Job Specifications
Security Consultant - Penetration Tester
Role Overview
:
We are seeking a highly skilled and experienced Offensive Security Consultant with a strong focus understanding on threat intelligence and attack methods. The ideal candidate will be responsible for managing and conducting advanced penetration testing engagements, leveraging threat intelligence to simulate real-world attacks across a variety of environments, including OT, IT, web applications, cloudinfrastructure, and APIs. This role requires a deep understanding of adversarial approaches, excellent communication skills, and the ability to provide strategic and actionable recommendations to significantly enhance our clients' security postur
e.
What you'll be doi
ng:
Lead and manage the full lifecycle of complex penetration testing engagements, applying a strong threat intelligence-led appro
ach.Execute advanced penetration tests across a broad range of environments (applications, infrastructure, web, APIs, O365, Azure, AWS, OT), directly applying your knowledge of current threat landscapes and attacker T
TPs.Develop and maintain sophisticated test plans, execution plans, and targeted use cases directly informed by in-depth threat intelligence analy
sis.Identify and prioritize OT and IT assets, services, and systems based on their criticality and potential exposure to identified thre
ats.Strategically prioritize, plan, and schedule penetration testing engagements based on comprehensive threat assessments and client-specific requireme
nts.Produce high-quality, detailed reports that clearly articulate technical findings, potential business impact, and strategic, actionable remediation recommendations for both technical and non-technical stakehold
ers.Clearly and effectively communicate complex security concepts, adversarial tactics, and critical threat intelligence insights to diverse audien
ces.Collaborate closely with client IT and cybersecurity teams to drive the enhancement of security protocols and ensure effective, threat-informed remediation of identified vulnerabilit
ies.Track the progress of remediation efforts and provide regular, concise updates to stakeholders, highlighting the reduction of identified thre
ats.Conduct proactive security research and contribute to the creation of technical content on emerging threats, advanced attack techniques, and threat intelligence-led testing methodolog
ies.Contribute to strengthening security monitoring (blue team) capabilities by providing valuable insights into offensive techniques and adversarial behaviors to enhance detection and response effectiven
ess.Drive the patching regime for identified vulnerabilities, prioritizing remediation efforts based on threat intelligence and the potential for exploitation by advanced threat act
ors.
What you'll
bring:
Minimum of 5 years of demonstrable professional experience in penetration testing, with a strong emphasis on understanding, emulating, and leveraging adversarial tactics and threat intell
igence.Comprehensive understanding of OT and IT asset profiles, technologies, and security best practice principles, with a proven ability to contextualize them within the current threat lan
dscape.In-depth knowledge of network protocols, cryptography, security vulnerabilities, and common attack vectors employed by sophisticated threat
actors.Demonstrated proficiency in utilizing a wide range of penetration testing tools and methodologies, including those specifically used for threat intelligence analysis and appli
cation.Proven experience in scoping and executing complex penetration tests, particularly those directly informed and driven by threat intell
igence.Exceptional written and verbal communication skills, with the ability to articulate complex technical findings and nuanced threat intelligence insights clearly and concisely to diverse aud
iences.Strong organizational and time management skills, with a proven ability to effectively manage and prioritize multiple concurrent engag
ements.Current CREST CRT certification or higher is ess
ential.Must hold or be eligible for SC Cle
arance.
Desirable
Skills:
Experience with Breach Attack Simulation tools and metho
dologies.Experience in Vulnerability Management processes and integrating threat inte
lligence.Understanding of Risk Management frameworks and how threat intelligence informs risk ass
essments.Hands-on experience with security reviews of AWS, Azure, and GCP environments, incorporating cloud-specific
threats.Experience with ISO 27001 auditing/implementation, understanding the role of threat intelligence in co
mpliance.Other advanced cybersecurity certifications such as CISM, CISSP, ECSA, C
REST CCT.
About the Company
NTT DATA – a part of NTT Group – is a trusted global innovator of IT and business services headquartered in Tokyo. We help clients transform through consulting, industry solutions, business process services, digital & IT modernization and managed services. NTT DATA enables them, as well as society, to move confidently into the digital future. We are committed to our clients’ long-term success and combine global reach with local client attention to serve them in over 50 countries around the globe.
Know more