Rapid7 Penetration Tester - InfoSec 

United Kingdom, Northern Ireland, Belfast 

568861876

About the Role

In this role, you will manage and sustain an offensive security program focused on new offensive methodologies and adversary emulation while fostering a positive relationship with our defensive security counterparts. We are looking for someone with a strong background in information security with a passion for penetration testing and a strong desire to drive information security improvements across our organization.

In this role, you will:

• Perform manual penetration tests of network services, network infrastructure, IoT devices, and software

• Design and deliver red team exercises (setting up C2 servers, EDR evasion, deploying and operating out of C2 agents)

• Clearly document and communicate findings and remediation recommendations to leadership and device/software owners

• Partner with our Security Operations Center (SOC) to operationalize new detection concepts

• Conduct vulnerability research and participate in exploit development

• Collaborate and assist with threat hunting activities

• Support Risk Assessments, Third Party Penetration Tests, Vulnerability Assessments, Incident Response and Investigation, and Cybercrime Response

The skills you’ll bring include:

• 5+ years of experience in Information Security, possessing a strong understanding of security concepts and disciplines

• 3+ years experience of Penetration Testing (Internal/External Network, WebApp, Cloud, etc.)

• Extensive experience with offensive security tools, concepts and procedures

• Excited by technology, curious and eager to learn

• The attitude and ability to thrive in a high-growth, evolving environment

• Collaborative team player who has the ability to partner with others and drive toward solutions

• Strong creative problem solving skills

• Solid communicator with excellent written and verbal communications skills both within the team and cross functionally

It would be great if you also had:

• Computer related degree would be advantageous

• GPEN, eCPPT, OSCP or other pertinent industry-recognized certifications