Senior Associate Vulnerability Analyst ( Penetration Tester )

Discover. A brighter future.

With us, you’ll do meaningful work from Day 1. Our collaborative culture is built on three core behaviors: We Play to Win, We Get Better Every Day & We Succeed Together. And we mean it — we want you to grow and make a difference at one of the world's leading digital banking and payments companies. We value what makes you unique so that you have an opportunity to shine.

Come build your future, while being the reason millions of people find a brighter financial future with Discover.

Job Description:

At Discover, be part of a culture where diversity, teamwork and collaboration reign. Join a company that is just as employee-focused as it is on its customers and is consistently awarded for both. We’re all about people, and our employees are why Discover is a great place to work. Be the reason we help millions of consumers build a brighter financial future and achieve yours along the way with a rewarding career.

As a Senior Associate Vulnerability Analyst, you will analyze and assess technologies and build your expertise across the compliance, vulnerability and threat landscape. Actively manages and escalates risk and customer-impacting issues within the day-to-day role to management. Actively manages and escalates risk and customer-impacting issues within the day-to-day role to management.

Responsibilities

• Perform Penetration testing against internal company assets

• Analyzes organization’s cyber defense procedures and configurations, and evaluates compliance with regulations and organizational directives

• Performs in-depth analysis of security issues and/or vulnerabilities

• Develops metrics and new capabilities to ensure confidentiality, integrity, availability, authentication and non-repudiation

• Measures effectiveness of defense-in-depth architecture against known vulnerabilities

• Engages in reporting risk remediation assurance and automation/integration initiatives, and collaborates with stakeholders at all levels to ensure the remediation lifecycle is complete

• Maintains knowledge of advanced Cybersecurity concepts including new and modern threat exploitation techniques of inside and outside bad actors. Provides subject matter expertise for supported Cybersecurity technologies

• Works independently to scope vulnerable bodies of technologies, identify weaknesses, severity and impact, and recommend paths to remediation

• Learns advanced Cybersecurity concepts including new and modern threat exploitation techniques of inside and outside bad actors

• Contributes to actionable intelligence in the form of reports, notifications, alerts and briefings

• Achieves team commitments (and influence others to do the same) by using informal leadership & highly developed communication skills

• Mentors' novices by providing learning tasks as well as work related tasks, directs the work of advanced beginners, and helps them continue to grow

• Contributes to and leads security discussions at Discover. Has oversight on program impacting decisions. Guides team to achieve key results for assessment assignments

Minimum Qualifications

At a minimum, here’s what we need from you:

Bachelors – Computer Science, Information Security, Business or Analytics 

2+ Years of experience in Information Security, Cybersecurity, Computer Science, Data Analytics or related

In lieu of a degree 4+ Years – Information Security, Cybersecurity, Computer Science, Data Analytics or related

Internal applicants only: technical proficiency rating of advanced beginner on the Dreyfus cybersecurity scale

Preferred Qualifications

If we had our say, we’d also look for:

• Hands on experience with Web Application testing as well as thick client and network testing

• Experience with BURP Suite as well as other Pen testing suites

• Bug Bounty or CTF experience is a desirable

• Scripting experience with Bash, PowerShell and/or Python

• In depth troubleshooting skills

• Excellent documentation skills

• Industry certifications is desirable.

External applicants will be required to perform a technical interview.

What are you waiting for? Apply today!

And by the way, while you're waiting to hear from us, don't forget to check out the great benefits Discover offers.

All Discover employees place our customers at the very center of our work.  To deliver on our promises to our customers, each of us contribute every day to a culture that values compliance and risk management.

The same way we treat our employees is how we treat all applicants – with re