Penetration Tester – Senior Consultant Full Time

Mazars UK
Overview of the Advisory & Consulting service line
The Advisory & Consultingservice line is a rapidly growing, award winning, global group of successful teams working together to present a go-to-market differentiator whilst delivering the highest quality of work for our clients.

If you are successful in securing a role within our Advisory & Consulting Service Line you will join a team of600+innovative specialists across a variety of sectors including Financial Services, Industry & Services, and Public Services with consultative expertise in Risk & Management Consulting, Internal Audit, Actuarial and all aspects of the Tech & Digital space. Our Advisory teams are at the forefront of large international infrastructure projects, global M&A transactions, high-profile forensic investigations, business valuations, corporate restructuring and creditor advisory services; all with the aim of adding value to clients by finding solutions to a range of financial issues as one collaborative team.

Our specialist Technology Consulting and Assurance team deliver IT assurance and advisory work to a range of clients nationally and internationally. Our broad range of clients, including those in FTSE 350, allow you to gain experience across a range of sectors including:

• Financial Services, Banking, Insurance and Investment
• Corporates/Private Sector/Industry & Services
• Central and Local Government
• Retail and Consumer products organisations

Job Purpose
As a Penetration Tester in theAttack & Defence (A&D)Team you will join an experienced, passionate and dedicated security professionals who provide a technical security testing service to all areas and levels of the business.We are looking for inquisitive, curious people who want to have fun learning and collaborating on penetration testing and red team engagements.

Our rapidly growing Cyber practice has specialists in assessing ourclientssecurity posture by attacking their systems. With the permission of their owners we prod, poke, spear and crack systems to prepare our clients for when the real threats come knocking. We give them a view on how effective their current defences are.

We are looking for people who have a passion forhacking and information security, and really understand what it means to use ethical hacking skills to help organisations protect their systems and their business and personal information assets.

This is an excellent opportunity for a highly motivated and determined Penetration Tester to continue their development and work on a range of exciting projects and supportMazarsas we expand our offering and become CHECKand CREST StarAccredited.

Mazarsensures each consultant has a dedicated annual budget for development giving access to CRESTexams, and many other training courses. There is also dedicated time to carry out research and assist with developing new testing methodologies and techniques.

Join us and you could be responsible for trying to break the most advanced defencesandworking with the best in their fields across industries, sectors and territories.

Either way you’ll need an inquisitive mind, the tenacity to overcome technical challenges, and an ability to approach problems from different perspectives using unusual or non-conventionalmeans, andbeing able to articulate your work to both technical and non-technical audiences.

Role &Responsibilities

• Experience in a variety of penetration tests such as infrastructure, web application, mobile application testing and code review.
• Provide well-written, concise, technical and non-technical reports in English.
• Manage and deliver penetration testing project activities within strict deadlines.

• Training and mentoring ofgraduate entry colleagues through the sharing of professional and technical skills and experience.
• Carry out research when not on client deliverable work that can be used to enhance our services to clients.
• Work with teams across the business, providing the latest technical knowledge to collaborate on interesting client projects.
• Ability to work both independently and perform as ateam memberin agroupenvironment.

Skills, Knowledge andExperience
The following qualifications are expected from potential applicants:

• Curiosity and a desire to learn and develop to become one of the best.
• A good understanding of Unix,MicrosoftWindows and network security skills.
• Any cyber/information security certification (CREST, Cyber Scheme,OSCP,SANS, GIAC)or equivalent.
• Basicworking knowledge of Azure AD, Office 365 and common cloud hosting platforms.

• Good understanding of network and OS principles.

Advantageous:

• IoT penetration testing experience.
• Research and Development experience.
• Solid programming skills, any of C, C++, Java, C#, python, ruby, x86 or ARM assembler.

Inclusion and Diversity
At Mazars diversity and inclusion are central to our values. We recognise that being a diverse and inclusive organisation makes us stronger as a business.

We seek to attract and recruit people who reflect the diverse nature of our clients and communities, regardless of sexual orientation, gender identity, ethnicity, nationality, faith or belief, social background, age and disability. Mazars selects candidates based on skills, qualifications and experience.