Senior penetration tester/Penetration tester - Remote

About the team and the role:

This role is in the Penetration Testing Team, which sits within the arm of the organisation providing cyber security services, ensuring that our capabilities and expertise are applied cost-effectively and imaginatively. This provides a high-quality facility to protect the JANET network from intrusion, denial of service and all other service-impacting potential threats and attacks. Our work areas include network operations, security, trust and identity, cloud and brokerage services, data centres and co-location, video services and e-infrastructure.

We are looking to recruit an experienced penetration tester to deliver technical engagements to member organisations, strategic partners, and internally to Jisc stakeholders. At this time, we are specifically seeking a candidate with experience testing web applications. Continued training and certification in key areas associated with security will be offered regularly.

This role can be offered at Penetration tester or Senior penetration tester level dependant on skillset and experience.

Responsibilities will include:

• Conducting penetration test activities remotely, and at member sites where necessary. In line with your skills, carry out tests both collaboratively with team members and independently. We offer services include infrastructure testing, web applications testing, build reviews, Active Directory review, cloud service testing, social engineering simulation, on-site physical assessments, and physical infiltration.
• Assisting in developing and implementing security best practices internally and across the sector.
• Providing guidance on suitable penetration testing and defensive methodologies for cloud and local services.
• Providing appropriate briefings to a range of different management audiences, simplifying complex security data and provide guidance on suitable penetration testing and defensive methods.
• Providing advice and support to other teams, customers and third-party suppliers on detected security threats and advising of best course of action.
• Engaging with members directly to scope tests and recommend appropriate testing activities.

Key Skills and Experience:

• Experience with penetration testing, being able to deliver technical tests and reporting.
• Experience conducting web application penetration testing.
• Demonstrable experience of operating a range of industry standard tools for testing.
• Experience of producing high quality deliverables working alone and as part of a team.
• It would be ideal if you have worked within the education and research environment, as would experience of working and developing Microsoft products, including Active Directory and Azure, Digital Forensics, AWS architecture.
• Educated to at least degree level OR equivalent relevant demonstrable experience.

Why work for us?

At Jisc, everyone plays a key role and gets the chance to feel part of it, that to us is the definition of a meaningful career. We want to create a culture of lifelong learning. You can look forward to a rewarding job with opportunities to develop and make a real difference to the education and research sectors.

We believe a balance between your personal and professional life is essential to your happiness and fulfilment. We work flexibly at Jisc and focus on outputs rather than presenteeism and are open to a whole range of ways of working.

It isn't about how many hours you spend at home or at work; it's about the flow you establish that brings energy to both parts of your life. Our hybrid working policy is flexible, and the frequency of time spent in your nominated office will vary across teams and job roles.

Take a look at our fantastic benefits! We offer:

• Flexible work pattern, which can adapt to suit your schedules and personal commitments.
• 31 days annual leave (plus bank holidays) that includes an additional three closure days over Christmas plus the opportunity to buy up to an additional 5 days.
• Generous flexible pension schemes.
• Protection benefit - life cover.
• Annual Jisc performance award.
• A range of wellbeing lifestyle benefits including company paid health care cash plan, employee assistance programme, mental health first aiders and support.
• A generous budget to support you with external learning and continuous professional development.
• Allocated allowance of up to £250 to equip your home office.
• Financial well-being support including access to preferential loan and savings plans, mortgage advice, will writing tools and support and resources to help you make the most of your money.
• The opportunity to donate to charity tax-free with our Payroll Giving benefit.
• Electric Car Lease Scheme and option to purchase SmartTech - spreading the cost of your everyday white goods and technology.
• A wide range of discounts from retailers and big-name high-street stores and CSSC membership.
• Family friendly policies including enhanced parental, maternity and paternity leave and opportunity for career breaks.
• Support your volunteering with up to 3 days volunteer leave.
• Cycle to work scheme and eye care scheme including free eye test vouchers and £70 towards new glasses for VDU use.
• Free flu vaccinations.
• Employee recognition awards and travel loans.
• A company culture which supports and promotes personal learning and development, including access to thousands of courses on LinkedIn Learning.

Equity, diversity and inclusion:

At Jisc, we don't look for 'sameness', but to truly include people who can add unique perspectives and experiences to our culture, and we are working hard to achieve progressive change. 'Always inclusive' is one of our six guiding principles which actively encourages us to bring our whole authentic selves to work. We believe that our commitment to equity, diversity and inclusion is fundamental to our success.

Jisc believes our people make all the difference in cultivating an inclusive culture that welcomes ideas, encourages innovation, and values belonging. We work with passionate colleagues to strengthen knowledge and awareness, provide learning and development opportunities, and foster multiple employee networks which create a sense of community and influence our policies and practice.

We work hard to create an equitable experience for our candidates and workforce which embraces all aspects of their identity including race and ethnicity, religion and belief, sex, gender identity, sexual orientation, trans identities, age, class, disability, neurodivergence, or veteran status.

Application process:

We want you to showcase your talent throughout the recruitment process. Please let us know how we can best support you to do that; for example, if there are any reasonable adjustments we may be able to put in place. We will be happy to help you.

Just so you know, we review CVs as soon as we can and aim to provide an update on your application within 4 weeks of receiving it. However, you may hear from us a lot sooner, so please keep an eye out for our emails or calls!

If you are currently a Jisc employee, please apply through your Dayforce Employee profile.

Jisc has an active sponsor licence to recruit on a Skilled worker visa basis. Candidates wishing to apply who require sponsorship should determine the likelihood of obtaining a Certificate of Sponsorship for the role by assessing their circumstances against the relevant Home Office criteria. Jisc does not offer any financial re-imbursement towards the applicant costs, such as re-location, skilled worker visa and dependant costs or the immigration health charge.

No agencies please.

Other details

• Job Family IT and technical
• Pay Type Salary

Apply Now