reports documenting identified vulnerabilities, their potential impact, and actionable remediation strategies, effectively communicating findings to clients
- Stay abreast of the latest security threats, vulnerabilities, and attack vectors, proactively advising clients on emerging risks and recommending appropriate countermeasures
- Collaborate with cross-functional teams of security professionals to implement tailored security best practices and guide clients in the secure development and deployment of applications and systems
- Provide expert support during security incident response activities, assisting clients in investigating and remediating mobile app security incidents
Our take
While digital transformation is essential for modern businesses to remain competitive and for government agencies to deliver their services in an increasingly online world, the majority of organisations fail to manage this process alone. Ekco, a provider of specialist cloud and consultancy services, exists to help companies through the massive technological and cultural changes needed to make digital transformation work.
While numerous firms operate in this space, Ekco stands out for its security-first approach which stems from its origins as a cloud backup and disaster recovery business. It also boasts expert local knowledge, gained from years of experience and a string of canny strategic acquisitions which have seen it rapidly expand from Ireland into the UK and the Netherlands.
Having acquired Unite Technology Solutions, Ward Solutions, Kontex and Caveo Solutions in 2021 and 2022 alone, Ekco was in turn acquired by London-based Corten Capital. It is now focusing on hiring additional talent to develop its offering in its current markets. In the longer term it seems set to continue its growth through further acquisitions, with a goal of becoming Europe's leading managed cloud and cybersecurity provider.
Steph
Company Specialist at Welcome to the Jungle
Insights
25% employee growth in 12 months
Company
Funding (last 2 of 3 rounds)
Aug 2021
$23.6m
LATE VC
Feb 2020
$9.9m
LATE VC
Total funding: $42.8m
Company benefits
- Flexible, family friendly working options
- Your progression and development is encouraged
- Top partner status across various technologies, including VMware and Veeam
- Learning & development – Unlimited access to Udemy learning platform
- Time off – 25 days leave + public holidays
- X1 day Birthday leave per year
- A lot of responsibilities & opportunities to grow (also internationally)
- Company Pension Scheme
Company HQ
City of London, London, UK
Leadership
Eoin Blacklock
(CEO)Was previously Managing Director at j2 Global. Before that was Founder & CEO of KeepItSafe.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 5 more jobs at Ekco