Lead Cyber Security Specialist (Penetration Tester)

About the role

CrimsonLogic is seeking a Lead Cyber Security Specialist to own full‑scope offensive security assessments across networks, applications, cloud environments and operational technology. You will simulate advanced cyber‑attacks, bypass modern defenses and provide actionable remediation to improve the organisation's security posture.

Key responsibilities

• Conduct comprehensive penetration tests on applications, systems, networks and OT environments.
• Simulate real‑world cyber‑attacks and evaluate defensive measures.
• Provide detailed remediation recommendations and track their implementation until report closure.
• Perform security baseline hardening, firewall rule reviews and application security configuration assessments.
• Support risk assessments, control‑gap analysis and document security risks in the enterprise risk register.
• Maintain and enhance cybersecurity policies, standards and procedures while ensuring compliance with relevant frameworks and regulations.

Required profile

• Bachelor’s degree in Cybersecurity, IT, Computer Science or related field, or equivalent experience.
• Minimum 3 years of hands‑on penetration testing experience.
• Strong analytical, problem‑solving and communication skills.
• Ability to manage multiple projects in a dynamic environment.

Required skills

• CREST or OSCP certification (mandatory).
• Advanced knowledge of penetration testing methodologies and tools.
• Experience with exploit development.
• Familiarity with security frameworks such as NIST and ISO 27001.

What we offer

• Professional development programs and a total rewards philosophy focused on well‑being.
• Inclusive, nurturing workplace that encourages growth.