Penetration Tester

Job title : Penetration Tester
Location: Pune

About Barclays
Barclays is a British universal bank. We are diversified by business, by different types of customers and clients, and by geography. Our businesses include consumer banking and payments operations around the world, as well as a top-tier, full service, global corporate and investment bank, all of which are supported by our service company which provides technology, operations and functional services across the Group.

Risk and Control Objective
Ensure that all activities and duties are carried out in full compliance with regulatory requirements, Enterprise Wide Risk Management Framework and internal Barclays Policies and Policy Standards.

Working Flexibly

BUK & BX - All locations

Please discuss the detail of the working pattern options for the role with the hiring manager.

Introduction:
CASS are looking for a motivated, technically minded individual to join our expanding penetration testing team. As a penetration testing team member you will be expected to:

- Work collaboratively with a variety of internal stakeholders to deliver high quality penetration tests.
- Provide reports which highlight and clearly articulate vulnerabilities and weaknesses to clients in terms they understand.
- Contribute both on an individual assessment basis as well as a global strategic basis to raise the security posture across the organisation.
- Work within virtual teams of security and technical specialists to ensure quality delivery of leading security assurance services to our internal clients.
- Innovate towards the goal of establishing novel security assurance services and the enhancement of existing services.

What will you be doing?
- Penetration Testing
- Maintain relevant skills with which to conduct penetration testing in a number of the following domains to a significant degree of depth:

- Application
- Infrastructure
- Mobile (iOS, Android)
- Cloud
- Code review
- Work independently or as part of a team on penetration tests.
- Work with global team and external entities to deliver Security Assurance services.
- Analyse and review security issues identified.
- Have good time management and organizational skills to undertake multiple supportive and advisory tasks concurrently.
- Supplement automated assessment techniques with manual security assessment approaches.
- Communicate security issues identified and mitigation/remediation options to development community.
- Generation of clear and concise reports.
- Have a superior ability to articulate technical concepts to non-technical business owners and management.
- Provide regular assessment progress updates that include sufficient detail to convey work completed and upcoming activities.
- Provide security assurance support for security incidents/investigations as required.
- Research and Development
- Research new and emerging threats, counter controls and technologies affecting various platforms
- Build upon the existing service request model, processes and supporting technologies

What we’re looking for:

- Understanding of the security mechanisms associated with Applications, Operating Systems, Networks, Databases, Virtualisation and Cloud technologies
- Wider SDL activities such as threat/attack modelling and design review
- Understanding of network security architecture

Skills that will help you in the role:

- Knowledge of information security frameworks and standards
- Programming / scripting skills
- Experience creating innovative solutions and responding to information security incidents
- CREST/OSCP/SANS or equivalent penetration testing certification

Where will you be working?
Pune

Be More at Barclays
Interested and want to know more about Barclays? Visit home.barclays/who-we-are/ for more details.
Purpose, Values and Mindset

We deploy finance responsibly to support people and businesses, acting with empathy and integrity, championing innovation and sustainability, for the common good and the long term.
Our values underpin everything we do: Respect, Integrity, Service, Excellence and Stewardship.

Respect
We harness the power of diversity and inclusion in our business, trust those we work with, and value everyone's contribution.
Integrity
We operate with honesty, transparency and fairness in all we do.
Service
We act with empathy and humility, putting the people and businesses we serve at the centre of what we do.
Excellence
We champion innovation, and use our energy, expertise and resources to make a positive difference.
Stewardship
We prize sustainability, and are passionate about leaving things better than we found them.

Our Mindset shapes how we take action, living by our Values, driven by our Purpose, always with our customers and clients at the heart of what we do; our Mindset is to Empower, Challenge and Drive.

Empower
Trust and support each other to deliver. Make decisions with those closest to the topic. Include diverse perspectives. Celebrate success and learn from failure