Overview
Role: Security tester
Rate: Outside IR35
Location: 1-2 day a week onsite Croydon (maybe less)
Duration: 6 months initially
SC clearance required
Security Tester - Job Description
The Security Tester will play a key role in delivering robust application security testing aligned with Secure-by-Design (SbD) principles and compliance frameworks such as NIST, CAF, and CAT. This role supports the Home Office's strategic aim to scale enterprise security testing capabilities, reduce outsourcing reliance, and embed security into the software development lifecycle.
Responsibilities
* Conduct Security Testing using SAST and DAST tools
* Collaborate with Cyber Security Managers and Governance teams to ensure alignment with organisational security policies and standards
* Mentor and upskill team testers in application security testing and automation
* Track and report on security metrics and KPIs, including vulnerability trends and remediation outcomes.
* Integrate security testing into CI/CD pipelines, supporting shift-left strategies and DevSecOps practices.
Required Skills & Experience
* Strong understanding of security standards including OWASP, NIST SP 800-53, ISO 27001, and CIS Benchmarks.
* Experience with SAST/DAST tools and Cloud Security platforms (AWS, Azure).
* Familiarity with Secure-by-Design principles and organisational security policies.
* Experience with penetration testing, risk assessment, and compliance testing.
* Proficiency in tools such as JIRA, SharePoint, and vulnerability management platforms.
Desirable Attributes
* Ability to interpret and apply OWASP and NIST security principles across diverse project environments.
* Strong stakeholder engagement and communication skills.
* Experience in developing deployment checklists and decision trees for secure tool usage.
* Certifications such as CREST CRT, OSCP, CEH, or SANS are highly desirable.
#J-18808-Ljbffr