Information Security Penetration Tester - Lead (Remote)

$112,300 - $185,400/Yr

BD - Franklin Lakes, NJ

Full-time - Mid Level

Remote - Franklin Lakes, NJ

5,001-10,000 employees

Miscellaneous Manufacturing

About the position

The Information Security Penetration Tester - Lead role at BD involves leading the penetration testing service to ensure the security of medical devices and IT/OT infrastructure. This position requires a focus on security testing, vulnerability research, and providing guidance on secure architecture and development practices. The role is remote but requires working during EST hours, and ongoing training in security domains will be provided.

Responsibilities

• Develop, implement and mature global penetration testing service including red teaming.
• Manage hybrid team of internal associates and external vendors.
• Perform code reviews manually and by utilizing Static Code Analysis tools.
• Conduct penetration testing and vulnerability research.
• Support developers in their SDLC and provide guidance on mitigations to emerging threats.
• Engage in threat modeling activities.
• Provide guidance on secure architecture design and DevSecOps as required.
• Plan remediation for identified and emerging threats found through security testing.
• Develop, maintain, and improve security tools.
• Create and deliver security training to internal development teams and other stakeholders.
• Engage in project and research work as required.

Requirements

• High School Diploma required.
• Minimum of 5+ years' experience in product security testing, security consultancy or equivalent.
• Experience establishing and maturing a red team.
• Development experience in C#, C++ or Java.

Nice-to-haves

• Bachelor's degree in Information Systems, Computer Science, or Engineering Degree preferred but not required.
• Offensive Security Certified Professional (OSCP), Offensive Security Certified Expert (OSCE) or Offensive Security Web Expert (OSWE) certification preferred but not required.

Benefits

• Competitive salary package
• Ongoing training and education on security domains and technologies
• Flexible work environment with remote options
• Opportunities for career growth and development