Lead Penetration Tester

Job Description

An established industry leader is looking for an experienced Lead Penetration Tester to take charge of critical cybersecurity functions, including red teaming, threat hunting, and vulnerability management across IT and OT environments. The ideal candidate will bring hands-on expertise in cyber incident response, advanced threat analysis, and security assurance. This role includes managing an incident response program, guiding a high-performing cybersecurity team, and working closely with internal engineers and external consultants to enhance SOC and Red Team capabilities.

Key Responsibilities

• Lead offensive security initiatives, such as red teaming, threat hunting, and penetration testing for IT and OT systems.
• Oversee and manage incident response, malware analysis, and vulnerability management processes.
• Provide strategic and technical guidance, offering hands-on support to engineers and collaborating with external partners.
• Drive the development and management of SOC Red Team functions to ensure robust cybersecurity operations.
• Offer expertise in protocol analysis (e.g., Wireshark), client-server and multi-tier web applications, and relational databases.

Experience and Skills

• Strong background in incident response, malware management, vulnerability assessment, and data analytics.
• Experience with large-scale ICS and ICT environments, preferably within the energy sector.
• Deep knowledge of networking fundamentals (TCP/IP, Ethernet) and familiarity with the current threat landscape, including APTs and cybercrime trends.
• Practical experience with cloud platforms (Amazon, Azure, Google Cloud) and various models (IaaS, SaaS).
• Proficiency with multiple operating systems (Windows, Unix) and a solid understanding of IT governance, including ITIL and COBIT.
• Certifications such as CISSP, CISM, GCIH, GIAC, CEH, OSCE, or similar advanced cybersecurity qualifications are essential.

Qualifications

• Bachelor's degree in Information Security, Computer Science, or Systems Engineering.
• Over 10 years of technical experience in Information Security, System Administration, or Network Engineering, with at least 5 years in specialised Information Security roles.

This is a high-impact role offering the chance to significantly shape cybersecurity efforts within a supportive, mission-driven environment.

About Petroplan

Petroplan is the trusted, specialist global Talent Solutions partner of choice for employers and professionals in the Energy sector. Since 1976, Petroplan has been here to help people like you make the most of the opportunities available and find the best fit for you as an individual.

Over 10,000 placements in more than 55 countries for over 550 clients across 65 disciplines.

In an industry where skilled and experienced professionals are increasingly sought after resource, we appreciate the true value of what you have to offer. What's more, we understand that different things are important to different people in today's world of work - it's about making exactly the right connections for you as an individual.

Our reputation for contractor and candidate care, understanding what makes you tick, and finding you the best match is second-to-none. We understand the industry inside-out and seek to understand YOU and your motivations in the same way. We take the time to evaluate your individual strengths, understand the most important things to you, and establish exactly what you're looking for from your next role.

About Petroplan

Petroplan is the trusted, specialist global Talent Solutions partner of choice for employers and professionals in the Energy sector. Since 1976, Petroplan has been here to help people like you make the most of the opportunities available and find the best fit for you as an individual.

Over 10,000 placements in more than 55 countries for over 550 clients across 65 disciplines.

In an industry where skilled and experienced professionals are increasingly sought after resource, we appreciate the true value of what you have to offer. What's more, we understand that different things are important to different people in today's world of work - it's about making exactly the right connections for you as an individual.

Our reputation for contractor and candidate care, understanding what makes you tick, and finding you the best match is second-to-none. We understand the industry inside-out and seek to understand YOU and your motivations in the same way. We take the time to evaluate your individual strengths, understand the most important things to you, and establish exactly what you're looking for from your next role.