Senior Penetration Testing Engineer, Cybersecurity

Provide security and vulnerability remediation expertise to technology stakeholders and partners

Mentor and share knowledge with other security practitioners and technology stakeholders

Assist in the implementation of advanced security technology solutions by conducting feasibility studies, proof of concept, product comparison, and/or optimization analyses; participating in project artifact and technical reviews; challenging suppliers to improve technology; and researching technology and software development for secure information technology solutions.

What you'll bring:

8+ years Information Security experience

5+ years expert experience executing penetration testing/ethical hacking against IoT, embedded systems, cloud-based technologies, mobile, hardware, APIs, web applications

• Advanced-level experience security testing in dynamic enterprise cloud environments

Advanced-level experience security testing in dynamic enterprise cloud environments

Strong technical knowledge around web application security: ability to identify and reproduce reported vulnerabilities, as well as assess contextual risk.

• In-depth knowledge of security fundamentals, including OWASP Top 10 and other common application security vulnerabilities. The Web Application Hacker’s Handbook is a great resource to be familiar with.

In-depth knowledge of security fundamentals, including OWASP Top 10 and other common application security vulnerabilities. The Web Application Hacker’s Handbook is a great resource to be familiar with.

• Possess one or more of these credentials: OSCP, OSWE, GXPN, GWAPT, GPEN, CREST CRT, OSCP, HTB CPTS etc.

Possess one or more of these credentials: OSCP, OSWE, GXPN, GWAPT, GPEN, CREST CRT, OSCP, HTB CPTS etc.

Familiarity with and ability to calculate CVSS ratings for identified vulnerabilities based on an understanding of each customer’s threat model.

Familiar with vulnerability disclosure and bounty programs, including: confidentiality and disclosure processes, the importance of clear and quick communication between hackers and customers, program policies, etc.

Ability to prioritize and organize operationally complex work, with great attention to detail.

Strong ability to identify and exploit security gaps/vulnerabilities on endpoint devices, applications and networks.

• Exposure and understanding of enterprise solutions from a functional and security perspective.

Exposure and understanding of enterprise solutions from a functional and security perspective.

Preferred bug bounty experience

Preferred development skills (be able to understand the issue from a dev perspective and discuss fix with dev teams).

• Top notch communication skills: need to be able to firmly, yet politely, respond to non-issues, as well as identify legitimate issues and communicate them to security teams in an easy to understand format. And ability to articulate and translate security and risk management terminology in business terms.

Mode of Work

Benefits

• Beyond our great compensation package, you can receive incentive awards for your performance. Other great perks include a host of best-in-class benefits maternity and parental leave, PTO, health benefits, and much more.

Belonging

Equal Opportunity Employer

Minimum Qualifications...

• Outlined below are the required minimum qualifications for this position. If none are listed, there are no minimum qualifications.

Preferred Qualifications...

• Outlined below are the optional preferred qualifications for this position. If none are listed, there are no preferred qualifications.