Senior penetration tester

ROLE SUMMARY

We are passionate about step changing our cyber security capability to better protect customers and colleagues across our global business, and we’re building an internal penetration testing function to complement and help further mature our defensive security capabilities.

This new role challenges you to use your offensive skills to discover and demonstrate vulnerabilities and weaknesses in our systems. Tesco Technology has hundreds of software and infrastructure engineers deploying solutions at scale using many different technology stacks, from traditional on-premise infrastructure to cloud-centric containerised deployments.

Working collaboratively with our developers is key to us identifying and addressing these findings, efficiently and at scale across Tesco. You will have the opportunity to help application teams remediate issues, to help infrastructure teams to build better supporting functions and to help improve our detection and response teams by proposing new detection ideas or providing your offensive security knowledge to aid in incident response.

We believe that skilled and hard-working people are our greatest asset in reducing cyber risk to our business and customers. We encourage and support continual development and recognise the importance of keeping up with the latest technology (as well as all the older stuff) and an evolving threat landscape.

Are you up for this challenge?

This job requires to be based in/close to Prague. We currently work in a hybrid model and meet in our office 3 days a week.

YOU WILL BE RESPONSIBLE FOR

You’ll be working in an offensively trained and defensively focused security team. Your primary responsibility will be to deliver high-quality security assessments in a variety of areas including web application, API, mobile, and infrastructure. But, unlike in a typical consultancy role, you’ll also have the advantage of being able to use internal knowledge, data sources and tools to help identify attack vectors and be able to test out your hypotheses.

There will be other opportunities to stretch your skills:

• you could work with our security engineers to refine and develop our detections
• participate in purple teaming exercises carrying out wider assessments of our security posture
• help triage and validate findings from our bug bounty program
• triage and validate Tesco’s risk posture for newly released CVEs as part of vulnerability management

We provide time and opportunities throughout the year to carry out research and development, as well as training supported by us to ensure you continue to develop and innovate in offensive security.

YOU WILL NEED

• Penetration testing experience performing authorised tests on computer systems, exposing weaknesses in security that potentially could be exploited. This could take the form of prior experience in a consultancy, in-house testing role or working as a security researcher on a bug bounty programme, experience gained via platforms like HackTheBox or Proving Grounds will also be considered.

• GPEN, CREST, OSCP, OSEP or other industry relevant certifications are helpful but not crucial

• An understanding of operating system and networking fundamentals, and underlying principles

• Knowledge of preventative and detective controls (EDR) , firewalls, IDS, IPS, anti-virus, etc)

• Analytical and critical thinking skills, willingness to challenge status quo

• Good written and oral communication skills

• To be comfortable working both independently and collaboratively in a diverse team

ADDITIONAL INFORMATION

Benefits

Tesco is a diverse and exciting employer, dedicated to being #aplacetogeton, providing career-defining opportunities to all of our colleagues. If you choose to join our business, we will provide you with (for all):

• Permanent contract from the go - as a sign of our trust in your abilities
• Learning opportunities - certified technical training and learning platforms like Udemy, Pluralsight and O’Reilly
• Referral Bonus
• Up to 20% yearly salary bonus – based on both individual and business performance
• Cafeteria & Multisport
• Additional 5 days of paid leave to support your well-being and family life
• Shopping discount in our stores

What our colleagues like the most at Tesco

• We develop our own products
• We make an impact; large scale of operation
• Accountability and respect are given to us
• We cooperate and support each other
• There are great colleagues who are divided into small teams here
• We can develop and learn new things

Join our team and be a part of building one of the biggest brands in the retail industry!

Let us know you are interested by pushing the APPLY button!

#LI-ACS1