Compliance Security Penetration Tester

This is a fully remote position, open to applicants in United States.

📋 Description

• Provide guidance to clients regarding technical security or compliance initiatives

• Prioritize and manage tasks to meet delivery utilization objectives

• Maintain a professional demeanor in interactions with both clients and internal teams

• Ensure timely delivery of high-quality products and services

• Continuously enhance professional skills through relevant certifications and maintain expertise in the practice area

• Work collaboratively with project managers, quality assurance, sales, and delivery teams to boost customer satisfaction and fulfill project requirements

• Create processes, procedures, and methodologies to improve testing practices and experiences

• Support report generation and quality assurance activities

• Build and foster client relationships

• Assist in defining the scope of potential engagements and lead projects from initial phases to implementation and remediation

• Oversee project escalations related to ongoing testing

• Mentor and nurture the growth of junior staff members

• Contribute to the success of the Penetration Testing Team by guiding the team to achieve business goals and metrics

• Conduct internal and external network penetration tests

• Execute penetration testing for web browsers, APIs, and mobile applications

• Carry out penetration testing for cloud solutions, social engineering, and wireless assessments

• Perform security evaluations across various technologies and implementations

• Simulate advanced cyberattacks for clients globally

⛳️ Requirements

• A bachelor's degree (four-year college or university) or a comparable combination of education and work experience

• Over 3 years of experience in information security, including Web Application and Network penetration testing

• Experience in enterprise environments

• Proficient in scripting languages such as Python, PowerShell, Shell, or Ruby

• Familiarity with one or more IT security compliance frameworks, including PCI, FISMA, HIPAA, FEDRAMP, or HITRUST

• One to three (1-3) years of experience in an IT Security Audit and/or Compliance role

• Experience in a consultative role interacting with management

• Strong understanding of IT infrastructure, including networks, servers, workstations, and applications

• Exceptional communication and presentation abilities

• Willingness to travel up to 20%

• Extensive experience in client engagement within consulting environments

• Experience leading penetration testing team projects

• Knowledge in reverse engineering malware, data obfuscators, or ciphers

• Strong technical writing skills for assessment reports, presentations, and operational procedures

• Comprehensive understanding of security principles, policies, and industry best practices

• Familiarity with C and various compiler toolchains

• Active community involvement, including participation in CTF, Hack-the-box, or cyber-defense competitions

• Experience in speaking or presenting

• Background in public security research

🏝️ Benefits

• Flexible work model enabling employees to choose when and where they work most effectively

• Employee resource groups

• Both in-person and virtual events

• Paid parental leave

• Flexible time off policy

• Reimbursement for certifications and training

• Membership for digital mental health and wellbeing support

• Comprehensive insurance coverage options

• Potential for annual incentives, commissions, and/or recognition programs