Cyber Security Manager

Cyber Security Manager

Cardiff / Hybrid

£70,000 - £80,000 + Package

Global professionals services client is looking for a Manager who can lead security engineering operations, Ideally, you will come from a technical background working on hardware and mobile applications and be involved in security engineering/ testing.

Roles and Responsibilities

• Deliver and manage relatively complex client engagements requiring the use of offensive security tools and techniques to identify weaknesses in client IT environments by legally breaking into computer systems, websites, mobile applications and wireless platforms as part of real-world simulated attack scenarios;
• Research a variety of topics, including advanced evasion techniques for enhancing our red team capabilities and other novel techniques and capabilities;
• Contribute to the creation of new private and public tooling to enhance deliver capabilities;
• Work with a world-leading Threat Intelligence team to deliver full package solutions to clients looking to answer both the "who" and the "how" questions for possible attacks;
• Work closely with a dedicated development team to research and weaponise new vulnerabilities and techniques for bypassing endpoint security solutions;
• Manage and mentor junior staff through sharing of professional and technical skills and experience;
• Maintain and develop relationships with iconic clients, understanding their needs, producing proposals to address them and providing risk-based recommendations on security matters;
• Conduct and manage a variety of testing including: red teaming, infrastructure testing, both internal and external; application testing of both web and proprietary applications and protocols; mobile systems testing including RF and WiFi solutions;
• Research a variety of topics including: advanced evasion techniques for enhancing our red team capabilities, embedded devices such as IIoT/IoT, Scada/ICS, automotive, cryptography techniques and implementations, novel techniques and capabilities;
• Work with clients to review and enhance the security of key platforms such as Azure AD, Office 365 and a variety of supporting cloud platforms including IaaS and SaaS.

This role is for you if:

• You have significant practical experience delivering a range of ethical hacking services to customers;
• You are an expert user of both Windows and Linux operating systems.
• You are highly experienced in using commercial security testing tools and strong track record of interpreting and triaging results, and producing management reports.
• You have good working knowledge of Azure AD, Office 365 and common cloud hosting platforms.
• You have extensive knowledge of security testing requirements and techniques, demonstrated by Cyber Security Industry qualifications such as CREST* SAS, SAM, CCT or OSCE;
• Excellent business communication skills, including writing proposals, initiating client engagements, leading workshops, writing reports, and delivering presentations to clients;