Penetration Tester

Your role

Do you have experience in performing penetration testing? Do you like to test complex applications and find ways around security controls? Do you have proven ability to report and to provide guidance for software teams to remediate vulnerabilities?
We’re looking for penetration testers to:
• Perform automated penetration tests using tools similar to BURP Enterprise and other industry-standard tools.
• Experience with Large Language Models (LLM) and Artificial Intelligence (AI) for penetration testing.
• Develop and maintain scripts and tools for pentest automation.
• Analyze test results to identify security vulnerabilities and risks.
• Prepare detailed reports with findings and recommendations.
• Communicate with application teams on how to remediate certain vulnerabilities.

As a penetration tester, you will play a crucial role in identifying and reporting vulnerabilities within critical UBS applications, including key public banking platforms. You will work closely with application teams to define the scope of work and execute your tests in a responsible manner. Utilizing the latest technologies and tools, you will detect emerging vulnerabilities and risks that could potentially compromise the bank. Furthermore, you will contribute to the enhancement and automation of internal processes and perform technical quality assurance on internal tests conducted.

Your team

You will be part of the Application Security Testing team, which operates across multiple regions and supports the Application Security Framework. This role is essential to our Technology Services, particularly in the area of Application Security Testing.

Your expertise

• 8+ years for general IT related experience and 2+ years of hands-on experience in vulnerability analysis and reporting
• Knowledge of application security frameworks (OWASP)
• Strong Experience with Burp Professional
• Web application vulnerability knowledge (mechanics, exploitations, impacts, remediations).
• General knowledge of commonly used web application technologies (GraphQL, REST/SOAP API, WAF, etc.)
Advantage:
• Certifications (OSCP, CompTIA, Burp Suite Certified Practitioner)