Penetration Tester

Penetration Tester – Remote

We have an exciting opportunity for a PenetrationTester to join our team! This is a full–time permanent role working remotely with some occasional travel required.

Marston Holdings Limited is a parent company formed of eight brand entities that each specialise in key areas of our overarching business. In a nutshell, we are the UK's largest judicial services company and pioneers in clean air technology, offering services that support local and central government, utilities, and private sectors through the delivery of market leading integrated technology–enabled solutions from design and implementation to management and recovery.

The Role & Key Responsibilities

In this role you will proactively identify and mitigate security vulnerabilities within our digital infrastructure. This role is crucial in maintaining the integrity, confidentiality, and availability of our systems and data, ensuring robust defence mechanisms against potential cyber threats.

• Conduct comprehensive penetration tests and vulnerability scans on network infrastructure, applications, and other critical systems
• Identify, analyse, and report security vulnerabilities in a clear and actionable manner.
• Develop and maintain security testing methodologies and protocols.
• Collaborate with the IT, external support and internal development teams to remediate identified vulnerabilities.
• Provide technical guidance and support during security incidents and investigations
• Participate in security audits and compliance assessments
• Contribute to the development of security policies and procedures.
• Assist in the implementation of security tools and technologies.

Person Specification

• Bachelor's degree in computer science, Information Security, or a related field.
• Relevant certifications such as OSCP, CEH, or CISSP
• In–depth knowledge of operating systems, network protocols, and security architecture.
• Proficiency with various penetration testing tools and methodologies
• Strong understanding of secure software development lifecycle
• Proven experience in conducting penetration tests on various systems, including web applications, networks, and mobile applications.
• Ability to simulate attacks and exploit vulnerabilities to assess the security posture of the company.
• Experience in identifying, analysing, and reporting security vulnerabilities
• Familiarity with common vulnerability scanning tools and methodologies (e.g., Nessus, Qualys).
• Proficiency with a range of penetration testing tools such as Metasploit, Burp Suite, Wireshark, Nmap, etc.
• Understanding of various attack vectors and techniques used by malicious actors.
• Keen attention to detail for identifying subtle vulnerabilities and weaknesses.
• Strong troubleshooting skills to devise and implement effective solutions.

What's in it for you?

• Remote working with some occasional UK/Overseas travel.
• Salary – GBP55,000 – GBP60,000 DOE
• Full Time, 37.5 hours per week.
• Healthcare cash plan
• Staff benefits designed to suit your lifestyle – from discounts on retail shopping, travel, and socialising to health & wellbeing.
• 27 days holiday + bank holidays
• Cycle to work scheme.
• Enhanced Maternity and Paternity Package NB this is subject to eligibility.

If this sounds like the job for you, please apply .

New starters will be subject to clearance through the Disclosure and Barring Service and a County Court Judgment check. In addition, the post holder is expected to keep the Company updated if their personal circumstances change.

We are an equal opportunity employer, which means we'll consider all suitably qualified applicants regardless of gender identity or expression, ethnic origin, nationality, religion or beliefs, age, sexual orientation, disability status or any other protected characteristic. We recruit and develop our people based on merit and their passion for creating better outcomes, and we're committed to creating an inclusive environment for all employees.