Penetration Tester

Title: Penetration Tester

Location: REMOTE
Duration: Long Term

Overview:

The Penetration Tester is responsible for assisting the Lead for the Security Controls Verification team in helping to define the strategic approaches used by the team to support how we develop our differing approaches to the methodologies used for security & risk controls requirements validations and automated testing. This role will assist in helping to research and pilot different tools, technologies, and analytic approaches to help find the best suitable methods for the continuous automated verification routines, the scheduled human-driven routines, and to develop the partnerships across the different cross-functional teams during our verification processes. This work will be in support of the proper integrations needed for the different controls verifications and validations that will be promoted to the production monitoring platform used by the Integrated Risk Team s Controls Assurance arm. This role is a senior practitioner with extensive experience in coding, automation, API integrations, data analytics, and security engineering implementation expertise.

Responsibilities:

• Guides the strategy, approach and development of robust security & risk controls verification techniques and capabilities, which will be aligned to our controls requirements frameworks and objectives defined by the Security & Threat Solutions Strategy team.
• Supports the approval process of the security & risk controls validations as needed with the appropriate Security & Threat Solutions Strategists and Engineering teams.
• Analyzes complicated security controls requirements to develop the appropriate strategy for the controls verification methods, analytics, tooling, and practices.
• Works with controls verification and engineering teams to support data/analytics/verification methods, integrations, and strategies.
• Develops the proper testing and framework approaches to evaluate security controls efficacy during engineering implementations of required security & risk controls.
• Helps define and implement the operational monitoring framework used for Integrated Risk Team s controls assurance platform.

Skills:

• Demonstrates excellent organizational direction, time management, problem-solving, prioritization, goal setting, leadership, motivation, negotiation, and interpersonal relations
• Works well under pressure and within time/budget constraints to solve problems or meet objectives
• Strong analytical/problem-solving skills and cross-functional knowledge across multiple IT operational and security disciplines
• Must possess a high degree of integrity, be trustworthy, and have the ability to lead and inspire change