Job Description

Business Divisions
Group Functions
Your role
Do you have experience in performing penetration testing? Do you like to test complex applications and find ways around security controls? Do you have proven ability to report and to provide guidance for software teams to remediate vulnerabilities?
We're looking for penetration testers to:

• perform manual penetration testing against web, thick-client and mobile applications, Participate in process improvements and automation
• identify and report vulnerabilities using common methodologies
• communicate with application teams on how to remediate certain vulnerabilities
• perform technical QAs, including false-positive analysis and risk rating reviews
• identifying and reporting vulnerabilities within critical applications, including key public banking platforms.
• you will work closely with application teams to define the scope of work and execute your tests in a responsible

Function Category
Information Technology (IT)
Join us
At UBS, we embrace flexible ways of working when the role permits. We offer different working arrangements like part-time, job-sharing and hybrid (office and home) working. Our purpose-led culture and global infrastructure help us connect, collaborate, and work together in agile ways to meet all our business needs.
From gaining new experiences in different roles to acquiring fresh knowledge and skills, we know that great work is never done alone. We know that it's our people, with their unique backgrounds, skills, experience levels and interests, who drive our ongoing success. Together we're more than ourselves. Ready to be part of #teamUBS and make an impact?
Contact Details
UBS Business Solutions SA
UBS Recruiting
Your team
You will be part of the Application Security Testing team, which operates across multiple regions and supports the Application Security Framework. This role is essential to our Technology Services, particularly in the area of Application Security Testing.
Your expertise

• overall 8+ years and 2+ years of hands-on experience in vulnerability analysis and reporting
• knowledge of application security frameworks (OWASP) and Burp Professional
• web application vulnerability knowledge (mechanics, exploitations, impacts, remediations)
• general knowledge of commonly used web application technologies (GraphQL, REST/SOAP API, WAF, etc.)
• good to have certifications (OSCP, CompTIA, Burp Suite Certified Practitioner)

About us
UBS is the world's largest and the only truly global wealth manager. We operate through four business divisions: Global Wealth Management, Personal & Corporate Banking, Asset Management and the Investment Bank. Our global reach and the breadth of our expertise set us apart from our competitors..
We have a presence in all major financial centers in more than 50 countries.
How we hire
We may request you to complete one or more assessments during the application process.