Penetration Tester London, England
Job description
Job Title: Penetration Tester
Location: Hybrid - London, Waterloo (UK)
About iProov:
iProov is the world leader in face biometric verification. We establish trust in remote users and deliver effortless, customer centric, device independent authentication tied to trusted ID credentials. We are on a mission to make the Internet a safer place for businesses and consumers.
Our unique facial biometric technology allows banks, governments, healthcare and travel providers to verify customer identity online and provide simple access to secure services. In 2020 we were recognised as a Gartner Cool Vendor and as the 5th fastest growing technology company in the UK by Deloitte. We work with fantastic customers across a number of industry sectors - organisations using our technology include the US Department of Homeland Security, the UK Home Office, the NHS, Eurostar, the Australian government, the Singapore government, ING and many more.
Our flagship Genuine Presence Assurance technology solidified its global market leadership, with verifications growing at a consistent rate of 25% per month worldwide. This has been driven by demand from organisations needing to verify the identity of online users to prevent fraud. iProov’s patented technology assures the genuine presence of an online user to ensure they are the right person, a real person, and authenticating right now.
Diversity at iProov is about reflecting the customers we serve, holding the principles of equality and inclusion at the heart of everything we do and all that we stand for, embracing differences, creating possibilities, and growing together. We aim to foster a culture where individuals of all backgrounds feel confident in bringing their whole selves to work, feel included and their talents are nurtured, empowering them to contribute fully to our purpose.
As we continue to scale and grow, we are looking for an experienced Penetration Tester to join our growing Red Team function and ensure our system continues to deliver outstanding levels of biometric security and performance globally.
Our system has to provide the highest levels of biometric security to defend against the numerous and growing threats, whilst ensuring that we deliver outstanding performance for our millions of users worldwide. This is an exceptionally challenging problem as the nature of the threats evolves rapidly and there is a constant and growing need to track new threats, develop new defences and deploy in a timely and efficient manner.
How you will make an impact:
- Design and execute Red Team Operations against iProov’s biometric platform. Strengthen the company’s security posture through offensive security assessments including the identification and exploitation of vulnerabilities across the platform
- Perform penetration testing and realistic security exercises to simulate various attack scenarios, to test and improve our detection and response capabilities, and to identify weaknesses in our infrastructure and products.
- Conduct research into real-world threat actor tactics, techniques, and procedures (TTP’s) to develop proof-of-concept tools and playbooks
- Bring insight into all aspects of modern security issues to our products and rapidly developing prototypes for mitigations.
- Present findings and operational work to groups in a clear and professional manner
- Execute technical security assessments to identify risk, likelihood and impact an attacker may have on the System due to weak or missing controls
- 5+ years of experience in ethical hacking, vulnerability research, exploit development, penetration testing or being a member of a red team.
- Experience with JavaScript and/or TypeScript
- Advanced knowledge and understanding of web application security
- Experience with shell scripting or automation of simple tasks using Perl, Python, or Ruby
- Experience with source code reviewing for control flow and security flaws
- A passion for constructively break things
- Want to be part of an ambitious, high-growth startup company
- Written and verbal communication skills in English
- 25 days Annual Leave, plus 8 Bank Holidays
- 3200 Share Options allocated after passing probation (6 months of service)
- Vitality Health Insurance - a range of options available on this below
- Life Assurance
- SmartHealth - Access to private GP, Psychologist, Nutritionist along with tailored fitness plans for both you and your family
- Award winning L&D platform to continue your development with personal allocated training budgets
- Enhanced Maternity leave package
- Pension - 5% employee, 3% employer
- Flexible working – remote/office etc.
- Free Barista Coffee/Tea, biscuits and fruit in the office
- Free access to WeWork discounts and free online well-being sessions
- 50% off monthly gym memberships
- Apple watches significantly discounted based member vitality status
- Half price trainers with Runners Need
- Weekly rewards – Free coffee with Café Nero
- Monthly rewards – Free Cinema ticket
- Discounts on travel with Expedia (hotels) and Mr & Mrs Smith with discounts getting greater throughout the year based on a members vitality status
- Amazon prime free months based on activity
- Up to 25% cashback at Waitrose when buying healthy foods
- 75% off stays at Champneys Health Spas
- Allen Carr’s £299 no smoking programme for free
- Access to Vitality Healthy Mind with 30% off Headspace subscriptions and the ability to earn Vitality points for using Buddhify, Calm and Headspace
- Discounts on Weight Watchers
- 50%-80% off Comprehensive Private Health screening
