Position: Senior Penetration Tester IRC173996
Company: Global Logic
Experience required: 5y
English level: upper

Senior Penetration Tester on the new Hitachi project

Description:

Do you wish to become a key member of a global IT company? If solutions dedicated to transportation sound interesting to you?

We seek a Senior Penetration tester, eager to work in a stable environment with multiple locations (CET time zone) and cultures in a self-driven, independent manner, motivated to commit to Industry 4.0 technologies.

It will be your responsibility to build a strategic software solution for Hitachi. The solution is dedicated to supporting personal modes of transportation through different modes of transport. The assumptions include the following: Be-in/Be-out in many configurations; Pre- and Post-paid transaction or client recognition thanks to Bluetooth or RFID technology.

Requirements:

Experience and Skills:

Strong written and verbal communication skills in English language – used for all formal communication.
Ability of critical thinking to form and clearly articulate identified issues and their consequences.
Ability to comfortably hold a conversation on cyber security aspects with both technical and non-technical audiences.
Maintain a wide breadth of penetration testing and/or leadership management skills to a significant degree of depth.
Understand the business context/significance of technical penetration testing findings.
Consistently output superior quality of deliverables.
Ability to work independently or lead any size team of penetration testers.
Demonstrated ability to solve complex technical problems.

The ideal candidate for this position will have:

At least 5 years of prior demonstrable hands-on experience in penetration testing.
Solid understanding of the platform security models for iOS and Android platforms.
Excellent understanding of platform-specific security risks, common vulnerabilities for mobile applications, common risks in financial applications.
Practical knowledge of penetration testing of widely understood infrastructure, web and mobile technologies, using manual and automated testing methods.
Excellent TCP/IP knowledge and understanding of security implications/issues.
Strong web application testing experience.
Ability to explain security functionality from first principles.
Ability to adapt and apply information to new scenarios and technologies.
Strong understanding of applied use of cryptography in application development.
Strong grasp of common technologies, protocols and architectures commonly used by mobile applications. (HTML, XML, JavaScript, JSON, REST, Micro-services etc.)
Experience with dynamic and static application security testing and associated tools.
Knowledge of enterprise application design & common security issues associated with it.
Advanced knowledge of common security analysis tools and testing techniques especially for the mobile security space
Knowledge of security verification of mechanisms & technologies such as SSL, Pinning, Biometric Authentication, Out of Band Authentication, JWT, SAML, RASP, Oauth2 etc.
Good to have knowledge of Java and Appium.

Job Responsibilities:

Lead/perform and own the design and delivery of penetration tests across a variety of technologies.
Work within virtual teams of security and technical specialists to ensure quality delivery of world class security solutions to the business.
Lead penetration tests designed to highlight and clearly articulate risk to the business, in terms the business can understand.
Drive and lead penetration tests and resulting deliverables, to aid in ensuring that the Bank operates within defined risk appetite
Represent Cybersecurity functions as a technical SME in internal and external discussions.
Help drive the maturity of Cybersecurity function by continuously improving quality of our services and removing inefficiencies, in line with wider Cybersecurity strategy.
Ensure compliance with internal audit and external regulators, to ensure that any organisational changes are fit for purpose and meet their expectations.
Collaborate with relevant stakeholders to enhance the delivery of a Cybersecurity strategy to secure the technology,reputation and stakeholder value.
Provide supervision, guidance and mentor less experienced members of a team.

What We Offer

Exciting Projects: Come take your place at the forefront of digital transformation! With clients across all industries and sectors, we offer an opportunity to participate in creating market-defining products using the latest technologies.

Collaborative Environment: Expand your skills by collaborating with a diverse team of highly talented people in an open, laidback environment — or even abroad in one of our global centers or client facilities!

Work-Life Balance: GlobalLogic prioritizes work-life balance, which is why we offer flexible opportunities and options.

Professional Development: Our dedicated Learning & Development team regularly organizes certification and technical / soft skill training to help you realize your professional goals.

Excellent Benefits: We provide our consultants with competitive compensation and benefits

Fun Perks: We want you to love where you work, which is why we host sports classes, cultural, social and team building activities such as sports competitions and end-of-year corporate parties. Our vibrant offices also include dedicated GL Zones and rooftop decks where you can drink coffee or tea with your colleagues over a game of table football or darts!

About GlobalLogic

GlobalLogic is a leader in digital engineering. We help brands across the globe design and build innovative products, platforms, and digital experiences for the modern world.

By integrating experience design, complex engineering, and data expertise—we help our clients imagine what’s possible, and accelerate their transition into tomorrow’s digital businesses.

Headquartered in Silicon Valley, GlobalLogic operates design studios and engineering centers around the world, extending our deep expertise to customers in the automotive, communications, financial services, healthcare and life sciences, manufacturing, media and entertainment, semiconductor, and technology industries.

GlobalLogic is a Hitachi Group Company operating under Hitachi, Ltd. (TSE: 6501) which contributes to a sustainable society with a higher quality of life by driving innovation through data and technology as the Social Innovation Business.