(Senior) Penetration Tester

Do you have experience in executing various web application, thick-client, mobile application, infrastructure and industrial vulnerability assessments and penetration tests, security acceptance tests as part of the security assurance process?

Would you enjoy to validate the operating effectiveness of information security technology controls implemented in key applications, information and industrial systems during their entire lifecycle on MOL Group level?

Would you be happy to work in a human focused team with a professionally and personally advanced team lead?

If yes, then your place is here with US in MOL Campus, apply today!

Responsibilities:

• Plan and undertake security acceptance tests, execute thorough vulnerability assessments and penetration tests on IT, network infrastructure, applications (including mobile, web and thick-client solutions) on MOL Group level including IT projects, IT-Business projects, Business-IT projects and Business projects whenever Cyber Security relevancy identified
• Develop internal industrial systems (including ICS, SCADA, and PLC systems) security assessment competence and practices, execute well controlled security reviews/audits
• Enable and develop penetration and security testing infrastructure and processes across MOL Group
• Contribute to building up an internal security acceptance testing capability (penetration testing and ethical hacking)
• Actively participate in and execute regular Red/Blue/Purple Team exercises and cyber audits on MOL Group level
• Prepare detailed documentation on all security issues identified, provide high-quality reports to project teams and management on technology security matters
• Develop, maintain, and operate security test infrastructure and toolset
• Keep penetration testing methodologies and processes up to date with newly emerging threats, best practices, and procedures
• Develop, maintain, and operate internal Cyber Security enhancement technologies and toolset
• Work closely with different IT and networks operations, development, and project teams to ensure security controls and procedures are understood and successfully implemented and actively monitored
• Provide expert knowledge and experience to teams across MOL Group with an aim to improve security during the whole lifecycle of the development
• Validate baseline security configurations of servers, operating systems, applications and networking equipment
• Research and assess new threats and security alerts, recommend remedial actions through the whole lifecycle of enterprise services
• Act as subject matter expert for security assessment, testing and assurance processes, methodologies, and activities
• Assist Cyber Security Assurance Analyst/Specialist colleagues with scoping prospective engagements
• Mentor less experienced staff on both general Cyber Security matters and offensive security principles
• Act as subject matter expert for assessment and implementation of new Cyber Security related technologies from Cyber Security Assurance perspective
• Maintain and operate Cyber Security related technologies

Requirements:

• University / college degree in Computer Science, Engineering or related field 3+ years of 5+ years of progressive experience in the information security industry covering vulnerability assessment, management, penetration testing and security assurance activities
• 3-5+ years of focused penetration testing experience
• Strong grasp of and hands-on experience in working with various testing methodologies, standards and tools
• Experience in working with open source and commercial vulnerability scanning, management and penetration testing tools
• Experience in working in a multinational environment
• Manual and automated vulnerability assessment and penetration testing skills
• Thorough understanding of security principles, practices and standards and how they translate into real world technical solutions
• Ability to communicate complex technology concepts both at high level as well as on technical level
• Fluent English knowledge

What we can offer:

• Being part of a people-focused organization
• Professional and soft skill trainings and career opportunities within MOL Group 
• MOL competitive benefits
• Free health programs 
• Hybrid working / home office possibilities, MOL Campus facilities