Senior Penetration Tester

Global Payments; Pune District; On-site; INR 1,000,000 - 1,800,000; Full time

Job summary

Global Payments is seeking a security professional to conduct real world attack simulations against corporate assets, networks and applications, using ethical hacking techniques. The role covers planning, execution and reporting across consulting, purple team, red team and vulnerability validation.

You will coordinate with internal customers, document engagement plans, and present findings with risk levels.

Qualifications

• Bachelor's degree or equivalent in security, networking or computer science.
• Ethical hacking/penetration testing experience; CEH/GPEN or equivalent.
• Minimum 4 years relevant experience; 6+ preferred.

Responsibilities

• Coordinate and plan engagements with internal customers with medium oversight from senior team members.
• Execute engagements as planned with limited oversight.
• Identify and exploit complex scenarios using stealth and evasion techniques.
• Answer questions about compliance, regulatory and policy standards.
• Document engagement plans and schedules; lead meetings with internal customers.
• Propose final findings with preliminary risk assessments.
• Analyze intelligence data to determine risks and targets.

Skills

Ethical hacking

Penetration testing

Threat hunting

Security assessment

Exploit development

Intelligence analysis

Education

Bachelor's degree in security / networking / CS

Job description

Every day, Global Payments makes it possible for millions of people to move money between buyers and sellers using our payments solutions for credit, debit, prepaid and merchant services. Our worldwide team helps over 3 million companies, more than 1,300 financial institutions and over 600 million cardholders grow with confidence and achieve amazing results. We are driven by our passion for success and we are proud to deliver best-in-class payment technology and software solutions. Join our dynamic team and make your mark on the payments technology landscape of tomorrow.

Summary of This Role

Conducts planned and authorized real world attack scenarios against corporate assets, networks and applications utilizing common hacking methodologies and tools. Leveraging industry standard methodologies, evaluates corporate security posture through various technical, manual and automated methods to accomplish various designated goals such as the review and evaluation of software or network architecture and design (consulting), the coordinated validation of defensive controls (purple team), attempted exploit, pivot and exfiltration of data (red team) and manual review / validation of the existence of vulnerabilities on systems (penetration testing). This is a highly technical and specialized position within security that requires a wide array of experience, knowledge and discipline in all aspects of IT (development, operations and security).

What Part Will You Play?

• Creates, coordinates and plans engagements with internal customers with medium oversight from senior team members.
• Has plans validated and approved by an assigned senior team member and executes according to plan with limited oversight.
• Ability to identify and exploit more complex scenarios as well as employing stealth and evasion techniques.
• Be able to accurately answer questions about compliance, regulatory and policy standards.
• Independently gather requirements in order to create appropriate engagement documentation and schedules.
• Can begin to document engagement plans for how an engagement is executed by other team members (under guidance of senior member of the team).
• Gathers and proposes final report findings with preliminary analysis and severity assignments.
• Perform complex analysis on intelligence data to determine preliminary risks and targets as well as identify risk and findings.
• Independently set up and lead meetings with internal customers to coordinate the execution of engagements.
• Ability to communicate complex ideas to various degrees of technical resources.
• Ability to professionally communicate both verbally and in written form.
• Ability to evaluate proposed remediation actions and recommend alternate actions under moderate supervision.
• Understand more complex architecture and design concepts of applications, hardware and networks and how they impact the security posture of the enterprise.
• Apply corporate and security ethics in every aspect of day to day activities.

What Are We Looking For in This Role?

Minimum Qualifications Bachelor's Degree Relevant Experience or Degree in: with a concentration in security, networking or development / computer science Typically Minimum 4 Years Relevant Exp Ethical Hacking/Penetration Testing, software development, cyber forensics or threat hunting. Additional 4 years related experience may be considered in lieu of a degree. Certified Ethical Hacker (CEH) or GIAC Penetration Tester (GPEN) or equivalent certification

Preferred Qualifications Typically Minimum 6 Years Relevant Exp Ethical Hacking/Penetration Testing, software development, cyber forensics or threat hunting. one or more of the following: CISSP, CEH, GPEN, GXPN, GWAPT, OSCP

What Are Our Desired Skills and Capabilities?

• Skills / Knowledge - A seasoned, experienced professional with a full understanding of area of specialization; resolves a wide range of issues in creative ways. This job is the fully qualified, career-oriented, journey-level position.
• Job Complexity - Works on problems of diverse scope where analysis of data requires evaluation of identifiable factors. Demonstrates good judgment in selecting methods and techniques for obtaining solutions. Networks with senior internal and external personnel in own area of expertise.
• Supervision - Normally receives little instruction on day-to-day work, general instructions on new assignments.
• Experience with vulnerability exploit techniques and tools.
• Ability to set up, configure and utilize ethical hacking tools and exploits.
• Ability to develop exploits and demonstrate impacts to others.
• Proficient in research and analysis of security intelligence data, system/application/network configurations and logs.
• Ability to understand and execute complex analysis of intelligence data as well as systems/application/network configurations and logs to determine preliminary threats, targets and evaluate risk appropriately.
• Ability to apply controls to safely traverse the dark web for research purposes.
• Experience with activities involving APT Threats.
• Ability to describe various tools, techniques, and procedures (TTPs) associated with threat actors known to operate in the financial services domain.

Global Payments Inc. is an equal opportunity employer.

Global Payments provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex (including pregnancy), national origin, ancestry, age, marital status, sexual orientation, gender identity or expression, disability, veteran status, genetic information or any other basis protected by law.

If you wish to request reasonable accommodations related to applying for employment or provide feedback about the accessibility of this website, please contact [e-mail].

Global Payments and Worldpay recently joined forces, and we're currently operating across two Workday application systems.

At Global Payments (NYSE : GPN), we empower simple, fast, secure payments for everyone. And to do that, we've built a complete, worldwide commerce ecosystem that delivers software and services at scale to millions of companies around the world - from ambitious startups to global enterprises.

Our team of 27,000 experts is dedicated to your success.

Headquartered in Atlanta, Georgia, we're a Fortune 500 company and a member of the S&P 500 with worldwide reach spanning North America, Europe, Asia Pacific and Latin America. Wherever you are - or wherever you want to be - we're there, ready to support you. For more information, visit company.globalpayments.com and follow Global Payments on X, LinkedIn and Facebook.

Accommodations: Accessibility Requests: If you wish to request reasonable accommodations related to applying for employment or provide feedback about the accessibility of this website, please contact [e-mail].

EEOC Statement: Global Payments Inc. is an equal opportunity employer. Global Payments provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex (including pregnancy), national origin, ancestry, age, marital status, sexual orientation, gender identity or expression, disability, veteran status, genetic information or any other basis protected by law. Those applicants requiring reasonable accommodation to the application and/or interview process should notify [e-mail].