Description
Identify and escalate security vulnerabilities immediately, enabling quick decision-making and faster mitigations. This includes identifying critical/high-severity issues such as Log4j, SQL Injection, XSS, and authentication bypass. You will discuss these issues immediately with Lead Architects and the FIS team, ensuring clear explanation, accurate impact assessment, and rapid resolution.
Zero-day vulnerability identification, especially in platforms like Salesforce, Customer-facing and Agent-facing applications, is also crucial. You will work with architects and developers to rapidly apply mitigations, reducing the potential exploitation window to a minimum.
Execute security testing before every release, significantly decreasing the possibility of high-impact vulnerabilities slipping through. Ensure continuous testing plus immediate cross-team communication to drastically lower the chance of missing or delaying fixes for high-risk issues.
Validate functional scenarios with a security perspective to ensure secure workflow coverage. Identify and report functional bugs encountered during security assessments. Ensure that fixes applied by developers do not reintroduce or create new security risks. Improve overall application stability, resilience, and quality through cross-functional testing.
Help maintain compliance requirements, support audits, and ensure that security checkpoints are followed throughout the SDLC. Provide continuous support during releases, change requests, and urgent production issues. Perform comprehensive security testing for any Farmers application, including CSS, BW CSS, Farmers.com, ALTA, etc. Ensure high focus on Customer-facing Farmers applications as they have the highest exposure, increasing the risk of exploitation if vulnerabilities are missed.
The cost of a single missed vulnerability (breach, regulatory fine, reputation damage, remediation) can be far greater than the cost of hiring a dedicated security tester.
Burp suite, SQL, security testing, Veracode, Dynatrace are required skills for this role.