Web Application Penetration Tester

Provides senior technical expertise on the development and support of all activities, processes, and tools used for assessing, validating, and ensuring the vulnerability validating and ensuring the and integrity of systems, architectures, and configurations. Conducts security assessments, risk analyses and assesses contingency plans for Vanguard business applications, systems, networks, and websites.

Core Responsibilities

• Leads and conducts security assessments to measure the adequacy of existing information security controls. Identifies potential and actual system vulnerabilities, integration requirement and ramifications, and emerging strategic security needs and recommends corrective measures.
• Coordinates reporting on information security risks and works with IT sub-divisions, third party partners, and business units in identifying the impact of technology implementations on IT and business unit operations.
• Leads and maintains the evaluation and assessment process of in determining security requirements for data systems, networks, or websites. Identifies system issues and recommends technical security solutions. and coordinates and leads the adoption of new security initiatives and solutions.
• Leads technical support for assessments of assets, risks, and the implementation of appropriate data security procedures and products. Ensures security requirements are met during implementation.
• Ensures the adequacy of development, testing and implementation processes for security plans, risk assessments, products, and control techniques.
• Evaluates Vanguard technical acquisitions, infrastructure and development processes, and investigates complex potential or actual information security violations to ensure that adequate security measures are established and maintained, according to established policies.
• Leads and coordinates security assessment plans, participates in the security vulnerability mitigation and acceptance process, and assists with managing vendor relationships.
• Participates in special projects and performs other duties as assigned.

Qualifications

• Minimum five years related work experience with three years' experience in IT security or application development.
• Undergraduate degree in related field or equivalent combination of training and experience.
• Preferred security certification such as ISC2 CISSP, GIAC Security, Essentials Certification (GSEC), GIAC Penetration Tester Certification (GPEN), GIAC Web App Pen Tester (GWPN), or Certified Ethical Hacker (CEH)

Special Factors

Sponsorship

Vanguard is not offering visa sponsorship for this position.

About Vanguard

At Vanguard, we don't just have a mission—we're on a mission.

To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.