Senior Penetration Tester

CONTEXT

In an increasingly interconnected world, the security of critical national infrastructure is paramount. Our client, a major player in its sector and a cornerstone of public safety, is at the forefront of protecting citizens and maintaining order. Their operations rely heavily on cutting-edge technology, including extensive IoT platforms that gather vital intelligence and enable swift response. From sophisticated ANPR cameras monitoring traffic flows to interconnected field equipment enhancing operational efficiency, these systems are a complex web of embedded devices, networks, cloud platforms, and bespoke applications. The threat landscape is constantly evolving, with sophisticated cyber adversaries continuously attempting to compromise these essential services. To counter these threats, our client is investing in a proactive and robust offensive security strategy. This role is not just about finding vulnerabilities; it's about being the vanguard against potential threats, ensuring the unwavering reliability and security of systems that directly impact national safety and security.

ACTIVITIES

As a Senior Penetration Tester, your mission is to systematically identify and exploit vulnerabilities across our client's vast and intricate ANPR ecosystem and broader IT infrastructure. You will be responsible for preparing comprehensive penetration testing plans, methodologies, and scope definitions, encompassing field equipment, embedded systems, network infrastructure, cloud environments, APIs, web applications, and mobile platforms. Your daily activities will involve executing sophisticated penetration tests, employing both automated tools and manual techniques to uncover hidden weaknesses. This includes ethical hacking, vulnerability research, exploit development, and post-exploitation analysis. You will meticulously document your findings, producing detailed, actionable reports that clearly articulate identified vulnerabilities, their potential impact, and pragmatic remediation strategies. Furthermore, you will serve as a trusted advisor, guiding development and operations teams in effectively addressing and mitigating the discovered security flaws, fostering a culture of 'security by design' across the organization.

EXPECTED ACHIEVEMENTS

Your impact will be profound and far-reaching, directly contributing to the resilience and integrity of critical national infrastructure. You will proactively identify and facilitate the remediation of high-risk vulnerabilities before they can be exploited by malicious actors, significantly reducing the attack surface. Through your expert analysis and reporting, you will empower development and operations teams to build more secure systems, embedding security best practices into their processes. You will contribute to a hardened security posture across diverse technological domains, including complex IoT deployments and cloud-native applications. Ultimately, your work will directly enhance public safety and national security by ensuring the reliability, confidentiality, and integrity of the systems that underpin law enforcement and emergency services, safeguarding citizens from cyber threats.

ENVIRONMENT

You will operate within a highly secure and technically diverse environment, working with a wide array of advanced technologies. The infrastructure includes ANPR cameras, various connected field equipment, bespoke embedded systems, complex network architectures, and robust cloud platforms (e.g., AWS, Azure, or GCP). Your toolkit will comprise industry-leading offensive security tools and frameworks such as Kali Linux, Metasploit, Burp Suite Professional, Nmap, Wireshark, and various custom scripts. Experience with programming languages like Python or Go for exploit development and automation will be highly valued. Methodologies will include OWASP Top 10, MITRE ATT&CK, PTES, and various IoT/embedded specific testing frameworks. Collaboration occurs within a highly skilled cybersecurity team, often engaging with infrastructure, development, and operational teams in a fast-paced, mission-critical setting.