Senior Cybersecurity Specialist - Penetration Tester

Job ID : 2300

Alternate Locations :

Newell Brands is a leading $8.3B consumer products company with a portfolio of iconic brands such as Graco®, Coleman®, Oster®, Rubbermaid® and Sharpie®, and 25,000 talented employees around the world.

Our high-performance culture, unparalleled curiosity about the world around us, and talented people fuel our success. Our culture is enabled through our core values which guide all we do and how we win as One Newell.

They are Integrity, Teamwork, Passion for Winning, Ownership & Leadership.

Job Overview

Do you have a desire to help build a penetration testing capability from the ground up within a global company? Newell Brands is seeking an experienced Penetration Tester to be responsible for establishing, leading, executing, and maturing penetration testing initiatives across Newell Brands’ Global functions.

This role is also responsible for leading penetration testing activities and red team exercises. These exercises are aimed at evaluating technical controls and proactively protecting Newell’s information assets from unauthorized or inappropriate access, use, or data disclosure and business disruptions.

This will be achieved through proper identification, assessment, prioritization, and remediation tracking of vulnerabilities.

This position will work closely with IT and the Business, including regular interaction with internal and external auditors, Legal, Privacy and Ethics teams.

Responsibilities :

Design, lead, and execute testing and simulations such as penetration tests, technical controls assessments, red team exercises, or resiliency simulations.

Contribute to the development and refinement of assessment methodologies, tools, and frameworks to ensure alignment with the organizational strategy and compliance with regulatory requirements.

Develop an understanding of Newell Brands environment, and perform targeted testing based on Newell’s current and forward-looking threat profile.

Evaluate technology controls for effectiveness and impact on operational risk, analyzing operational IT processes and workflows to identify systemic risk issues.

Develop comprehensive and accurate reports and presentations for both technical and executive audiences, influencing technical and business strategies by articulating technical risk associated with key business solutions and technology implementations.

Develop exploits and customized proof of concepts for diverse targets and tech stacks, utilizing advanced tools and scripts for penetration testing and exploiting vulnerabilities.

Keep current on industry security testing best practices and industry security risk, mentoring and sharing knowledge with other security practitioners.

Participate in remediation efforts through cross functional working teams and across business units, providing both prioritization advice and remediation guidance to IT owners and technology stakeholders.

Required Qualifications :

Degree in Information Security, Computer Science, Information Management Systems, or a related field.

2-3 years’ experience as a penetration tester or red team related role.

Experience in scripting or task automation using Perl, Python, PowerShell, Bash, or Ruby.

Experience developing, extending, or modifying exploits, shellcode or exploit tools.

Advanced knowledge of operating system and database security (Windows, Unix, Linux, SQL, and Oracle etc.)

Experience in the security aspects of multiple platforms, operating systems, software, communications, and network protocols

Hands-on working experience with commercial and open-source network and application security testing tools.

Ability to communicate technical information in understandable business terms; transform technical concepts into usable documented material for non-technical users.

Preferred Qualifications :

Information security related industry certification preferred (OSCP, Pentest+, GPEN, CEH).

3+ years’ experience as a penetration tester or red team related role.