MDSec is a security consultancy based in Macclesfield, UK. We are at the forefront of Application Security, having been founded by the authors of the Web and Mobile Application Hacker's Handbook series and running associated training in global venues over the last 15 years.
We have roles open for application-focused penetration testers with a true passion for the subject outside of their 9 to 5. With most of our work arising from inbound queries, our client base is more interested in attack and penetration than "audit-driven" work. We have a large and growing number of clients, making the work varied and composed of a variety of technology stacks. You can expect to learn and keep learning throughout your career at MDSec.
We don't mandate certifications. If you're reading this and wondering if you have what it takes, you can find out for yourself. Just ask for access to our Capture the Flag platform, and we'll send you an invite today.
Essential:
- Passionate attitude to infosec
- Fluent with Burp Suite
- Programming skills in any scripting language (expect to demonstrate this at interview)
- Strong written and communication skills
Desired:
- Mobile application testing experience (both Android and iOS)
- Code review skills in Java / J2EE and .NET
- "Thick client" assessment of IL and native binaries
- Published CVEs, blogs, Github repositories or bug bounty write-ups
- Certifications such as CREST CCT App or OSWE
- Experience with common cloud environments, AWS, Azure and GCP
Work Remotely
- No
Job Type: Permanent
Pay: £29,659.00-£80,000.00 per year
Benefits:
- Casual dress
- Company events
- Company pension
- Health & wellbeing programme
- On-site parking
- Private dental insurance
- Private medical insurance
- Sick pay
Work Location: In person