Security Tester

NatWest Group; City of Edinburgh; On-site; GBP 40,000 - 60,000; Full time

Job summary

A leading bank is looking for a Security Tester to support secure services that protect colleagues and customers. This role involves participating in agile processes and ensuring robust security throughout the development lifecycle, while collaborating with various teams to drive innovation and effective risk management.

Qualifications

• Experience in web application and infrastructure level penetration testing.
• Ability to write technical reports and detailed presentations.
• Willingness to learn risk management frameworks.

Responsibilities

• Support risk identification and contribute to risk management strategies.
• Collaborate with feature teams during the development lifecycle.
• Contribute to the centre of excellence by sharing best practices.

Skills

Risk management

Web application penetration testing

Infrastructure penetration testing

Testing methodologies

Agile methodologies

Technical reporting

Education

Ethical Hacking or Information Security degree

Job description

Join us as a Security Tester

• Take on a new challenge and use your specialist knowledge to support the wider organisation in building and operating secure services that protect both colleagues and customers
• You’ll act as a subject matter expert in a security related field, making sure that the security implications of the backlog are understood in the right way, building security early into design
• You’ll be joining an exciting and fast-paced area of the bank, where you can expect great exposure both for you and your work

What you'll do

As a Security Tester, you’ll work at a domain level to understand and ensure robust security is continuously considered and incorporated at every stage, programme increment and feature team delivery throughout the development lifecycle and through to support.

You’ll collaborate with feature teams and participate in story refinement, sprint planning and retrospective sessions, establishing a culture of innovation and strategic thinking that makes sure that the bank has knowledge of, and opportunities to exploit, the latest developments in your area of specialism.

You’ll also be:

• Supporting with the identification of risks, while contributing to risk management strategies to achieve business objectives and customer outcomes
• Understanding and implementing Agile methodologies and actively contributing to finding opportunities to build security early into design
• Making sure that decisions made are based on robust data, return on investment and value measures that demonstrate thoughtful and intelligent cost management
• Actively contributing to your centre of excellence (CoE) specialism by cross sharing learnings and best practice with CoE and community of practice colleagues
• Building and leveraging relationships with colleagues across the bank and third parties to ensure decisions made are commercially focused and create long term value for the organisation

The skills you'll need

To be successful in this role, you’ll need knowledge of one or more security subject areas and experience of setting risk appetites. Alongside a successful track record of discovering vulnerabilities and security flaws, you'll need the ability to write technical reports, detailed presentations and documentation.

You’ll also demonstrate experience of, or a willingness to learn risk management frameworks. On top of this, you'll need the ability to deliver security testing services in line with approved processes, providing relevant and timely advice relating to identified findings and recommendations.

Additionally, you’ll need:

• Web application and infrastructure level penetration testing experience, or a relevant degree such as Ethical Hacking or Information Security
• A background of defining policy controls
• An understanding of completing benchmarking to peers and industry standards
• The ability to communicate clearly and concisely, translating technical issues into business terms
• A good understanding of Agile methodologies
• Knowledge of testing methodologies