Penetration Tester

Penetration Tester – UBS

Penetration Tester role at UBS, part of the Application Security Testing team. Supports technology services by testing web, thick-clients, mobile applications, and critical infrastructure.

• Perform manual penetration testing against web, thick-client, and mobile applications and critical infrastructure (e.g., Active Directory, LDAP).
• Identify and report vulnerabilities using common methodologies and maintain extensive knowledge of OWASP.
• Communicate with application teams on remediation of vulnerabilities.
• Leverage technologies and tools such as Burp Suite, DAST, Azure cloud, etc.
• Participate in process improvements and automation.
• Perform technical QAs, including false‑positive analysis and risk rating reviews.

• Ideally 5+ years hands‑on experience in penetration testing of web, thick-client, and mobile applications.
• Hands‑on experience testing critical infrastructure such as AD, LDAP, DNS, etc.
• Proficient with Microsoft O365 suite – PowerPoint, Excel, Outlook, etc.
• Exceptional attention to detail and strong problem‑solving skills.
• Track record of explaining technical issues to application teams and assisting them in resolving issues.
• Excellent communicator capable of explaining technology to non‑technical audiences.
• Ability to document vulnerabilities and produce penetration test reports.
• Preferred certifications: OSWE, OSCP, CompTIA Security+, Burp Suite Certified Practitioner.

Job Reference # 314069

Job Type Full Time

City Nashville, Raleigh

UBS is an Equal Opportunity Employer. We respect and seek to empower each individual and support the diverse cultures, perspectives, skills and experiences within our workforce.

We’re committed to disability inclusion. If you need reasonable accommodation or adjustments throughout our recruitment process, please contact us.