Senior Penetration Tester

National Grid plc; Warwick; Hybrid; GBP 65,000 - 70,000; Full time

Job summary

A leading energy provider in the United Kingdom is hiring a Senior Pen Tester to enhance cyber security for gas transmission. You'll conduct penetration tests, identify vulnerabilities, and collaborate with teams to improve security measures. Ideal candidates will demonstrate solid skills in penetration testing and familiarity with various operating systems and security tools. This is an excellent opportunity to contribute to the energy sector's transformation. Competitive salary of £65,000-£70,000, along with performance bonuses and comprehensive benefits.

Benefits

Annual performance bonus up to 6%

26 days' holiday plus statutory days and option to buy more

Double-match pension

Flexible benefit scheme

Employee assistance programme

Free gym and exercise classes

Free parking

Qualifications

• Proven penetration testing experience.
• Strong knowledge of security tools and techniques.
• Team-player with good communication skills.

Responsibilities

• Perform penetration testing and vulnerability research.
• Identify and assess vulnerabilities.
• Collaborate with teams for security measures.

Skills

Penetration testing / ethical hacking experience

Knowledge of operating systems (Linux, Windows, Active Directory)

Web application security testing

Experience with security tools and scripting

Penetration testing certification (CREST, OSCP)

Cloud and container technologies (AWS, Azure, Kubernetes)

Attention to detail

Strong presentation and report writing skills

Team-player

Knowledge of CIS controls, NIST CSF

Education

Relevant certifications

Job description

National Gas is securing Britain’s energy. We are responsible for transporting gas to power stations, major industries, storage facilities, and more than half a million businesses and 24 million homes through nearly 5,000 miles of pipes across Britain. National Gas is also proud to be leading the way in transforming the energy network for a clean energy future.

As a crucial part of our cyber security team, the Senior Pen Tester will proactively identify and exploit vulnerabilities within Enterprise and Critical National Infrastructure (CNI) systems to strengthen the resilience and security of gas transmission nationwide.

Join us, and help be the energy behind the change.

Key accountabilities:

• Scope and perform penetration testing and vulnerability research of complex proprietary software and hardware.
• Identify and assess vulnerabilities in systems and applications.
• Keep cybersecurity training and knowledge current by monitoring the latest security threats and vulnerabilities.
• Write clear and concise penetration testing reports detailing findings and recommendations
• Provide recommendations for remediation of identified vulnerabilities.
• Collaborate with IT and development teams to facilitate the implementation of security measures and remediation of identified vulnerabilities.
• Ensure that penetration testing activities align with industry regulations, compliance standards, and organizational security policies.
• Analyse network configurations and security architectures to identify and address vulnerabilities that could be exploited by attackers.

About you:

• Proven penetration testing / ethical hacking experience.
• Strong knowledge of various operating systems and networks (especially Linux, Windows, and Active Directory).
• Knowledge of web application security testing
• Experience with a variety of security tools and techniques and the ability to write scripts to automate tasks.
• A recognised current penetration testing certification such as CREST or OSCP.
• Experience with cloud and container technologies (e.g. AWS, Azure, Kubernetes).
• Strong attention to detail.
• Strong presenting and report writing skills, with the ability to succinctly convey technical topic to a non-technical audience.
• Team-player.
• Intimate knowledge of CIS controls, NIST CSF, etc.
• Contribute to tool development, both software and hardware, as well as processes and infrastructure, to advance the capabilities of the practice.
• Ideally relevant experience in both IT and OT/ICS/CNI cyber security environments.

What we can offer you:

• Salary £65,000-£70,000 dependant on experience
• Annual performance bonus of up to 6%
• 26 days' holiday, plus 8 statutory days - plus option to buy 5 additional days
• Double-match pension - every £1 you put in, we add £2 (max company contribution 12%)
• Opt-In flexible benefit scheme, including salary sacrifice private healthcare, dental insurance, technology plans, car plan and more
• Financial protection with 10x salary death in service and financial support if you're unable to work due to long term illness or injury
• Excellent family friendly provisions - maternity/paternity/adoption/surrogacy/ shared parental leave
• Career progression, professional training, courses & certifications
• Employee assistance programme offering free confidential professional counselling 24/7
• Financial support to cover the cost of professional membership subscriptions relevant to your role.

Other 'nice to knows':

• Some travel (approximately once a month, to operational sites)
• Free gym and exercise classes onsite at our Warwick office
• Canteen and coffee shop onsite
• Free parking.

About us:

Gas is an essential part of a secure energy supply in Britain and will continue to play a vital role in the energy system for decades to come. More than ever, we need the security that gas brings to keep the lights on, businesses running, and homes warm. National Gas provides that security.

Gas provides the energy security to support renewable electricity generation, and we are developing our infrastructure to transport hydrogen and carbon dioxide across the country. We are Britain’s national gas network, providing secure energy to power the country, achieve net zero and maintain our industrial competitiveness.

At National Gas, we’re committed to building a workforce that reflects the communities that we serve. We celebrate the different experiences our colleagues bring and encourage applicants of all backgrounds to apply. To that end we want to support you during the interview process, please advise your recruitment partner if you require any reasonable adjustments.

Security clearance:

The successful candidate must be able to achieve and maintain Security Check (SC) security clearance for this role.

Many of the positions within our company are subject to national security clearance and Trade Control restrictions. This means that your eligibility for certain roles may be affected by your place of birth, nationality, current or former citizenship, and any residency you hold or have held. Further details are available at United Kingdom Security Vetting: clearance levels - GOV.UK (www.gov.uk).