Job Description
The candidate will be responsible for conducting comprehensive Vulnerability Assessment and Penetration Testing (VAPT) across enterprise IT environments, applications, networks, infrastructure, cloud platforms and security systems.
Key Responsibilities
- Conduct internal and external penetration testing across networks, servers, firewalls, endpoints and infrastructure.
- Perform web application and API penetration testing, including testing against OWASP vulnerabilities.
- Conduct vulnerability assessments and manually validate identified vulnerabilities and false positives.
- Perform controlled exploitation to determine the actual impact and severity of identified security weaknesses.
- Conduct security testing of network devices, firewalls, routers, switches, VPNs, load balancers and servers.
- Perform application security testing covering authentication, authorization, session management, input validation, encryption and business-logic vulnerabilities.
- Conduct source-code security reviews and support SAST/DAST activities.
- Assess security of cloud environments and operating systems.
- Perform security assessments using tools such as Burp Suite, Nmap, Nessus, Metasploit, Wireshark and Kali Linux.
- Develop or automate penetration-testing/security activities using Python.
- Prepare detailed penetration-testing and vulnerability-assessment reports containing evidence, risk ratings, business impact and remediation recommendations.
- Work with technical teams to remediate identified vulnerabilities.
- Conduct retesting and validation after remediation.
- Follow established penetration-testing methodologies and cybersecurity best practices.
- Support security teams in identifying attack vectors and improving the organization’s overall security posture.
Required Technical Skills
Strong hands-on knowledge of:
- Vulnerability Assessment & Penetration Testing (VAPT)
- Network Penetration Testing
- Web Application Penetration Testing
- API Security Testing
- Infrastructure Security Testing
- Cloud Security Testing
- Vulnerability Exploitation & Validation
- OWASP Top 10
- SAST & DAST
- Source-Code Security Analysis
- Secure Coding Practices
- Network & Operating System Security
- Python/Security Automation
- Burp Suite
- Nmap
- Nessus
- Metasploit
- Wireshark
- Kali Linux
Requirements
Standards / Framework Knowledge
The candidate should have good knowledge of relevant cybersecurity standards and methodologies, including:
- OWASP
- NIST
- ISO/IEC 27001
- PCI DSS
- Penetration-testing methodologies and security best practices
We protect what matters.
We’re a skilled, collaborative, and increasingly diverse community of around 100,000 people in over 40 countries, creating some of the world’s most advanced, technology-led defence, aerospace, marine, land, and security solutions.
At our core is an overarching purpose – we play our part in protecting those who protect us, making the future more secure for everyone. Those who connect with our purpose feel pride in being part of something bigger; motivated by their ability to make a difference by creating bold, pioneering products and services that can change the world we live in.
To do this, we must always look to the future to find new ways and new ideas to advance – whilst putting our people front and centre. Championing better ways of doing things, striving for excellence in everything we do, being more efficient and sustainable.
We have a 40+ year heritage of working in data and security. Since 2000, we have expanded rapidly through the digital revolution, working in multiple industries and building our portfolio of cutting edge solutions. Our new company, Digital Intelligence, launched at the beginning of 2022 bringing together digital capabilities from across the BAE Systems Group.
To secure our ambitious future, we are committed to investing in our people, with the tools, support and inclusive environment for you to embrace a fulfilling career. Life at BAE Systems is always dynamic and challenging, with immense opportunity, and lifelong development available to all.
Whether you’re an experienced professional or just stepping out into the world of work, we’ve a wide range of career opportunities available. Whether it's engineering or technology, project management or manufacturing, you'll be helping our customers protect what really matters.
- Opportunities -
Working at BAE Systems brings immense opportunity. A long and fulfilling career, with first-class training and lifelong development available to all, with all the support to help make it happen.
The scale at which we operate generates endless opportunities to work across diverse roles, specialisms, cultures and countries. Achieving our growth ambitions needs everyone to own their role and find their unique place. This is a place to be curious, build your network, feel empowered and motivated by your team, sharing in our purpose to protect what matters and create a safer future.
As many of our team can demonstrate, it’s possible to have multiple careers throughout your time here. There’s always the opportunity to retrain or reskill, whether through a formal programme or exploring our on demand virtual learning platform where you can explore tailored resources aligned to each of our functions.
- Learning beyond your role -
We provide the opportunity to get involved in projects outside of your primary remit. We encourage you to seek a stretch project in which you’ll gain different experiences. With our huge portfolio of products and our multinational presence, there are opportunities to get involved in something different around every corner. Additionally, we encourage involvement in community projects, STEM initiatives and our employee resource groups, which all provide valuable learning and development experiences that you may not have access to in your day-to-day role.
- Learning and resources -
Lifelong learning is a reality at BAE Systems, and we’re proud to be a diverse, inclusive, and supportive employer, helping everyone build a career to be proud of, delivering our purpose of protecting those that protect us all.
Our resources are accessible at any time and from any device and consider inclusive learning styles by offering these through a variety of platforms such as videos, books, guides and structured virtual learning programmes through our digital learning plaform, Spark.