Thomson Reuters is seeking a Senior Penetration Tester to conduct internal penetration testing activities across both application and infrastructure layers for its product portfolio. This individual will be recognized in the area of information security, have expertise in offensive security testing, and demonstrate an ability to work across a geographically dispersed team. Our target candidate will demonstrate an ability to drive high-quality individual efforts as well as work on improving the overarching maturity of the current program. About The Role: Scope and deliver penetration tests on both business critical applications and infrastructure to support the organization’s information security risk management program Understand and clearly communicate potential vulnerabilities and their associated remediation steps and/or mitigating controls Understand and incorporate industry threat trends, customer needs, and business risk tolerance whilst conduct penetration tests and prioritizing vulnerability remediation efforts Conduct quality assurance and technical reviews of deliverables, results, and internal documentation Proficient at scripting and automating exploits in language of choice Possess in-depth knowledge of network and security technologies (e.g., TCP / IP, IDS / IPS, and WAFs) Participate in threat modeling activities in partnership with the product security team and use the output of these sessions to influence and inform the scope of future testing services Inspire change across the enterprise to drive a more responsible and accountable culture for improving the security posture Deliver against the transformation strategy that defines the people, process, and technology capabilities needed to improve TR’s identify and protect functions within the broader NIST Framework(s) Prepare strategic updates and vision documents, briefings, and reports, and demonstrates excellent communication skills and executive presence in presentations to TR executives, customers, and partners About You: Behaviors and Ways of Working: Be a change agent, driving continuous improvement, excellence, and automation Comfortable operating in a dynamic, fast-changing, and innovative environment A working style that is collaborative, energetic, and results-oriented Demonstrates the ability to employ judgment and experience to make rapid, complex decisions Ability to influence others, earn followership, and drive consensus across different stakeholder groups Exceptional critical thinking skills that extend beyond the typical information security subject matter The ability to flex styles to work well with a range of personalities from extremely technical team members to non-technical business leaders Education and Experience: Experience leading critical operational functions within large, complex commercial environments Bachelor of Science in Information Security or related degree preferred; Industry Certs A minimum of 3 years of experience working across technology teams in a global organization Preferred Certifications: OSCP, OSWA, GWAPT, OSWE, GXPN, OSCE, OSEP, GCPN, CREST What’s in it For You? You will join our inclusive culture of world-class talent, where we are committed to your personal and professional growth through: Hybrid Work Model: We’ve adopted a flexible hybrid working environment for our office-based roles while delivering a seamless experience that is digitally and physically connected. Wellbeing: Comprehensive benefit plans; flexible and supportive benefits for work-life balance: flexible vacation, two company-wide Mental Health Days Off; work from another location for up to a total of 8 weeks in a year, 4 of those weeks can be out of the country and the remaining in the country, Headspace app subscription; retirement, savings, and employee incentive programs; resources for mental, physical, and financial wellbeing. Culture: Globally recognized and award-winning reputation for equality, diversity and inclusion, flexibility, work-life balance, and more. Learning Development: LinkedIn Learning access; internal Talent Marketplace with opportunities to work on projects cross-company; Ten Thousand Coffees Thomson Reuters café networking. Social Impact: Eight employee-driven Business Resource Groups; two paid volunteer days annually; Environmental, Social, and Governance (ESG) initiatives for local and global impact. Purpose-Driven Work: We have a superpower that we’ve never talked about with as much pride as we should – we are one of the only companies on the planet that helps its customers pursue justice, truth and transparency. Together, with the professionals and institutions we serve, we help uphold the rule of law, turn the wheels of commerce, catch bad actors, report the facts, and provide trusted, unbiased information to people all over the world. #LI-FP2 ¿Quieres formar parte de un equipo que ayuda a reinventar la forma en que trabajan los profesionales del conocimiento? ¿Qué tal un equipo que trabaja todos los días para crear un futuro más transparente, justo e inclusivo? En Thomson Reuters, hemos estado haciendo precisamente eso durante casi 160 años. Nuestros productos y servicios líderes en la industria incluyen software y herramientas altamente especializados basados en información para profesionales legales, tributarios, contables y de cumplimiento, combinados con los servicios de noticias más globales del mundo: Reuters. Ayudamos a estos profesionales a hacer mejor su trabajo, dándoles más tiempo para centrarse en las cosas que más importan: asesorar, defender, negociar, gobernar e informar. Contamos con el talento de 26 000 empleados en más de 70 países, donde todos tienen la oportunidad de contribuir y crecer profesionalmente en entornos de trabajo flexibles que celebran la diversidad y la inclusión. En un momento en que la objetividad, la exactitud, la equidad y la transparencia están siendo atacadas, consideramos que es nuestro deber perseguirlas. ¿Suena emocionante? Únete a nosotros y ayude a dar forma a las industrias que hacen avanzar a la sociedad. Accesibilidad Como empresa global, confiamos en la diversidad de culturas y pensamientos para alcanzar nuestros objetivos. Para garantizar que podamos hacerlo, buscamos empleados talentosos y calificados en todas nuestras operaciones en todo el mundo, independientemente de su raza, color, sexo/género, incluido el embarazo, la identidad y expresión de género, el origen nacional, religión, orientación sexual, discapacidad, edad, estado civil, estado de ciudadano, estado de veterano o cualquier otra clasificación protegida según la ley aplicable. Thomson Reuters se enorgullece de ser un empleador que ofrece igualdad de oportunidades de empleo y acción afirmativa y ofrece un lugar de trabajo libre de drogas. También hacemos adaptaciones razonables para personas calificadas con discapacidades y para creencias religiosas sinceras de acuerdo con la ley aplicable. Protégete de ofertas de trabajo fraudulentas haz click aquí para más información. Podés encontrar más información sobre Thomson Reuters en thomsonreuters.com. Thomson Reuters proporciona a los profesionales la inteligencia , tecnologia y experiencia humana que necesitan para encontrar respuestas confiables . Permitimos que los profesionales de los mercados financieros y de riesgos , legales , fiscales , contables y de medios de comunicacion , tomen las decisiones más importantes , todo ello impulsado por la organizacion de noticas más confiable del mundo. Hear from one of our AI Experts, Shawn Malhotra, Thomson Reuters' Head of Engineering on the key components that go into innovating AI at Thomson Reuters.