Penetration Tester

GCS Application Security is building up penetration testing Centre of Excellence (COE) to deliver penetration test related capabilities for all segments in Manulife. As a tester, you will be working closely with our business team and second line of defense, to assess scope and level of effort based on identified areas of risk and execute assigned engagements in alignment to common penetration testing industry frameworks.

Position Responsibilities: 

• Evaluates the security posture of the organization, assessing potential threats and vulnerabilities in any of the following:
  • Web Applications and/or Network Security
  • Microservices
  • Mobile Applications
• Develops and communicates the understanding of the potential impacts of a cyber attack to all relevant stakeholders.
• Evaluates different security solutions and provides advice on how to best protect the organization from cyber threats.
• Ensures alignment with corporate and regulatory requirements for the management of information security program.
• Performs security assessments to identify possible security vulnerabilities within the organization and develops security controls, policies and procedures to address any issues that may exist.
• Conducts comprehensive network scans and manual network assessments, including penetration testing and vulnerability scans.
• Write reports including technical details, risk analysis and providing remediation recommendations for identified issues.

Required Qualifications:

• Bachelor’s degree holder in Computer Science, Information Technology, Cybersecurity, Information Systems, or any related discipline.
• Holds an Information Security certification or is at least currently undergoing security certification/training such as OSCP, OSCE, CEH, GWAPT, GPEN, or eWPT is preferred.
• At least 2 years of IT experience with a demonstrated passion for performing hands-on penetration tests on external and internal networks, operating systems, web applications, etc.
• Has technical knowledge of current vulnerabilities, exploits and tools.
• Understand the concepts of different VAPT capabilities and methods.
• Ability to adopt the security industry best practices and immerse in procedures.
• Exposure with various security assessment frameworks and procedures, and the ability to perform both manual and automated testing.
• Interest in researching evolving exploits, techniques, and tools in support of penetration testing efforts.
• Good verbal and written communication skills including the ability to write clear and concise assessment reports.
• Good stakeholder management and interpersonal skills.
• Ability to communicate with team, peers and employees.
• Good time management and organizational skills.
• Experience working in an international environment with people from multiple cultures is preferred.
• Fresh graduates of relevant courses are encouraged to apply.

When you join our team:

• We’ll empower you to learn and grow the career you want. 
• We’ll recognize and support you in a flexible environment where well-being and inclusion are more than just words. 
• As part of our global team, we’ll support you in shaping the future you want to see.

About Manulife and John Hancock

Manulife Financial Corporation is a leading international financial services provider, helping people make their decisions easier and lives better. To learn more about us, visit https://www.manulife.com/en/about/our-story.html.

Manulife is an Equal Opportunity Employer

At Manulife/John Hancock, we embrace our diversity. We strive to attract, develop and retain a workforce that is as diverse as the customers we serve and to foster an inclusive work environment that embraces the strength of cultures and individuals. We are committed to fair recruitment, retention, advancement and compensation, and we administer all of our practices and programs without discrimination on the basis of race, ancestry, place of origin, colour, ethnic origin, citizenship, religion or religious beliefs, creed, sex (including pregnancy and pregnancy-related conditions), sexual orientation, genetic characteristics, veteran status, gender identity, gender expression, age, marital status, family status, disability, or any other ground protected by applicable law.

It is our priority to remove barriers to provide equal access to employment. A Human Resources representative will work with applicants who request a reasonable accommodation during the application process. All information shared during the accommodation request process will be stored and used in a manner that is consistent with applicable laws and Manulife/John Hancock policies. To request a reasonable accommodation in the application process, contact recruitment@manulife.com.

Working Arrangement

Hybrid