Compliance Security Penetration Tester

Job Description: - Advise clients on technical security or compliance activities

• Manage priorities and tasks to achieve delivery utilization targets
• Operate professionally internally and with clients
• Ensure quality products and services are delivered on time
• Continue developing professional skills through relevant industry-specific certifications and maintain strong practice-area knowledge
• Collaborate with project managers, quality management, sales, and delivery team members to drive customer satisfaction and meet project deliverables
• Develop processes, procedures, and methodologies to enhance testing processes and experience
• Assist with report generation and quality assurance processes
• Develop client relationships
• Assist in scoping prospective engagements and lead engagements from initial stages through implementation and remediation
• Manage project escalations for current testing
• Mentor and develop less experienced staff
• Contribute to Penetration Testing Team success by managing the team to meet business objectives and metrics
• Perform internal and external network penetration testing
• Perform browser-based, API, and mobile application penetration testing
• Perform cloud solution penetration testing, social engineering, and wireless assessments
• Conduct security assessments across diverse technologies and implementations
• Simulate sophisticated cyberattacks for clients worldwide

Requirements: - Bachelor's degree (four-year college or university) or equivalent combination of education and work experience

• 3+ years’ experience in information security with Web Application and Network penetration testing experience
• Experience working with enterprise environments
• Hands-on experience with scripting languages such as Python, Powershell, Shell, or Ruby
• Experience with one or more IT security compliance frameworks, such as PCI, FISMA, HIPAA, FEDRAMP, or HITRUST
• One to three (1-3) years of experience in an IT Security Audit and/or Compliance role
• Experience interacting with management in a consultative manner
• Strong IT understanding of networks, servers, workstations, and applications
• Excellent communication and presentation skills
• Ability to travel up to 20%
• Deep experience engaging clientele in consulting-related environments
• Experience leading penetration team engagements
• Experience reverse engineering malware, data obfuscators, or ciphers
• Aptitude for technical writing, including assessment reports, presentations, and operating procedures
• Strong understanding of security principles, policies, and industry best practices
• Experience working with C and various compiler toolchains
• Community contributions or participation, including CTF, Hack-the-box, or cyber-defense competitions
• Speaking or presentation experience
• Public security research experience

Benefits: - Flexible work model allowing employees to choose when and where they work most effectively

• Employee resource groups
• In-person and virtual events
• Paid parental leave
• Flexible time off
• Certification and training reimbursement
• Digital mental health and wellbeing support membership
• Comprehensive insurance options
• Annual incentive, commission, and/or recognition programs may be available