Penetration Tester

Job description

Description

Are you looking to take your career to the next level?

Procter & Gamble is seeking a highly skilled Penetration Tester to join our Penetration Testing team and find security vulnerabilities before others do.

This role works in a broad P&G environment, with a key focus of mission-critical applications and infrastructure.It is a unique opportunity to be immersed in the global IT ecosystem of a Fortune 500 company, and work on vulnerabilities that would never be found in short-term penetration testing engagements. The role requires deep security knowledge and an ability to continuously learn.

Penetration Testers in this role must be well versed in multiple security domains. In this position, you will partner with other Cyber Defense Teams to achieve the shared vision of enhancing P&G’s cyber security posture.

Responsibilities:

·  Perform manual penetration tests of websites, services, infrastructure and networks to discover and exploit vulnerabilities;
·  Collaborate with other penetration testers;
·  Clearly document and communicate findings and remediation recommendations to the application/service owners;
·  Develop tools that automate discovery or exploitation (e.g. bash, Python, JavaScript);
·  Partner with Cyber Defense Operations SOC teams to operationalize new detection concepts.
Qualifications

· 
Bachelor’s degree in Information Systems, Information Technology (IT), Computer Science, Engineering, or other technical/IT field with relevant experience;

· 
Strong analytical skills, able to leverage complex data to identify opportunities, recognize problems, and draw logical conclusions;

· 
Demonstrated experience in one or more computer programming and scripting languages such as Python, Bash, PHP, Java, C/C++, C#, JavaScript, Perl, Ruby;

· 
Experience with penetration testing tools such as Metasploit, Burp Suite, Nmap, etc.;

· 
Experience with manual attack and penetration testing;

· 
Familiarity with multiple operating systems, minimally Windows and Linux;

· 
Understanding of network architecture, or how networks operate in general;

· 
Willingness to obtain the Certified Information System Security Professional (CISSP) certification within 1 year. Additionally, willingness to obtain within 15 months, at least 1 other ethical hacking related certification.P&G provides study preparation and exam cost coverage;

· 
Work from the Warsaw, Poland Procter & Gamble office location.

Preferred Qualifications

· 
Certifications: OSCP, OSCE, OSWE, GPEN, GXPN, GWAPT;

· 
Understanding of web-based security vulnerabilities, ability to identify and exploit them (e.g. XSS, CSRF, SQLi, session management issues, etc.);

· 
Prior experience in web development;

· 
Experience in CTF competitions or Bug Bounty programs.

You can expect:

· 
Competitive starting salary and benefits program (private health care, life insurance, PG stock options, saving plans, lunch subsidy);

· 
P&G Dynamic Living programs (sport cards, in-office fitness centre);

· 
Regular salary increases and possible promotions - all in line with your results and performance;

· 
Flexible work arrangements;

· 
Mentoring programs & training.

Who we are:

P&G was founded over 180 years ago as a simple soap and candle company. Today, we’re the world’s largest consumer goods company and home to iconic, trusted brands that make life a little bit easier in small but meaningful ways. We’ve spanned three centuries thanks to three simple ideas: leadership, innovation and citizenship. The insight, innovation and passion of hardworking teams has helped us grow into a global company that is governed responsibly and ethically, that is open and transparent, and that supports good causes and protects the environment. This is a place where you can be proud to work and do something that matters.

We commit to provide you with equal opportunities in employment. We value diversity and we do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

Job locations:
Warsaw, Warsaw, Poland Job Type: Full-time Job categories: Information Technology Req No: IT 00002821