Penetration Tester

This is an internally focussed role, focussed on testing a range of core applications for the business. This business grows throguh mergers and aqusitions, so you will be responsible for ensuring that new applications, software and products can be integrated safely and with minimal risk. Alongside this, you will need knowledge of governance, risk and compliance practices, to ensure that the applications are secure. You will have the opportunity to grow this role significantly as the business is looking to triple in the next few years, you will have training and development budget, and they will be looking for you to put your own stamp on how pen testing is done for the business. You will also collaberate with an external pen testing team, and define what this servcie looks like for the business.

Day to day of the role:

Conduct application security assessments and manage external penetration tests, including any necessary remediations.
Develop, implement, and maintain application security policies, standards, and procedures.
Act as a InfoSec representative, promoting secure design principles in application development projects.
Lead the integration of security tools, standards, and processes into the software development lifecycle (SDLC).
Provide expert guidance and leadership to development teams on remediating identified security vulnerabilities.
Document and manage product vulnerability and risk management programs.
Perform periodic security reviews and threat modelling.
Implement a secure coding framework, incorporating best practices, and provide secure coding education to software developers.
Stay updated on the latest security trends, vulnerabilities, and countermeasures; adjust security practices accordingly.
Collaborate with other teams to ensure a unified and comprehensive security strategy.