Penetration Tester

Job Description

• The Penetration Tester is part of Corporate Information Security, Security Operations organization and participates in the attack surface management of global computing assets.
• The Penetration Tester is responsible for security testing of our technology, coordination with stakeholders regarding their findings, and completion of day-to-day tasks associated with the penetration test program.

Job Responsibilities

• Perform web application, API, and network penetration testing within the designated scope and rules of engagement
• Provide technical guidance for remediation of findings, collaborating with other CIS teams as necessary
• Interface & support other CIS organizations such as Incident Response, Governance, Risk, and Threat Intelligence as necessary

Qualifications

• 4+ years of IT professional experience, with 2+ years previous penetration testing or application security background
• Strong understanding of a variety of technical concepts such as: Application development, networking, systems administration, and information security practices
• Strong web application development, security flaw and remediation technical understanding
• Demonstrated experience with a variety of open source and commercial testing tools in areas such as web interception proxies, packet capture, debugging and API interaction.
• Strong verbal and written communication skills to clearly convey both technical
• Experience and knowledge of performing security tasks within AWS or Azure cloud environments
• Ability to develop strong working relationships with a variety of other enabling teams.
  Self-motivated and operates with a high sense of urgency and a high level of integrity.

Strongly Preferred

• Certifications such as GIAC Web Application Penetration Testing (GWAPT), Offensive Security Certified Professional (OSCP) or GIAC Penetration Testing (GPEN) are strongly preferred.
• Previous experience working in large scale environments with diverse technologies.
• Ability to automate technical tasks through use of APIs or scripting.