Security Engineer Penetration Tester

Job description

Nombre del sítio: Poznan Business Garden Pastelowa
Fecha de publicación: Feb 19 2024

Our Cyber Security organisation enables GSK to take on some of the biggest healthcare challenges in the world by protecting our business, customers, and patients from cyber risks. We are investing in growing our Cyber Security teams because they play a pivotal role as the nature and types of threats get more sophisticated.

In this ever-evolving digital and technology landscape, it is critical to stay on top of issues that could cause us harm. This requires a deep understanding of cybersecurity concepts, techniques, and trends along with critical thinking. Our Cyber Security teams are continuously learning and developing their skills to protect against bad actors, allowing GSK to stay focused on what matters most – getting ahead of disease together.

As Penetration Tester you will be responsible for carrying out the penetration testing strategy and workflows. You will identify security risks, determine the causes of security violations, and suggest remediation plans and improve security.  You will report cyber security key performance indicators for vulnerability management.

This role will provide YOU the opportunity to lead key activities to progress YOUR career.  The responsibilities include the following:

·  Operate in a hands-on role involving penetration testing and vulnerability assessment activities of complex applications, operating systems, wired and wireless networks, and mobile applications/devices
·  Automate penetration and other security testing on networks, systems and applications
·  Develop meaningful metrics to reflect the true posture of the environment allowing the organization to make educated decisions based on risk
·  Produce actionable, threat-based, reports on security testing results
·  Act as a source of direction, training, and guidance for less experienced staff
·  Mentor and coach other IT security staff to provide guidance and expertise in remediating findings and concerns identified
·  Consult with application developers, systems administrators, and management to demonstrate security testing results, explain the threat presented by the results, and consult on remediation
·  Communicate security issues to a wide variety of internal and external “customers” to include technical teams, executives, risk groups, vendors and regulators
·  Foster and maintain relationships with key stakeholders and business partners

​Why you?
Basic qualifications:

·  Previous working experience as a Penetration Testing Expert for 2 year(s) or more
·  BA in Computer Information Systems, Management Information Systems or similar relevant field
·  In-depth knowledge of application development processes and at least one programing or scripting language (e.g., Java, Scala, C#, Ruby, Perl, Python, PowerShell)
·  Hands on experience with testing frameworks such as the NIST CSF, PTES or OWASP
· 
Applicable knowledge of Windows client/server, Unix/Linux systems, Mac OS X, VMware, Active Directory and cloud technologies such as Azure, or Google Cloud

Preferred Qualifications:

·  Experience with OT / SCADA testing
·  Pen Testing Certifications (OSCP, GPEN, etc.)
·  System Administrator background

 

Benefits:

·  Career at one of the leading global healthcare companies
·  Contract of employment
·  Attractive reward package (annual bonus & awards for outstanding performance, recognition awards for additional achievements and engagement, holiday benefit)
·  Life insurance and pension plan
·  Private medical package with additional preventive healthcare services for employees and their eligible
·  Sports cards (Multisport)
·  Possibilities of development within the role and company’s structure
·  Personalized learning approach (mentoring, online trainings’ platforms: Pluralsight, Business Skills, Harvard Manage Mentor, Skillsoft and external trainings)
·  Extensive support of work life balance
·  Supportive community and integration events
·  Modern office with creative rooms, fresh fruits everyday
·  Free car and bike parking, locker rooms and showers.

#GSKcso
G8

Si necesita una adaptación u otra asistencia para solicitar un trabajo en GSK, comuníquese con el Centro de Servicios de RR. HH. de GSK al 1-877-694-7547 (gratis en los EE. UU.) o al +1 801 567 5155 (fuera de los EE. UU.).

GSK es un empleador que cree en la igualdad de oportunidades y la acción positiva. Todos los solicitantes calificados recibirán la misma consideración para el empleo sin tener en cuenta la raza, el color, el origen nacional, la religión, el sexo, el embarazo, el estado civil, la orientación sexual, la identidad o expresión de género, la edad, la discapacidad, la información genética, el servicio militar, el estado de veterano cubierto o protegido o cualquier otra clase federal, estatal o local protegida.

Aviso importante a las empresas o agencias de empleo

GSK no acepta recomendaciones de empresas de empleo o agencias de empleo con respecto a las vacantes publicadas en este sitio. Todas las empresas o agencias de empleo están obligadas a ponerse en contacto con el Departamento de Contrataciones Comerciales y Generales o el Departamento de Recursos Humanos de GSK para obtener autorización previa por escrito antes de recomendar a cualquier candidato a GSK. La obtención de autorización previa por escrito es una condición precedente a cualquier acuerdo (verbal o escrito) entre la empresa o agencia de empleo y GSK. En ausencia de dicha autorización por escrito, se considerará que las acciones que emprenda la empresa o agencia de empleo se han realizado sin el consentimiento o el acuerdo contractual de GSK. Por lo tanto, GSK no será responsable de ninguna tarifa derivada de tales acciones o cualquier tarifa que surja de cualquier recomendación por parte de las empresas o agencias de empleo con respecto a las vacantes publicadas en este sitio.

Tenga en cuenta que si usted es un profesional de la salud con licencia de EE. UU. o profesional de la salud según lo definido por las leyes del estado que emite su licencia, puede ser necesario que GSK recolecte e informe los gastos en los que GSK incurre, en su nombre, en el caso de que se lo entreviste para el empleo. Esta recolección de las transferencias de valor aplicables es necesaria para garantizar el cumplimiento de GSK con todos los requisitos federales y estatales de Transparencia de los Estados Unidos. Para obtener más información, visite el sitio de Informe de Transparencia de GSK For the Record .