Web Application Tester

Waterstons Ltd.; Glasgow; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A leading IT consultancy in Scotland is in search of a skilled Cybersecurity Consultant to join their expanding Cyber team. This role involves conducting penetration testing for web applications and APIs, assessing vulnerabilities, and preparing comprehensive reports. Candidates should have experience with security tools like Metasploit and Burp Suite, along with strong communication skills. The position emphasizes a collaborative culture with flexible working arrangements and an attractive benefits package, including unlimited holidays and professional development opportunities.

Benefits

Unlimited holiday allowance

Private medical insurance

Flexible working arrangements

Supported development opportunities

Qualifications

• Proven experience performing penetration tests on web applications and APIs.
• Knowledge of security vulnerabilities and relevant risk mitigation techniques.
• Extensive tooling experience with penetration testing tools.

Responsibilities

• Lead and deliver web application penetration testing.
• Conduct vulnerability assessments and security audits.
• Prepare clear reports for both technical and non-technical stakeholders.

Skills

Penetration testing

Network security

Cloud infrastructure security

Risk mitigation techniques

Technical documentation

Tools

Metasploit

Burp Suite

Nmap

OWASP Zap

Job description

Who you’ll be joining

We’re problem solvers at heart. Sometimes the answer is technology, sometimes it is strategy, and sometimes it is a strong cup of tea and a bit of thoughtful conversation. Whatever it takes, we work it out with our clients.

We’re an IT consultancy that helps organisations get the best out of their technology. That means keeping them secure and keeping the bad guys out, making sure everything works and is easy to use, and doing smart things with data and software to give their business an edge. It is important work, and we care about doing it well and for the right reasons.

Life at Waterstons is friendly, flexible and built on trust. We hire people who are curious, thoughtful and good at getting to the heart of a problem. You get support, trust and room to grow in a place that still feels human. The unlimited holidays and private healthcare are a nice touch, although most people stay because it feels like the right place to do good work with good people.

What You’ll Be Doing

A technical security expert with the ability to conduct penetration tests and the appetite to deliver a wide spectrum of interesting security related work seeking a new challenge to join our growing Cyber team to help shape the company’s security and compliance services nationwide for a leading IT and business consultancy, supporting national and international clients.

Your Day-to-Day

• Leading and delivering web application penetration testing, with an expectation to participate in infrastructure penetration testing, vulnerability assessments, and security audits across various business functions as needed

• Lead technical scoping activities and understanding a client’s requirements to ensure they get the most out of their engagement with Waterstons

• Write clear, concise, and professional reports that are understandable to both technical and non-technical stakeholders.

• Being available to travel to client sites when required

• Improving areas of work, such as methodologies, tools and processes used by the team

• Helping upskill junior members and the wider cyber team

• Maintain up-to-date knowledge of emerging security threats and trends.

• Ability to manage multiple client engagements concurrently

• Act as a trusted partner to all of our clients

What we’re looking for

If some (or most) of the following sound like you, we’d love to hear from you:

• Proven experience in performing penetration tests across a broad range of systems, more specifically web applications and APIs

• Wider technical knowledge of network and cloud infrastructure security

• Understanding of security vulnerabilities and risk mitigation techniques

• Extensive tooling experience such as Metasploit, Nmap, BloodHound, Eyewitness, Burp Suite, NIKTO, OWASP Zap etc.

Nice to have

• Qualifications such as: CRT, CHECK Team Member (CTM) or CSTL, OSCP, CSTL

• Be a Cyber Essentials Plus Auditor

• Experience with scripting languages such as Python, Bash, or PowerShell

• Experience with Mobile Application Penetration Testing.

How We Take Care of You

As well as offering a competitive salary, we have an attractive benefits package including:

• A healthy work life balance with flexible and agile working being the norm

• Unlimited holiday allowance

• EV car scheme (salary sacrifice)

• Room to grow with supported development opportunities and sponsored training

• Enhanced family policies

• If you ever need it, company sick pay and life assurance

• Supported wellbeing with regular initiatives, an employee assistance programme and private medical insurance

• Flexible benefits such as a dental scheme, eye care support, season ticket loan and cycle to work

• We require a security check to be carried out on all colleagues due to the nature of some of our clients’ industries.

Waterstons is committed to creating and an inclusive, understanding, and flexible place to work. We value diversity, equality and inclusion and encourage everyone to 'bring their whole selves' to work. We believe that a company that works to truly embrace and value diversity, create an environment where everyone from any background can do their best work, and feel valued and appreciated is a better company to work for.

Privacy Statement

Waterstons are gathering the data in this application for the purpose of recruitment and to ensure we can contact you regarding this application. For information about what we do with your personal data see our Privacy Notice.