Information Security Penetration Tester - Lead (Remote)

$112,300 - $185,400/Yr

BD - Franklin Lakes, NJ

Full-time - Mid Level

Remote - Franklin Lakes, NJ

Miscellaneous Manufacturing

About the position

The position is for a security-focused researcher or red teamer at BD, responsible for leading the Information Security Penetration Testing service. The role involves performing security testing and research on products, IT and OT infrastructure, and systems, with a focus on identifying and exploiting security vulnerabilities in medical devices and related technologies. The individual will engage in penetration testing, security analysis, and research on current technologies and attacks, while also providing guidance on secure architecture and development practices.

Responsibilities

• Develop, implement and mature global penetration testing service including red teaming.
• Manage hybrid team of internal associates and external vendors.
• Perform code reviews manually and by utilizing Static Code Analysis tools.
• Conduct penetration testing & vulnerability research.
• Support developers in their SDLC and provide guidance on mitigations to emerging threats.
• Conduct threat modeling and provide guidance on secure architecture design and DevSecOps as required.
• Provide remediation planning for identified and emerging threats found through security testing.
• Develop, maintain, and improve security tools.
• Create and deliver security training to internal development teams and other stakeholders.
• Engage in project and research work as required.

Requirements

• High School Diploma required.
• Minimum of 5+ years' experience in product security testing, security consultancy or equivalent.
• Experience establishing and maturing a red team.
• Development experience in C#, C++ or Java.

Nice-to-haves

• Bachelor's degree in Information Systems, Computer Science, or Engineering Degree preferred but not required.
• Offensive Security Certified Professional (OSCP), Offensive Security Certified Expert (OSCE) or Offensive Security Web Expert (OSWE) certification preferred but not required.

Benefits

• Competitive salary range of $112,300.00 - $185,400.00 USD annually.
• Opportunities for ongoing training and education in security domains and technologies.
• Support for work-life balance with flexible working arrangements.