Apply on Employer Site

NBCUniversal · 1 day ago

PCI Penetration Testing Coordinator

United States

Full-time

Remote

Mid, Senior Level

$100K/yr - $140K/yr

3+ years exp

NBCUniversal is one of the world's leading media and entertainment companies. They are seeking a PCI Scanning & Penetration Testing Coordinator to lead and manage the organization’s PCI ASV scanning and penetration testing programs, ensuring compliance with PCI DSS requirements and serving as a liaison between business units and technical teams.

BroadcastingMedia and EntertainmentNews

H1B Sponsor Likely

Responsibilities

Managing and maintaining PCI ASV scan schedules across all business units

Initiating and tracking ad hoc scans, ensuring timely execution and reporting

Validating remediation of vulnerabilities and special notes, coordinating with technical teams and GRC

Acting as the single point of contact for the ASV vendor, resolving anomalies and portal issues

Negotiating false positives and scan disputes with the vendor on behalf of business units

Coordinating annual and ad hoc PCI penetration tests across applicable environments

Scoping, scheduling, and executing penetration tests internally when vendor support is unavailable or impractical

Performing manual and automated testing techniques including network, web application, and system-level assessments

Analyzing test results, documenting findings, and providing remediation guidance aligned with PCI DSS

Tracking remediation efforts and maintaining centralized documentation of test reports and compliance evidence

Generating and maintaining reports for internal stakeholders, auditors, and compliance attestations

Interfacing with business unit technical teams to ensure understanding and prioritization of findings

Providing guidance and support to teams with limited PCI knowledge or bandwidth

Qualification

PCI compliancePenetration testingVulnerability managementPenetration testing methodologiesBurp SuiteNmapNessusMetasploitKali LinuxScriptingExternal vendor managementInternal technical team collaborationRemediation guidanceReport generationASV scanningNetwork protocolsWeb application architectureCommon vulnerabilitiesPCI DSS knowledgeProject deadlinesOrganizational skillsCommunication skillsDocumentation skillsProject managementTeam collaboration

Required

Bachelor's Degree in an IT-related field and/or equivalent work experience

Minimum 3–5 years of experience in PCI compliance, vulnerability management, or penetration testing

Strong understanding of PCI DSS requirements, especially ASV scanning and penetration testing controls

Proficiency in penetration testing methodologies (OWASP, NIST SP 800-115, PTES)

Experience with tools such as Burp Suite, Nmap, Nessus, Metasploit, Kali Linux, and scripting (Python, Bash)

Working knowledge of network protocols, web application architecture, and common vulnerabilities

Experience working with external vendors and internal technical teams

Excellent organizational, communication, and documentation skills

Ability to manage multiple concurrent projects and deadlines

Certifications (at least one Required): Offensive Security Certified Professional (OSCP), GIAC Penetration Tester (GPEN), Certified Ethical Hacker (CEH)

Preferred

Certifications (Preferred): PCI Internal Security Assessor (ISA), GIAC Web Application Penetration Tester (GWAPT), CISSP or CISM for broader security leadership alignment

Benefits

Medical, dental and vision insurance

401(k)

Paid leave

Tuition reimbursement

A variety of other discounts and perks

Company

NBCUniversal

Glassdoor4.0

NBCUniversal is a media company that provides entertainment and news development, production, distribution, and marketing services. It is a sub-organization of Comcast.

Founded in 1912

New York, New York, USA

10001+ employees

https://www.nbcuniversal.com/

H1B Sponsorship

NBCUniversal has a track record of offering H1B sponsorships. Please note that this does not guarantee sponsorship for this specific role. Below presents additional info for your reference. (Data Powered by US Department of Labor)

Distribution of Different Job Fields Receiving Sponsorship

Represents job field similar to this job

Trends of Total Sponsorships

2020 (1)