COMPANY DESCRIPTION:
Begin a meaningful career right here.
DESCRIPTION/RESPONSIBILITIES:
Warsaw - Zabraniecka 20
Procter & Gamble is seeking a highly skilled Penetration Tester to join our Penetration Testing team and find security vulnerabilities before others do.
This role works in a broad P&G environment, with a key focus of mission-critical applications and infrastructure. It is a unique opportunity to be immersed in the global IT ecosystem of a Fortune 500 company, and work on vulnerabilities that would never be found in short-term penetration testing engagements. The role requires deep security knowledge and an ability to continuously learn.
Penetration Testers in this role must be well versed in multiple security domains. In this position, you will partner with other Cyber Defense Teams to achieve the shared vision of enhancing P&G’s cyber security posture.
Responsibilities
- Perform manual penetration tests of websites, services, infrastructure and networks to discover and exploit vulnerabilities.
- Collaborate with other penetration testers.
- Clearly document and communicate findings and remediation recommendations to the application/service owners.
- Develop tools that automate discovery or exploitation (e.g. bash, Python, JavaScript).
- Partner with Cyber Defense Operations SOC teams to operationalize new detection concepts.
REQUIRED SKILLS:
Basic Qualifications
- Bachelor’s degree in Information Systems, Information Technology (IT), Computer Science, Engineering, or other technical/IT field
- Strong analytical skills, able to leverage complex data to identify opportunities, recognize problems, and draw logical conclusions.
- Demonstrated experience in one or more computer programming and scripting languages such as Python, Bash, PHP, Java, C/C++, C#, JavaScript, Perl, Ruby.
- Experience with penetration testing tools such as Metasploit, Burp Suite, Nmap, etc.
- Experience with manual attack and penetration testing.
- Familiarity with multiple operating systems, minimally Windows and Linux.
- Understanding of network architecture, or how networks operate in general.
- Willingness to obtain the Certified Information System Security Professional (CISSP) certification within 1 year. Additionally, willingness to obtain within 15 months, at least 1 other ethical hacking related certification. P&G provides study preparation and exam cost coverage.
- Work from the Warsaw, Poland Procter & Gamble office location.
Preferred Qualifications
- Certifications: OSCP, OSCE, OSWE, GPEN, GXPN, GWAPT.
- Understanding of web-based security vulnerabilities, ability to identify and exploit them (e.g. XSS, CSRF, SQLi, session management issues, etc.).
- Prior experience in web development.
- Experience in CTF competitions or Bug Bounty programs.
- Experience in mobile (iOS/Android) application development/assessment.
- Experience in Internet of Things (IoT) security and exploitation.
- Ability to provide customer-facing support in a professional manner.
What we offer:
Responsibilities as of day 1. You will have project ownership and autonomy to deliver change and results from the beginning.
Dynamic and encouraging work environment. At P&G our employees are at the core, we value every individual and encourage initiatives, promoting agility and work/life balance.
Continuous mentoring, you will work with hardworking people and receive ongoing coaching and mentoring from your line manager and other colleagues. Corporate and functional training will enable you to succeed and develop from day one.
Industry Certifications (ITIL, DevOps, MS portfolio etc), full additional benefit program like private health care, P&G Dynamic Living programs like sport cards, in-office fitness center, PG stock options, saving plans, lunch subsidy, regular salary increases and possible promotions, flexible work arrangements, mentoring programs & trainings.
Who we are:
P&G was founded over 180 years ago as a simple soap and candle company. Today, we are the world’s largest consumer goods company and home to iconic, trusted brands that make life a little bit easier in small but meaningful ways. We’ve spanned three centuries thanks to three simple ideas: leadership, innovation and citizenship. The insight, innovation and passion of hardworking teams has helped us grow into a global company that is governed responsibly and ethically, that is open and transparent, and that supports good causes and protects the environment.
We commit to provide you with equal opportunities in employment! We value diversity, and we do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.