Capital International Group - San Antonio, TX
posted 3 months ago
As the Penetration Testing Operations Lead at Capital Group (CG), you will serve as a vital individual contributor within the AppSec / Penetration Testing team, which is part of the broader Information Security division in CG's Information Technology Group. This role is designed for someone who is passionate about driving improvements in the systems and processes that underpin our penetration testing function. You will engage in exciting attacks and enhancements, ensuring that our security assessments are thorough and effective. Your primary responsibility will be to coordinate and communicate with key technology and business stakeholders to deliver comprehensive security assessments while advising on technology risks and their mitigations. In this hybrid role, which requires in-office attendance three days a week, you can be based in Irvine, CA, San Antonio, TX, or New York, NY, depending on your current location and preference. You will own programs of work that drive improvements across enterprise systems and processes, identifying challenges and pain points, and providing innovative solutions to address them. Your technical expertise will be crucial in offering solutions to day-to-day challenges using both internal and external technologies. You will support a data-driven approach by gathering, analyzing, and presenting data from various internal systems to pinpoint areas for improvement and recommend actionable solutions. Additionally, you will provide operational support to both internal and third-party penetration testers, ensuring the smooth progression of services. As a technical leader in the penetration testing function, you will engage with stakeholders across the business to foster collaborative improvement efforts that enhance the security of our products and services. Your role will also involve analyzing penetration testing results and preparing detailed reports that document identified vulnerabilities, their potential impacts, and recommended remediation actions. You will work closely with cross-functional teams, including developers, system administrators, and business stakeholders, to prioritize and address security findings. Effective communication will be key, as you will need to author clear, actionable guidance on secure coding practices while maintaining an empathetic outlook towards development teams. Staying current with the latest security trends, vulnerabilities, and attack techniques will be essential for continuously improving internal testing methodologies and staying ahead of potential threats. You will actively advocate for secure software development methodologies among software development teams, ensuring that security and privacy are integrated into the design process.