Senior Cyber Security Analyst - Penetration Testing

On behalf of Companies House, we are looking for a Senior Cyber Security Analyst - Penetration Testing (Inside IR35) for a 6 month contract based REMOTELY.

Companies House drives confidence in the economy and makes the UK a great place to start, and run, a business.

We are seeking a Senior Cyber Security Analyst - Penetration Testing to join our newly established Non-Functional Testing Team within the Software Testing Department. This is a key role, responsible for leading our efforts in ethical hacking, penetration testing, and overall cyber security testing across the organisation. The ideal candidate will have significant experience in ethical hacking, holding a relevant certification such as Certified Ethical Hacker (CEH) or demonstrable experience in similar roles.

As a Senior Cyber Security Analyst - Penetration Testing, your main responsibilities will be:

. Lead Ethical Hacking & Penetration Testing:
. Plan, execute, and report on penetration tests and security assessments.
. Identify vulnerabilities and provide recommendations for mitigation and resolution.

. Cyber Security Testing:
. Perform security testing across various software projects and ensure compliance with industry standards.

. Tools & Technologies:
. Proficient in the use of tools such as Kali Linux, Burp Suite, Metasploit, Nmap, Wireshark, Nessus, and other security-related software.

. Collaboration with Scrum Teams:
. Act as a liaison to multiple scrum teams, providing expert advice on cyber security throughout the project life cycle.
. Ensure that a final penetration test is delivered as each project approaches completion.

. Documentation & Reporting:
. Create and maintain security test plans, reports, and risk assessments.
. Provide clear and actionable feedback to project teams on security issues.

Essential:
. Proven experience in ethical hacking and penetration testing, with a relevant certification such as Certified Ethical Hacker (CEH) or equivalent.
. Hands-on experience with tools like Kali Linux, Burp Suite, Metasploit, Nmap, Wireshark, Nessus.
. Strong knowledge of cyber security principles and frameworks.
. Experience mentoring or training teams in cyber security practices.

Desirable:
. Familiarity with agile development methodologies and working in scrum teams.
. Experience conducting security testing in cloud environments.

Please be aware that this role can only be worked within the UK and not Overseas.

Disability Confident

As a member of the Disability Confident Scheme, Companies House guarantees to interview all candidates who have a disability and who meet all the essential criteria for the vacancy. In cases where we have a high volume of candidates who have a disability who meet all the essential criteria, we will interview the best candidates from within that group. This scheme encourages candidates with a disability and/or neurodivergence to apply.

In applying for this role, you acknowledge the following "this role falls in scope of the Off Payroll Working in the Public Sector legislation. Any rates of payment quoted will reflect the gross rate per day for the assignment and will be subject to appropriate taxes and statutory costs. As such the payment to the intermediary and your income resulting from this contract will be different".