Security Test Engineer

**Our opportunity****Penetration Tester**Zurich is heavily transforming to an organization where all our projects are built following Agile and DevOps methodologies. You have the chance to actively be part of this transformation and help shaping the future.You’ll be responsible provide penetration testing for the Application Security Testing CoE Team. The team provides global support to Zurich IT projects to enable them to perform and report on penetration tests.You will be working in a very dynamic environment using advanced vulnerabilities/threats identification solutions with professional opportunities to grow in CoE team and beyond and up skilling opportunities.**Your role*******As a Penetration Tester Your Main Responsibilities Will Involve**Zurich’s Penetration Testing Team is designed as an internal team to provide penetration testing as a service to Zurich business units around the world. This role will interact with internal teams and organizations to scope, perform and report on penetration tests.**Key Tasks Include**- Work with internal customers to determine scope and rules of engagement.- Conduct and/or support authorized penetration testing on enterprise network assets.- Create reports and recommendations from findings, include issues uncovered and levels of risk.- Collaborate with other internal and external partner organizations on target access and operational issues.- Create comprehensive exploitation strategies that identify exploitable technical or operational vulnerabilities.- Responsible for the thorough documentations of implementations, via technical documentation and run-books.- Interpret security and technical requirements into business requirements and communicate security risks to relevant stakeholders ranging from business leaders to engineers- Responsible for automating security controls, data and processes to provide improved metrics and operational support- Stay abreast of emerging security threats, vulnerabilities and controls- Spot and execute new security technologies and best practices**Your Skills And Experience****As a Penetration Tester your skills and qualifications will ideally include**:- At least 3 years Cyber Security, IT System or Network Administration experience.- Knowledge of evasion strategies and techniques (A/V, WAF, NGAV, EDR, etc.)- Experience in one of the following areas:- Network Penetration testing- Mobile Application Penetration testing- Web Application Penetration testing- Ability to identify/describe target vulnerability.- Experience with leveraging penetration testing tools including Metasploit, BurpSuite, SQLmap, Nessus or the Kali Linux tool set.- Knowledge of software development and testing methodologies along with change and configuration management practices in multiple environments.- Demonstrated ability to explain complex technical issues to both technical and non-technical audiences; own a collaborative, partnership mentality.- Team player with a positive attitude, strong communication (English and Spanish verbal and written) & interpersonal skills- Ability to think outside of the box and be innovative by keeping abreast of new trends, identifying opportunities to bring in change for business benefit**Technical Skills**- Education: Bachelor’s degree in Information Systems or Computer Science.- Strong familiarity with Linux and Windows operating systems.- Understanding of complex enterprise environments and current technology areas- Certification: One or more of the following certifications: OSCP, OSWE, GPEN, GWAPT and/or GMOB- Communication skills: In executing their duties, cloud security engineers must communicate with various audiences, including business leaders, engineers, clients, and team members. It is important that they have great verbal communication skills to convey information to the relevant audience. They also require exceptional written communication skills, documentation and reporting- Teamwork abilities: The Senior Penetration Tester is expected to work with various multi-disciplinary teams, so it is vital that they are team-oriented individuals with priority on the successful completion of group goals- Excellent analytical and troubleshooting skills: It is also essential that applicants have the necessary technical skills to constantly monitor systems to identify threats and vulnerability, execute security architecture, and ensure there are no external threats.**Additional Information**Fluent English spoken and written required.**Who we are**Looking for a challenging and inspiring work environment where you can make a difference? At Zurich millions of individuals and businesses place their trust in our products and services every day. Our 53,000 employees worldwide form the basis of our success, enabling, businesses and communities to face a world of risk with confidence. Imagine if you could help people do this all over the world. You’d give them co