Security Lead

FNZ (UK) Ltd; Pune District; On-site; INR 2,600,000 - 4,200,000; Full time

Job summary

FNZ is seeking a Penetration Testing Lead in Pune to head the India penetration testing team within the Cloud & Platform Security Team. You will coordinate with global testing services and manage delivery of security assessments across infrastructure, applications and cloud platforms.

The ideal candidate has strong hands-on penetration testing experience, knowledge of security frameworks, and proven line-management skills to lead a small team and engage with stakeholders at all levels.

Qualifications

• Proven technical knowledge of web applications, cloud platforms, mobile devices, networks and infrastructure endpoints.
• Deep exploit and vulnerability knowledge beyond automated approaches.
• Scripting and coding skills; strong operating system and network protocol understanding.
• Proven line management experience.
• Good knowledge of information security and risk frameworks (e.g., NIST CSF, ISO27001, NIST 800-53, COBIT) and auditing frameworks (ISAE3402, SOC2).
• Experience developing and managing formal security documents; able to communicate security concepts to stakeholders.
• Professional penetration testing security qualifications.

Responsibilities

• Offer global vulnerability assessment and penetration testing services; detect system weaknesses and provide remediation recommendations.
• Design and perform penetration tests to simulate cyber-attacks, integrating threats and incidents into testing priorities.
• Document findings with detailed test result reports.
• Develop and engineer penetration testing services, including automation scripts.
• Train colleagues on penetration testing techniques; oversee testing results.
• Maintain security testing operating procedures.
• Support initiatives to mature security controls, services and processes, and the Information Security strategy.
• Support the creation and delivery of security reporting and management information (MI).
• Contribute to the development and delivery of consistent global services enabling business goals.

Skills

Penetration testing

Web application security

Cloud security

Scripting

Line management

Job description

Overview

Job Title: Penetration Testing Lead

Location: Pune, India

Reports to: Platform testing and security testing lead

FNZ is seeking a Penetration Testing Lead to lead the India penetration testing team within the Cloud & Platform Security Team. The role supports a global penetration testing service that covers infrastructure, applications, mobile devices, cloud platforms and endpoints to meet regulatory, client and threat-led requirements. The service will employ a mix of internal resources, technology and third parties. You will be a penetration testing expert with security SME knowledge, experience with information security frameworks, and the ability to communicate with stakeholders at all levels. You will oversee and develop a small team of penetration testers and coordinate with third-party testing services.

Responsibilities

• Offer global vulnerability assessment and penetration testing services; detect system weaknesses and provide remediation recommendations.
• Design and perform penetration tests to simulate cyber-attacks, integrating threats and incidents into testing priorities.
• Document findings with detailed test result reports.
• Develop and engineer penetration testing services, including automation scripts.
• Train colleagues on penetration testing techniques; oversee testing results.
• Maintain security testing operating procedures.
• Support initiatives to mature security controls, services and processes, and the Information Security strategy.
• Support the creation and delivery of security reporting and management information (MI).
• Contribute to the development and delivery of consistent global services enabling business goals.

Qualifications

• Proven technical knowledge of web applications, cloud platforms, mobile devices, networks and infrastructure endpoints.
• Deep exploit and vulnerability knowledge beyond automated approaches.
• Scripting and coding skills; strong operating system and network protocol understanding.
• Proven line management experience.
• Good knowledge of information security and risk frameworks (e.g., NIST CSF, ISO27001, NIST 800-53, COBIT) and auditing frameworks (ISAE3402, SOC2).
• Experience developing and managing formal security documents; able to communicate security concepts to stakeholders.
• Professional penetration testing security qualifications.

Additional Information

About FNZ and our culture: we value teamwork, diversity and inclusion, and aim to provide opportunities for career growth across global offices. We pursue a culture of growth and collaboration while maintaining a strong commitment to equal opportunities and accessibility.