TD
Information Security Specialist (US) - Penetration Tester
TD, Mount Laurel, New Jersey, United States
Overview
Information Security Specialist (US) - Penetration Tester Location: Mount Laurel, New Jersey, United States Hours: 40 Pay: $87,000 - $151,000 USD TD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience at TD. The base pay actually offered may vary based upon the candidate's skills and experience, job-related knowledge, geographic location, and other specific business and organizational needs. As a candidate, you are encouraged to ask compensation related questions and have an open dialogue with your recruiter who can provide you more specific details for this role.
Job Description
The Information Security Specialist - Penetration Tester defines, develops and/or implements Technology Controls / Information Security related policies, programs, tools and provides specialized expertise and guidance on assessing risks, identifying potential gaps and providing security solutions to mitigate risks and protect the Bank. Participates on projects of moderate to high complexity and provides complex reporting, analysis, and assessments at the functional, business line or enterprise level for own area.
Responsibilities
Conduct Penetration Tests: Perform thorough and methodical penetration testing on web applications, mobile, AI, network infrastructures, and other systems to identify security vulnerabilities. Vulnerability Assessment: Assess and analyze security weaknesses, and provide actionable recommendations to mitigate risks and improve overall security posture. Report Findings: Document and communicate findings clearly and effectively to both technical and non-technical stakeholders. Prepare comprehensive reports with recommendations for remediation. Develop and Execute Test Plans: Design and execute detailed test plans Stay Current: Keep up-to-date with the latest security trends, vulnerabilities, and tools to ensure testing methodologies are current and effective. Collaborate with Teams: Work closely with IT and development teams to understand system architectures, provide guidance on security best practices, and support the implementation of security improvements. Perform Risk Assessments: Evaluate and assess potential security risks related to new and existing systems and technologies. Compliance: Ensure that penetration testing practices comply with relevant regulations, standards, and organizational policies.
Depth & Scope
Participates on complex, comprehensive or large projects and initiatives Acts as a lead expert resource in technology controls / information security for project teams, the business / organization and/or outside vendors Has advanced knowledge of organization, technology controls / security/ risk issues
Education & Experience
Bachelor's degree preferred Information security certification / accreditation an asset 7+ years of relevant experience Expert knowledge of IT security and risk disciplines and practices
Preferred Qualifications
Proficiency in penetration testing tools such as Metasploit, Burp Suite, Nmap, and Kali. Knowledge of common web application vulnerabilities (e.g., OWASP Top Ten) and network security principles. Experience with penetration testing in AI, cloud environments (e.g., AWS, Azure) and PCI testing. Familiarity with security standards and frameworks Certifications: Relevant certifications such as Offensive Security Certified Professional (OSCP), Certified Ethical Hacker (CEH), or GIAC Penetration Tester (GPEN) are highly desirable.
Physical & Travel Requirements
Domestic Travel – Occasional International Travel – Never Performing sedentary work – Continuous Performing multiple tasks – Continuous Operating standard office equipment - Continuous Responding quickly to sounds – Occasional Sitting – Continuous Standing – Occasional Walking – Occasional Moving safely in confined spaces – Occasional Lifting/Carrying (under 25 lbs.) – Occasional Lifting/Carrying (over 25 lbs.) – Never Squatting – Occasional Bending – Occasional Kneeling – Never Crawling – Never Climbing – Never Reaching overhead – Never Reaching forward – Occasional Pushing – Never Pulling – Never Twisting – Never Concentrating for long periods of time – Continuous Applying common sense to deal with problems involving standardized situations – Continuous Reading, writing and comprehending instructions – Continuous Adding, subtracting, multiplying and dividing – Continuous
Accommodation & Equal Opportunity
TD Bank is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, status as a protected veteran or any other characteristic protected under applicable federal, state, or local law. If you are an applicant with a disability and need accommodations to complete the application process, please email TD Bank US Workplace Accommodations Program at USWAPTDO@td.com. Include your full name, best way to reach you and the accommodation needed to assist you with the applicant process.
About TD
TD is one of the world’s leading global financial institutions. We are committed to helping colleagues grow through regular development conversations, training programs, and a competitive benefits plan. Learn more about our Total Rewards package and career opportunities at TD.
#J-18808-Ljbffr
Information Security Specialist (US) - Penetration Tester Location: Mount Laurel, New Jersey, United States Hours: 40 Pay: $87,000 - $151,000 USD TD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience at TD. The base pay actually offered may vary based upon the candidate's skills and experience, job-related knowledge, geographic location, and other specific business and organizational needs. As a candidate, you are encouraged to ask compensation related questions and have an open dialogue with your recruiter who can provide you more specific details for this role.
Job Description
The Information Security Specialist - Penetration Tester defines, develops and/or implements Technology Controls / Information Security related policies, programs, tools and provides specialized expertise and guidance on assessing risks, identifying potential gaps and providing security solutions to mitigate risks and protect the Bank. Participates on projects of moderate to high complexity and provides complex reporting, analysis, and assessments at the functional, business line or enterprise level for own area.
Responsibilities
Conduct Penetration Tests: Perform thorough and methodical penetration testing on web applications, mobile, AI, network infrastructures, and other systems to identify security vulnerabilities. Vulnerability Assessment: Assess and analyze security weaknesses, and provide actionable recommendations to mitigate risks and improve overall security posture. Report Findings: Document and communicate findings clearly and effectively to both technical and non-technical stakeholders. Prepare comprehensive reports with recommendations for remediation. Develop and Execute Test Plans: Design and execute detailed test plans Stay Current: Keep up-to-date with the latest security trends, vulnerabilities, and tools to ensure testing methodologies are current and effective. Collaborate with Teams: Work closely with IT and development teams to understand system architectures, provide guidance on security best practices, and support the implementation of security improvements. Perform Risk Assessments: Evaluate and assess potential security risks related to new and existing systems and technologies. Compliance: Ensure that penetration testing practices comply with relevant regulations, standards, and organizational policies.
Depth & Scope
Participates on complex, comprehensive or large projects and initiatives Acts as a lead expert resource in technology controls / information security for project teams, the business / organization and/or outside vendors Has advanced knowledge of organization, technology controls / security/ risk issues
Education & Experience
Bachelor's degree preferred Information security certification / accreditation an asset 7+ years of relevant experience Expert knowledge of IT security and risk disciplines and practices
Preferred Qualifications
Proficiency in penetration testing tools such as Metasploit, Burp Suite, Nmap, and Kali. Knowledge of common web application vulnerabilities (e.g., OWASP Top Ten) and network security principles. Experience with penetration testing in AI, cloud environments (e.g., AWS, Azure) and PCI testing. Familiarity with security standards and frameworks Certifications: Relevant certifications such as Offensive Security Certified Professional (OSCP), Certified Ethical Hacker (CEH), or GIAC Penetration Tester (GPEN) are highly desirable.
Physical & Travel Requirements
Domestic Travel – Occasional International Travel – Never Performing sedentary work – Continuous Performing multiple tasks – Continuous Operating standard office equipment - Continuous Responding quickly to sounds – Occasional Sitting – Continuous Standing – Occasional Walking – Occasional Moving safely in confined spaces – Occasional Lifting/Carrying (under 25 lbs.) – Occasional Lifting/Carrying (over 25 lbs.) – Never Squatting – Occasional Bending – Occasional Kneeling – Never Crawling – Never Climbing – Never Reaching overhead – Never Reaching forward – Occasional Pushing – Never Pulling – Never Twisting – Never Concentrating for long periods of time – Continuous Applying common sense to deal with problems involving standardized situations – Continuous Reading, writing and comprehending instructions – Continuous Adding, subtracting, multiplying and dividing – Continuous
Accommodation & Equal Opportunity
TD Bank is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, status as a protected veteran or any other characteristic protected under applicable federal, state, or local law. If you are an applicant with a disability and need accommodations to complete the application process, please email TD Bank US Workplace Accommodations Program at USWAPTDO@td.com. Include your full name, best way to reach you and the accommodation needed to assist you with the applicant process.
About TD
TD is one of the world’s leading global financial institutions. We are committed to helping colleagues grow through regular development conversations, training programs, and a competitive benefits plan. Learn more about our Total Rewards package and career opportunities at TD.
#J-18808-Ljbffr