Red Team Tester chez UBS Group AG

We are expanding our global Red Team. We are looking for additional testers to be based in Krakow or Wroclaw, to help us drive security improvements across the bank by simulating real world cyber-attacks.

Candidates will be expected to have experience working in security testing - preferably with some red team experience – ideally in a large corporate or consultancy environment.

We really want to hear from people who live and breathe cyber security, people with a deep interest in the topic, people who consider keeping up to date with knowledge of threats, vulnerabilities, and techniques to be fun and interesting rather than just something you do at work. We’re also very interested in people who can translate technical findings into business risk. The role will require an inquisitive mind, an ability to think outside of the box, and a broad technical skillset. Technical certifications such as CREST, OSCP, etc will be advantageous, but they're not a deal breaker. However, the ability to write clear reports in business English is an absolute necessity, as are project management skills and personal organizational ability.

We are hiring for mid-level testers - you'll be working with some very talented and experienced testers, and there will be lots of opportunity to grow and develop your technical skillset. Your duties and responsibilities will include:

• Work with stakeholders and management to develop red team scenarios consistent with real world cyber threats
• Work collaboratively with blue teams and other security monitoring functions
• Execute controlled red team exercises by emulating the tactics, techniques, and procedures of cyber threat actors
• Liaise with key stakeholders during testing
• Develop and submit detailed reports of findings, analysis, and recommendations
• Take part in operational briefings and presentations to technical teams, non-technical stakeholders, and senior management
• Provide technical expertise to the bank in general

Kraków, London, Raleigh, Wroclaw, Zürich

Full Time

Poland, Switzerland - Zürich, United Kingdom

Compliance, Digital, Information Technology (IT), Risk

At UBS, we know that it's our people, with their diverse skills, experiences and backgrounds, who drive our ongoing success. We’re dedicated to our craft and passionate about putting our people first, with new challenges, a supportive team, opportunities to grow and flexible working options when possible. Our inclusive culture brings out the best in our employees, wherever they are on their career journey. We also recognize that great work is never done alone. That’s why collaboration is at the heart of everything we do. Because together, we’re more than ourselves.

We’re committed to disability inclusion and if you need reasonable accommodation/adjustments throughout our recruitment process, you can always contact us.

UBS Business Solutions SA
UBS Recruiting

UBS is an Equal Opportunity Employer. We respect and seek to empower each individual and support the diverse cultures, perspectives, skills and experiences within our workforce.

Report misconduct: If you are made aware of any of our employees or individuals acting on behalf of UBS engaging in acts of misconduct under the Poland Whistleblowing Act, you may report your concerns through [email protected]

You will be working as a member of the global Cyber Testing & Assurance team, which is a second line assurance testing function within Compliance & Operational Risk Control. We have a presence in the UK, Switzerland, and Poland. Note that this is a hybrid role - UBS supports remote working, but some office presence will be required.

• A strong technical background, preferably in cyber security
• Hands-on experience executing penetration testing and/or red team testing assessments of critical business assets
• Good working knowledge of enterprise architectures, operations, and IT control environments
• Detailed and up-to-date knowledge of threat and vulnerability management techniques and tools
• An inquisitive mind and passion for security research
• Excellent written and spoken communication ability in English, and ability to describe highly technical and complex matters in a business-focused and risk-centric manner
• Formal security testing certifications would be advantageous (for example CREST, Offensive Security, GIAC, etc)

UBS is the world’s largest and the only truly global wealth manager. We operate through four business divisions: Global Wealth Management, Personal & Corporate Banking, Asset Management and the Investment Bank. Our global reach and the breadth of our expertise set us apart from our competitors.

We have a presence in all major financial centers in more than 50 countries.