Penetration Tester

Barclays - Hanover, NJ

Full-time - Senior

Remote - Hanover, NJ

Credit Intermediation and Related Activities

About the position

Barclays Services Corp is seeking a Penetration Tester in Whippany, New Jersey, to join their team in a role that is critical for ensuring the security of the bank's IT systems. The primary responsibility of this position is to scope and execute penetration tests across a variety of technologies, including web applications, mobile platforms, and infrastructure. The successful candidate will work collaboratively with various internal stakeholders to deliver high-quality penetration tests and provide comprehensive reports that clearly articulate vulnerabilities and weaknesses in terms that clients can understand. This role is not only about individual assessments but also involves contributing to a global strategic approach to enhance the security posture of the organization. In this position, the Penetration Tester will work within virtual teams of security and technical specialists to ensure the quality delivery of leading security assurance services to internal clients. The role requires innovation towards establishing novel security assurance services and enhancing existing ones. It is essential that all activities and duties are carried out in full compliance with regulatory requirements, the enterprise-wide risk management framework, and internal Barclays policies and standards. The position may also allow for telecommuting, providing flexibility in the work environment. The purpose of this role is to identify potential vulnerabilities within the bank's IT systems using various penetration testing tools and techniques. This includes ensuring the security of computer systems, applications, servers, and networks. The Penetration Tester will be responsible for the development and execution of assessments, audits, and threat models to identify vulnerabilities within the bank's systems, applications, and servers. They will communicate key findings and recommendations to stakeholders, ensuring that security requirements and controls are understood and enhanced across business processes and applications.

Responsibilities

• Scope and execute penetration tests against a variety of technologies including web applications, mobile, and infrastructure.
• Work collaboratively with internal stakeholders to deliver high-quality penetration tests.
• Provide reports that highlight and articulate vulnerabilities and weaknesses to clients in understandable terms.
• Contribute to raising the security posture across the organization on both individual and global strategic levels.
• Work within virtual teams of security and technical specialists to ensure quality delivery of security assurance services.
• Innovate to establish novel security assurance services and enhance existing services.
• Ensure compliance with regulatory requirements, enterprise-wide risk management framework, and internal policies.
• Develop and execute assessments, audits, and threat models to identify vulnerabilities.
• Collaborate with stakeholders and IT teams to identify emerging cyber-attack techniques and support the development of penetration testing methodologies.
• Maintain comprehensive documents and reports for senior stakeholders on penetration test findings and remediation guidance.
• Identify emerging vulnerabilities, exploit codes, and cyber-attacks to develop testing methodologies.

Requirements

• Senior level experience in Risk Management Framework (RMF).
• Proficiency in penetration testing tools and techniques.
• Strong understanding of IT systems, applications, servers, and networks security.
• Ability to communicate complex information effectively to stakeholders.
• Experience in collaborating with various teams to enhance security posture.
• Ability to innovate and develop new security assurance services.

Nice-to-haves

• Experience with emerging cyber-attack techniques and tools.
• Familiarity with regulatory compliance in the financial sector.
• Knowledge of risk management and governance policies.

Benefits

• Competitive salary range of $119K - $151K per year.
• Opportunities for telecommuting.
• Professional development and training opportunities.