Thomson Reuters Information Security Risk Management (ISRM) team is an exciting and dynamic organization that manages information security risk for our information assets and systems. The Senior Penetration Tester/Security Analyst will be taking an important role in implementing and supporting the Security Operations, Strategy & Architecture program at Thomson Reuters with strong focus on internal penetration testing activities. This role will report into the Manager, Penetration Testing Services. - Conduct penetration tests on both business critical infrastructure and applications to support the organization s risk management program - Scope and deliver security testing engagements on time and within budget according to stakeholder requirements and organization needs. - Provide quality assurance and technical reviews of deliverables, results and internal documentation (peer review) - Evaluate remediation suggestions and provide consultative support with implementation of remediation steps, standards, and best practices where needed. - Understand and consider industry trends, customer needs, business risk tolerance, and business environments relating to information security. - Understand and clearly communicate potential threats, vulnerabilities, and control techniques - Proven experience of delivering penetration tests on both infrastructure and applications in a global environment including scoping, execution, reporting and stakeholder management - Knowledge of AWS and Azure common attack vectors - Experience in dealing with technical and business stakeholders throughout all phases of the engagement - Previous experience in ethical disclosure of zero days vulnerabilities - Experience developing custom scripts or tools to support testing activities - Strong technical knowledge and experience required in areas of vulnerability assessment, risk based threat analysis and vulnerability mitigation. - Good knowledge of network and security technologies such as TCP/IP, IDS/IPS, firewalls, LAN/WAN, routing and switching. - Good to advanced knowledge of the following platforms in an enterprise environment - Microsoft Windows, Solaris, Linux. - Knowledge of programming languages and/or scripting languages (Perl, Python, Ruby, ...) - Excellent problem diagnosis and analytical skills. - Excellent collaboration and communication skills (both written and verbal) - Excellent report writing skills coupled with an acute attention to detail. - Self starter able to work with minimal supervision and ability to learn new skills quickly with minimal guidance. - Dedicated to achieving project schedules and milestones. - Ability to work in a team environment with aggressive deadlines and multiple priorities while staying a team player. - Evidence of ongoing personal development in the penetration testing space e.g. research and development or personal blog. - OSCP, CREST certifications preferred At Thomson Reuters, we believe what we do matters. We are passionate about our work, inspired by the impact it has on our business and our customers. As a team, we believe in winning as one - collaborating to reach shared goals, and developing through challenging and meaningful experiences. With more than 25,000 employees in more than 100 countries, we work flexibly across boundaries and realize innovations that help shape industries around the world. Making this happen is a dynamic, evolving process, and we count on each employee to be a catalyst in driving our performance - and their own. As a global business, we rely on diversity of culture and thought to deliver on our goals. To ensure we can do that, we seek talented, qualified employees in all our operations around the world regardless of race, color, sex/gender, including pregnancy, gender identity and expression, national origin, religion, sexual orientation, disability, age, marital status, citizen status, veteran status, or any other protected classification under applicable law. Thomson Reuters is proud to be an Equal Employment Opportunity/Affirmative Action Employer providing a drug-free workplace. We also make reasonable accommodations for qualified individuals with disabilities and for sincerely held religious beliefs in accordance with applicable law.
Jul 17, 2019
Thomson Reuters Information Security Risk Management (ISRM) team is an exciting and dynamic organization that manages information security risk for our information assets and systems. The Senior Penetration Tester/Security Analyst will be taking an important role in implementing and supporting the Security Operations, Strategy & Architecture program at Thomson Reuters with strong focus on internal penetration testing activities. This role will report into the Manager, Penetration Testing Services. - Conduct penetration tests on both business critical infrastructure and applications to support the organization s risk management program - Scope and deliver security testing engagements on time and within budget according to stakeholder requirements and organization needs. - Provide quality assurance and technical reviews of deliverables, results and internal documentation (peer review) - Evaluate remediation suggestions and provide consultative support with implementation of remediation steps, standards, and best practices where needed. - Understand and consider industry trends, customer needs, business risk tolerance, and business environments relating to information security. - Understand and clearly communicate potential threats, vulnerabilities, and control techniques - Proven experience of delivering penetration tests on both infrastructure and applications in a global environment including scoping, execution, reporting and stakeholder management - Knowledge of AWS and Azure common attack vectors - Experience in dealing with technical and business stakeholders throughout all phases of the engagement - Previous experience in ethical disclosure of zero days vulnerabilities - Experience developing custom scripts or tools to support testing activities - Strong technical knowledge and experience required in areas of vulnerability assessment, risk based threat analysis and vulnerability mitigation. - Good knowledge of network and security technologies such as TCP/IP, IDS/IPS, firewalls, LAN/WAN, routing and switching. - Good to advanced knowledge of the following platforms in an enterprise environment - Microsoft Windows, Solaris, Linux. - Knowledge of programming languages and/or scripting languages (Perl, Python, Ruby, ...) - Excellent problem diagnosis and analytical skills. - Excellent collaboration and communication skills (both written and verbal) - Excellent report writing skills coupled with an acute attention to detail. - Self starter able to work with minimal supervision and ability to learn new skills quickly with minimal guidance. - Dedicated to achieving project schedules and milestones. - Ability to work in a team environment with aggressive deadlines and multiple priorities while staying a team player. - Evidence of ongoing personal development in the penetration testing space e.g. research and development or personal blog. - OSCP, CREST certifications preferred At Thomson Reuters, we believe what we do matters. We are passionate about our work, inspired by the impact it has on our business and our customers. As a team, we believe in winning as one - collaborating to reach shared goals, and developing through challenging and meaningful experiences. With more than 25,000 employees in more than 100 countries, we work flexibly across boundaries and realize innovations that help shape industries around the world. Making this happen is a dynamic, evolving process, and we count on each employee to be a catalyst in driving our performance - and their own. As a global business, we rely on diversity of culture and thought to deliver on our goals. To ensure we can do that, we seek talented, qualified employees in all our operations around the world regardless of race, color, sex/gender, including pregnancy, gender identity and expression, national origin, religion, sexual orientation, disability, age, marital status, citizen status, veteran status, or any other protected classification under applicable law. Thomson Reuters is proud to be an Equal Employment Opportunity/Affirmative Action Employer providing a drug-free workplace. We also make reasonable accommodations for qualified individuals with disabilities and for sincerely held religious beliefs in accordance with applicable law.
The selected candidate will have these skills and characteristics:. Three to five years of Java and Oracle experience.. Three to five years of experience with Spring and Hibernate.. Experience with XML processing and concepts.. Strong verbal and e-mail communication skills. Communications with development staff and internal Thomson Reuters business partners will be frequent and the candidate must communicate clearly and professionally.. Ability to work independently with some direction from a Te Associated topics: application, back end, c c++, c#, develop, developer, python, sdet, software developer, software engineer
Jul 17, 2019
The selected candidate will have these skills and characteristics:. Three to five years of Java and Oracle experience.. Three to five years of experience with Spring and Hibernate.. Experience with XML processing and concepts.. Strong verbal and e-mail communication skills. Communications with development staff and internal Thomson Reuters business partners will be frequent and the candidate must communicate clearly and professionally.. Ability to work independently with some direction from a Te Associated topics: application, back end, c c++, c#, develop, developer, python, sdet, software developer, software engineer
The Financial and Risk business of Thomson Reuters is now Refinitiv. In this position you'll join our Technology Development organization located in Eagan, MN. You will be a part of a dynamic cross functional team utilizing state of the art technologies and development methodologies focused on agility and tight collaboration with architects, dependent development groups, business partners and key internal partners. We are seeking experienced software development engineers who are results-driven, team-oriented, self-motivated professionals who can use those skills to solve complex testing challenges before code is delivered.. The Opportunity. We're looking for savvy developers to join our Eagan DSS team. Our goal is to find talented people with a passion for technology that have experience delivering production ready code.. This position will conduct technology evaluation and recommendation, mentoring developers through hands-on assistance as well as formal and informal training and some technical development. Work with business and development team in identifying, designing, and developing technical architecture solution components. As a technical leader, the job requires a pragmatic visionary that can translate business needs into workable technology solutions that scale both technically and operationally and also raise the engineering and operational standards. This position will also be responsible for application performance from performance modeling, to performance measuring/profiling, to performance tuning.. Roles and Responsibilities. Develop complex software components and frameworks to deliver business value and enable other software engineers to efficiently deliver business value.. Provide technical guidance to teams and act as a point of contact for technical and product matters.. Assist in identification and implementation of short-term and long-term solution options, including risk assessments, and recommendations to business and technology leadership.. Responsible for the analysis, definition, design, construction, testing, installation, modification, and maintenance of software systems.. Estimates effort required for own work, and checks and agrees other team members' estimates. Accountable for planning work assigned to their team, including work breakdown, accurate estimate and identification of possible solution options.. Provides assistance in researching and adopting new and emerging technologies, evaluating new tools, technologies and platforms to be included in projects.. Provide technical leadership in the design and development of moderate to complex components. Provide support to operations or other development teams. Review work of peers and more junior developers. Requirements. Minimum Bachelor Degree in Computer Science / Engineering / Math or equivalent. Design & implementation experience with large scale systems for enterprise-wide use: 5+ years. .Net Framework experience: 7+ years. C# experience: 7+ years. Experience with NUnit or equivalent. Experience with REST APIs: 5+ years. Good written and oral communication skills. Willingness to learn and use new technologies. Strong problem solving, algorithmic thinking and coding skills. Desired Background and Skills. Experience with cloud development, AWS. Experience in development of complex distributed, multi-tier systems. Proven experience working in fast-paced software development environment, leveraging core Agile principles. Experience building complex microservice-based architectures. Skills reflecting team building, flexibility, and customer service. Proven experience working in fast-paced software development environment, leveraging core Agile principles. We are reinventing the way professionals work.. Thomson Reuters is the most trusted provider of essential news, information and tools t... Associated topics: application, develop, developer, matlab, perl, php, programming, python, software development engineer, sw
Jul 17, 2019
The Financial and Risk business of Thomson Reuters is now Refinitiv. In this position you'll join our Technology Development organization located in Eagan, MN. You will be a part of a dynamic cross functional team utilizing state of the art technologies and development methodologies focused on agility and tight collaboration with architects, dependent development groups, business partners and key internal partners. We are seeking experienced software development engineers who are results-driven, team-oriented, self-motivated professionals who can use those skills to solve complex testing challenges before code is delivered.. The Opportunity. We're looking for savvy developers to join our Eagan DSS team. Our goal is to find talented people with a passion for technology that have experience delivering production ready code.. This position will conduct technology evaluation and recommendation, mentoring developers through hands-on assistance as well as formal and informal training and some technical development. Work with business and development team in identifying, designing, and developing technical architecture solution components. As a technical leader, the job requires a pragmatic visionary that can translate business needs into workable technology solutions that scale both technically and operationally and also raise the engineering and operational standards. This position will also be responsible for application performance from performance modeling, to performance measuring/profiling, to performance tuning.. Roles and Responsibilities. Develop complex software components and frameworks to deliver business value and enable other software engineers to efficiently deliver business value.. Provide technical guidance to teams and act as a point of contact for technical and product matters.. Assist in identification and implementation of short-term and long-term solution options, including risk assessments, and recommendations to business and technology leadership.. Responsible for the analysis, definition, design, construction, testing, installation, modification, and maintenance of software systems.. Estimates effort required for own work, and checks and agrees other team members' estimates. Accountable for planning work assigned to their team, including work breakdown, accurate estimate and identification of possible solution options.. Provides assistance in researching and adopting new and emerging technologies, evaluating new tools, technologies and platforms to be included in projects.. Provide technical leadership in the design and development of moderate to complex components. Provide support to operations or other development teams. Review work of peers and more junior developers. Requirements. Minimum Bachelor Degree in Computer Science / Engineering / Math or equivalent. Design & implementation experience with large scale systems for enterprise-wide use: 5+ years. .Net Framework experience: 7+ years. C# experience: 7+ years. Experience with NUnit or equivalent. Experience with REST APIs: 5+ years. Good written and oral communication skills. Willingness to learn and use new technologies. Strong problem solving, algorithmic thinking and coding skills. Desired Background and Skills. Experience with cloud development, AWS. Experience in development of complex distributed, multi-tier systems. Proven experience working in fast-paced software development environment, leveraging core Agile principles. Experience building complex microservice-based architectures. Skills reflecting team building, flexibility, and customer service. Proven experience working in fast-paced software development environment, leveraging core Agile principles. We are reinventing the way professionals work.. Thomson Reuters is the most trusted provider of essential news, information and tools t... Associated topics: application, develop, developer, matlab, perl, php, programming, python, software development engineer, sw
The Information Security team seeks a high-energy, motivated individual for the position of Identity Architect. The IAM team is completely modernizing the identity landscape as a cornerstone of our security posture. This is an exciting opportunity to make an impact as we build toward the future of identity at Thomson Reuters. Identity Architect a knack for understanding business needs with solid technical credentials. with business and technology peers across the organization to develop strategies for authentication, authorization, and identity governance. Primary Responsibilities: identity services including Single-Sign On (SSO), virtual directory services identity governance, privileged access management, and PKI Identify opportunities to enhance our wider identity strategy o envision new features and services to address business needs and opportunities Consult with internal and business unit technology teams to ensure alignment with our strategy Drive adoption through engaging and developing partnerships with technology peers Define Lead architectural decision making from concept to resolution gaining alignment with key partners Drive toward standard, scalable solutions C B Stay current an Communicate your ideas through Required Skills: such as other leading platforms. Experience with architectural integrity to identity data management challenges Deep understanding of federation and SSO technologies (OIDC, OAUTH, SAML) Deep understanding of identity services for cloud including AWS and Azure Deep understanding of identity architectures leveraging Microsoft technology such as Active Directory, Azure AD and ADFS Experience with strong authentication technologies with a wide range of audiences including engineers 5+ years of design and architecture experience 8 Bachelor s degree required; Master s degree or other advanced study desired CISSP certification This position can be based in one of the following locations: Eagan, MN, Carrollton, TX, Richmond, VA, Ann Arbor, MI or Toronto, CA At Thomson Reuters, we believe what we do matters. We are passionate about our work, inspired by the impact it has on our business and our customers. As a team, we believe in winning as one - collaborating to reach shared goals, and developing through challenging and meaningful experiences. With more than 25,000 employees in more than 100 countries, we work flexibly across boundaries and realize innovations that help shape industries around the world. Making this happen is a dynamic, evolving process, and we count on each employee to be a catalyst in driving our performance - and their own. As a global business, we rely on diversity of culture and thought to deliver on our goals. To ensure we can do that, we seek talented, qualified employees in all our operations around the world regardless of race, color, sex/gender, including pregnancy, gender identity and expression, national origin, religion, sexual orientation, disability, age, marital status, citizen status, veteran status, or any other protected classification under applicable law. Thomson Reuters is proud to be an Equal Employment Opportunity/Affirmative Action Employer providing a drug-free workplace. We also make reasonable accommodations for qualified individuals with disabilities and for sincerely held religious beliefs in accordance with applicable law. Intrigued by a challenge as large and fascinating as the world itself? Come join us.To learn more about what we offer, please visit thomsonreuters.com/careers.More information about Thomson Reuters can be found on thomsonreuters.com. Locations Associated topics: architecture, backend, back end, c, c/c++, matlab, maven, project architect, senior, software engineer lead
Jul 17, 2019
The Information Security team seeks a high-energy, motivated individual for the position of Identity Architect. The IAM team is completely modernizing the identity landscape as a cornerstone of our security posture. This is an exciting opportunity to make an impact as we build toward the future of identity at Thomson Reuters. Identity Architect a knack for understanding business needs with solid technical credentials. with business and technology peers across the organization to develop strategies for authentication, authorization, and identity governance. Primary Responsibilities: identity services including Single-Sign On (SSO), virtual directory services identity governance, privileged access management, and PKI Identify opportunities to enhance our wider identity strategy o envision new features and services to address business needs and opportunities Consult with internal and business unit technology teams to ensure alignment with our strategy Drive adoption through engaging and developing partnerships with technology peers Define Lead architectural decision making from concept to resolution gaining alignment with key partners Drive toward standard, scalable solutions C B Stay current an Communicate your ideas through Required Skills: such as other leading platforms. Experience with architectural integrity to identity data management challenges Deep understanding of federation and SSO technologies (OIDC, OAUTH, SAML) Deep understanding of identity services for cloud including AWS and Azure Deep understanding of identity architectures leveraging Microsoft technology such as Active Directory, Azure AD and ADFS Experience with strong authentication technologies with a wide range of audiences including engineers 5+ years of design and architecture experience 8 Bachelor s degree required; Master s degree or other advanced study desired CISSP certification This position can be based in one of the following locations: Eagan, MN, Carrollton, TX, Richmond, VA, Ann Arbor, MI or Toronto, CA At Thomson Reuters, we believe what we do matters. We are passionate about our work, inspired by the impact it has on our business and our customers. As a team, we believe in winning as one - collaborating to reach shared goals, and developing through challenging and meaningful experiences. With more than 25,000 employees in more than 100 countries, we work flexibly across boundaries and realize innovations that help shape industries around the world. Making this happen is a dynamic, evolving process, and we count on each employee to be a catalyst in driving our performance - and their own. As a global business, we rely on diversity of culture and thought to deliver on our goals. To ensure we can do that, we seek talented, qualified employees in all our operations around the world regardless of race, color, sex/gender, including pregnancy, gender identity and expression, national origin, religion, sexual orientation, disability, age, marital status, citizen status, veteran status, or any other protected classification under applicable law. Thomson Reuters is proud to be an Equal Employment Opportunity/Affirmative Action Employer providing a drug-free workplace. We also make reasonable accommodations for qualified individuals with disabilities and for sincerely held religious beliefs in accordance with applicable law. Intrigued by a challenge as large and fascinating as the world itself? Come join us.To learn more about what we offer, please visit thomsonreuters.com/careers.More information about Thomson Reuters can be found on thomsonreuters.com. Locations Associated topics: architecture, backend, back end, c, c/c++, matlab, maven, project architect, senior, software engineer lead
Enterprise Service Integration Architect Role Description Thomson Reuters has a variety of application platforms that are responsible for managing the different parts of the end-to-end customer lifecycle & related critical business processes e.g. CRM, Finance, Order Management, eCommerce, Marketing, Billing. Although there is a significant installation of these application within the Thomson Reuters data centres, increasingly Thomson Reuters is adopting a SaaS biased-application architecture e.g. Salesforce, Service Now. The Thomson Reuters ESI (Enterprise Systems Integration) platform provides strategic real-time integration (for both data and function sharing) between these applications, whether they are on-premise or in the cloud. The ESI has both on-premise and cloud-resident elements. Thomson Reuters reliance on ESI will increase significantly in the coming years, in terms of capacity and the extension of its coverage to include integration with Thomson Reuters product platforms and customer-owned integration platforms. It must be clear how ESI will provide an efficient and robust service both now and in an incremental way as demand for new services and capacity increases. The Enterprise Integration Architect will provide direction and oversight to all parts of the delivery cycle, from initial solutions architecture delivery (for each component) through to delivery and operational support. The Enterprise Service Integration Architect: Is responsible for the definition, development, maintenance, communication and ongoing governance of Thomson Reuters DEP (Digital, Employee, Partner Tech) Service Integration Architecture. Responsible for ensuring the integration services are fit-for-purpose, easy to understand and easy to adopt in a secure and scalable way. Will provide a reference point for the integration design of systems and projects. ESI will support a variety of data types and formats, for which the data models and translation mechanisms must be clearly defined. Will be required to have in depth knowledge of current and emerging Application Integration technologies and how these technologies can be adopted to provide the best outcome for the data domain (in terms of functionality and commercially) (API, Microservices, Patterns etc). Will manage a small team of application integration architects within the DEP Enterprise Architecture team, and build strong working relationships with the network of specialists, delivery partners and primary stakeholders across the organisation. Key Deliverables: the seamless integration of Cloud-resident and on-premise applications using a mix of technologies (e.g. Oracle Fusion, Dell Boomi), integration of product platforms and customer integration platforms Direction on the creation of the Application Integration architecture for projects and programmes Deliver and maintain key architectural artefacts including, but not limited to, the following: Detailed NFR capabilities to support the business needs (Availability, DR, Performance, Scalability) Service Integration Playbook / How To guides Service Catalogue & Design Patterns API Gateway Integration Model Overall Governance Model, Standards, Policies and Principles Skills and Experience: Service Oriented Architecture, API, Microservices Architecture patterns Service Integration Reference Architecture Development (Policies, Standards) API Strategy and Development Systems consolidation roadmap development Competency centre development In depth knowledge of current and emerging intgeration technologies TOGAF Strong stakeholder management with good communication skills Associated topics: .net, architect, architecture, c#, develop, devops, maven, perl, senior software developer, senior software engineer
Jul 17, 2019
Enterprise Service Integration Architect Role Description Thomson Reuters has a variety of application platforms that are responsible for managing the different parts of the end-to-end customer lifecycle & related critical business processes e.g. CRM, Finance, Order Management, eCommerce, Marketing, Billing. Although there is a significant installation of these application within the Thomson Reuters data centres, increasingly Thomson Reuters is adopting a SaaS biased-application architecture e.g. Salesforce, Service Now. The Thomson Reuters ESI (Enterprise Systems Integration) platform provides strategic real-time integration (for both data and function sharing) between these applications, whether they are on-premise or in the cloud. The ESI has both on-premise and cloud-resident elements. Thomson Reuters reliance on ESI will increase significantly in the coming years, in terms of capacity and the extension of its coverage to include integration with Thomson Reuters product platforms and customer-owned integration platforms. It must be clear how ESI will provide an efficient and robust service both now and in an incremental way as demand for new services and capacity increases. The Enterprise Integration Architect will provide direction and oversight to all parts of the delivery cycle, from initial solutions architecture delivery (for each component) through to delivery and operational support. The Enterprise Service Integration Architect: Is responsible for the definition, development, maintenance, communication and ongoing governance of Thomson Reuters DEP (Digital, Employee, Partner Tech) Service Integration Architecture. Responsible for ensuring the integration services are fit-for-purpose, easy to understand and easy to adopt in a secure and scalable way. Will provide a reference point for the integration design of systems and projects. ESI will support a variety of data types and formats, for which the data models and translation mechanisms must be clearly defined. Will be required to have in depth knowledge of current and emerging Application Integration technologies and how these technologies can be adopted to provide the best outcome for the data domain (in terms of functionality and commercially) (API, Microservices, Patterns etc). Will manage a small team of application integration architects within the DEP Enterprise Architecture team, and build strong working relationships with the network of specialists, delivery partners and primary stakeholders across the organisation. Key Deliverables: the seamless integration of Cloud-resident and on-premise applications using a mix of technologies (e.g. Oracle Fusion, Dell Boomi), integration of product platforms and customer integration platforms Direction on the creation of the Application Integration architecture for projects and programmes Deliver and maintain key architectural artefacts including, but not limited to, the following: Detailed NFR capabilities to support the business needs (Availability, DR, Performance, Scalability) Service Integration Playbook / How To guides Service Catalogue & Design Patterns API Gateway Integration Model Overall Governance Model, Standards, Policies and Principles Skills and Experience: Service Oriented Architecture, API, Microservices Architecture patterns Service Integration Reference Architecture Development (Policies, Standards) API Strategy and Development Systems consolidation roadmap development Competency centre development In depth knowledge of current and emerging intgeration technologies TOGAF Strong stakeholder management with good communication skills Associated topics: .net, architect, architecture, c#, develop, devops, maven, perl, senior software developer, senior software engineer
including discovery, design, development and deployment. The key areas of responsibility 1. 3. 1. the 2. roadmap of developing a product, bringing it customers ensure products are managed and delivered 1. team knows with appropriate detail what they are expected to 2. stakeholder and sub-segment leads and stakeholder management and persuasion - able 4. 5. quantitative 6. development Associated topics: chief program officer, cpo, manage, manager, management, monitor, product manager, project manager, relationship manager, task
Jul 17, 2019
including discovery, design, development and deployment. The key areas of responsibility 1. 3. 1. the 2. roadmap of developing a product, bringing it customers ensure products are managed and delivered 1. team knows with appropriate detail what they are expected to 2. stakeholder and sub-segment leads and stakeholder management and persuasion - able 4. 5. quantitative 6. development Associated topics: chief program officer, cpo, manage, manager, management, monitor, product manager, project manager, relationship manager, task