Penetration Tester, AVP

Barclays Services Corp. seeks a Penetration Tester at the AVP level to conduct penetration tests and code reviews, delivering Security Assurance Services and communicating vulnerabilities to improve Barclays' security posture. The role is based in Whippany, New Jersey with a hybrid work arrangement and spans testing across web, mobile, infrastructure, and cloud environments. This position emphasizes collaboration with diverse stakeholders to elevate the organization’s security controls.

Responsibilities

• Scope and execute penetration tests and code reviews across web applications, mobile apps, infrastructure, and cloud environments.
• Collaborate with internal stakeholders to deliver high-quality penetration testing engagements.
• Partner with global teams and external entities to provide Security Assurance Services.
• Analyze and review identified security issues.
• Augment automated assessments with manual security testing techniques.
• Communicate vulnerabilities and remediation options to the development community.
• Research emerging threats, countermeasures, and technologies affecting multiple platforms.
• Enhance the existing service request model, processes, and supporting technologies.
• Produce reports that clearly articulate vulnerabilities in terms clients understand.
• Contribute to both individual assessments and global security posture initiatives across the organization.
• Work within virtual teams of security and technical specialists to ensure delivery quality of security assurance services.
• Innovate to establish novel security assurance services and improve existing ones.
• May telecommute in line with company policies (hybrid role).

Compensation

Salary: USD 168,500 - 170,000 per year.

Purpose of the role

To identify potential vulnerabilities within Barclays IT systems using penetration testing tools and techniques to ensure the security of computer systems, applications, servers, and networks.

Accountabilities

• Develop and execute assessments, audits, and threat models to identify vulnerabilities across Barclays' systems, applications, and servers using penetration tools and techniques, and communicate findings and recommendations to stakeholders.
• Collaborate with stakeholders and IT teams to identify emerging cyber-attack techniques, tools, and technologies and support the development of penetration testing methodologies.
• Develop and maintain comprehensive documents and reports for senior stakeholders on penetration test findings and remediation guidance.
• Collaborate with stakeholders to understand security requirements and controls in business processes and applications/services to enhance overall security posture and assurance.
• Identify emerging vulnerabilities, exploit codes, and cyber-attacks to develop testing methodologies and assurance activities.

Assistant Vice President Expectations

• Advise and influence decision making, contribute to policy development, and take responsibility for operational effectiveness; collaborate with other functions and business divisions.
• Lead a team performing complex tasks, using professional knowledge to deliver work impacting the entire business function; set objectives and coach staff toward those objectives, evaluating performance and rewards.
• If leadership responsibilities exist, demonstrate leadership behaviors to create an environment for colleagues to thrive and deliver excellence, following the four LEAD behaviors: Listen and be authentic, Energize and inspire, Align across the enterprise, Develop others.
• Alternatively, as an individual contributor, lead collaborative assignments and guide team members, identifying the need for additional specialties to complete tasks and exploring new directions for assignments or projects.
• Consult on complex issues, providing guidance to People Leaders to support escalated issue resolution.
• Identify ways to mitigate risk and develop new policies and procedures supporting governance and control.
• Own risk management and strengthen controls related to the work performed.
• Perform work closely related to other areas, understanding how they coordinate to achieve organizational objectives.
• Collaborate with other business-aligned areas to stay aligned with activity and strategy.
• Engage in complex analysis of data from multiple sources to solve problems creatively and effectively.
• Communicate complex information to diverse audiences, including sensitive material.
• Influence or persuade stakeholders to achieve outcomes.