Staff Penetration Testing Engineer

What you'll do

• Leads the development and implementation of security risk management solutions for complex projects.
• Conducts advanced manual security testing to assess technical risks and recommend remediation strategies.
• Develops detailed design for entire systems within a domain to ensure adherence to security norms.
• Mentors team members on secure coding standards, testing techniques, and risk assessment methodologies.
• Evaluates application deployments for security vulnerabilities and develops code to address identified gaps.
• Collaborates with cross-functional teams to integrate input from various perspectives in cyber risk assessments.

What we're looking for

• Master's degree in Computer Science or related field plus 2 years of penetration testing experience; or Bachelor's degree plus 4 years of relevant experience.
• Expertise in applying security principles and frameworks to identify gaps and recommend mitigations during penetration tests.
• Proficiency in security testing techniques, including web application testing with tools like Burp Suite.
• Experience using secure coding standards and frameworks to mitigate code-level vulnerabilities.
• Strong scripting skills across multiple languages for automation and security tasks.
• Ability to assess technical security risks and prioritize remediation based on risk impact.
• Knowledge of cloud platform configurations and threat modeling for various operating systems.