Senior Penetration Tester

PGI is a global consultancy that helps organisations build digital resilience. We deploy our people to implement solutions on behalf of clients or to support them in developing their own capabilities. Our vision is a world resilient to digital threats and online harm. To achieve this, we need to grow our team of talented and passionate people.

Our clients include some of the most well-known global brands, national governments, and innovative growing businesses. We operate in an exciting, fast-growing sector that bears increasing relevance and importance to nation-states, corporates, universities, and NGOs.

We are a constantly evolving team of skilled and curious people that are focused on the value we can demonstrate for clients, whilst developing training internally on a regular basis to help each other grow. We have a variety of different skillsets and backgrounds which brings an array of interesting conversations to meetings on a regular basis.

We have a strong emphasis in learning and growing as a team to promote personal development and continue to offer high quality penetration testing services to clients.

What you’ll be doing

• Performing penetration tests on a variety of different clients from multiple sectors.
• Demonstrating an objective approach to risk ratings which focuses on what is measurable above subjective reasoning.
• Develop new, interesting service offerings and research security-related topics affecting a variety of industries.
• Writing reports and operating as part of the quality assurance team to ensure technical and non-technical information provided to customers from both yourself and other team members is accurate and completed to a high standard.
• Writing reports and operating as part of the quality assurance team to ensure technical and non-technical information provided to customers from both yourself and other team members is accurate and completed to a high standard.
• Participating in scoping/bidding activities for a variety of deliverable services to determine appropriate day counts and ensure client-provided information is as accurate as possible.

Assisting in the development and strategy of internal tooling/methodology to maintain up-to-date testing capability.

Mentor and guide less experienced consultants on the team, such as providing the opportunity to shadow on client engagements.

On day one you will bring

• (IDEAL) At least 4 years experience in common types of penetration testing (such as infrastructure and web application).
• A clear understanding of penetration testing, including but not limited to:
• Pentest methodologies
• Common vulnerabilities
• Vulnerability mitigation
• The capability to explain WHY risk ratings were provided at specific severity levels in the report (such as why impact was High).
• The ability to provide reasonable and beneficial remediation advice to a variety of audiences with differing technical capabilities.
• The capacity to write non-technical executive summaries which can detail the business impact for vulnerabilities.
• (IDEAL) Team-leader qualifications which enable the ability to lead CREST and/or CHECK engagements for internal infrastructure penetration tests.
  
  

Diversity, Equity and Inclusion at PGI

As a British company which operates internationally, we draw strength from the diversity of our people. Without our diverse team, we couldn’t do the work we do. We are involved in projects across 80+ geographies, our people speak 25+ languages and come from a variety of backgrounds. By hiring and cultivating a diverse, equitable and inclusive workforce, we can uphold values that enable every member of the team to thrive, while delivering novel solutions to novel problems.

Accessibility at PGI

Every individual has different requirements, so we are committed to implementing reasonable adjustments to mitigate physical and non-physical barriers in the workplace.

We strive to make the recruitment process as accessible as possible, but if you have any questions or concerns, please get in touch.

Please note:

We are not accepting applications or speculative profiles from any recruitment agencies. If we require additional resource, we will reach out to you.

We empower organisations and nations to counter digital threats. Our internationally acclaimed team of digital threat experts and thought leaders work at the cutting-edge of threat detection, continually scanning the horizon for next-generation risks. We use technology to support deep human insight, enabling us to build long-range resilience for clients.We are trusted worldwide by governments, global NGOs and corporations.