Job Description
Your role Do you have experience in performing penetration testing? Do you like to test complex applications and find ways around security controls? Do you have proven ability to report and to provide guidance for software teams to remediate vulnerabilities?
We're looking for a penetration tester:
•perform manual penetration testing against web, thick-client and mobile applications and manual penetration testing against critical infrastructure (e.g. Active Directory, LDAP)
•identify and report vulnerabilities using common methodologies and have extensive knowledge of OWASP
•communicate with application teams on how to remediate certain vulnerabilities
•have knowledge of a variety of technologies and tools, such as Burp Suite, DAST, Azure cloud,
•participate in process improvements and automation
•perform technical QAs, including false-positive analysis and risk rating reviews
Your team You will be part of the Application Security Testing team, which operates across multiple regions and supports the Application Security Framework. This role is essential to our Technology Services, particularly in the area of Application Security Testing.
Diversity helps us grow, together. That's why we are committed to fostering and advancing diversity, equity, and inclusion. It strengthens our business and brings value to our clients.
Your expertise •ideally, 5+ years of hands-on experience in penetration testing web, thick-client and mobile applications
•hands-on experience with testing critical infrastructure such as AD, LDAP, DNS, etc.
•proficient with Microsoft o365 suite - specifically focused on PowerPoint, Excel, Outlook, etc.
•demonstrates exceptional attention to detail and possesses strong problem-solving skills
•track record of explaining technical issues to application teams and assisting them in resolving issues
• great communicator that can explain technology to non-technical audiences
•ability to properly document vulnerabilities and to produce penetration test report
•ideally certifications in cyber security area, such as OSWE, OSCP, CompTIA Security+, Burp Suite Certified Practitioner
"At UBS, we appreciate our Veterans and are committed to providing opportunities in Financial Services."
*LI-UBS
*UBS-MOGUL
About us UBS is the world's largest and the only truly global wealth manager. We operate through four business divisions: Global Wealth Management, Personal & Corporate Banking, Asset Management and the Investment Bank. Our global reach and the breadth of our expertise set us apart from our competitors..
We have a presence in all major financial centers in more than 50 countries.
Join us At UBS, we embrace flexible ways of working when the role permits. We offer different working arrangements like part-time, job-sharing and hybrid (office and home) working. Our purpose-led culture and global infrastructure help us connect, collaborate, and work together in agile ways to meet all our business needs.
From gaining new experiences in different roles to acquiring fresh knowledge and skills, we know that great work is never done alone. We know that it's our people, with their unique backgrounds, skills, experience levels and interests, who drive our ongoing success. Together we're more than ourselves. Ready to be part of #teamUBS and make an impact?
Job Tags
Part time, Job sharing, Work at office, Work from home, Flexible hours,