Penetration Tester

🕒 Julho 7

🇺🇸 Estados Unidos – Remoto (EUA)

⏰ Tempo Integral

🟡 Pleno

🟠 Sênior

🔧 Engenheiro de QA (Qualidade de Software)

🦅 Patrocina Visto H1B

Esta empresa já patrocinou vistos H1B no passado.

Candidatar-se

Encontrar Vagas Remotas Similares

Configurar Alerta de Email para Novas Vagas

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo

Bishop Fox

SiteLinkedInTodas as Vagas

201 - 500 funcionários

Fundada em 2007

💼 Consultoria

📦 Logística

📣 Marketing

💰 $46.000.000 Series B em 2022-11

Consulting • Logistics • Marketing

A Bishop Fox é uma líder em segurança ofensiva, oferecendo uma gama de soluções de segurança contínua para proteger superfícies de ataque dinâmicas. Seus serviços incluem gerenciamento de superfície de ataque, testes de penetração de aplicações, avaliações de segurança em nuvem, segurança de rede e mais. Eles focam em estratégias de defesa proativa, submetendo as redes dos clientes a cenários de ataques reais para aumentar a resiliência da segurança. A Bishop Fox colabora com grandes parceiros como Google, Facebook e Amazon, garantindo soluções robustas de segurança para ecossistemas complexos. Seu compromisso com o avanço em segurança é enraizado em pesquisa inovadora e colaboração com a comunidade mais ampla de cibersegurança.

Descrição

• Testing web applications, hacking networks, and reversing software • Working on a variety of projects which include short-term engagements and extended program work with well-established clients • Solving challenging technical problems and building creative solutions • Providing expert opinion to help clients navigate difficult business decisions

🎯 Requisitos

• 4+ years experience in planning, conducting, and managing web application penetration tests • 5+ years of application security experience • Deep understanding of security fundamentals (OWASP), common vulnerabilities, and application security best practices • Skilled in vulnerability assessment and the development of exploits for diverse targets • Background in system and network security, authentication and security protocols, and applied cryptography is helpful • Experience with programming and scripting languages such as Python, Ruby, PowerShell, Java, JavaScript, etc. • Bonus if you have experience reviewing Golang source code for vulnerabilities • Proficiency with operating systems - Linux, Windows, MacOS • Experience with network and system exploitation including modern tactics, techniques, and procedures (e.g. c2 frameworks, EDR bypass, privilege escalation, password cracking, lateral movement, etc.) • Strong technical reporting and documentation skills • Advanced relevant academic training, such as a degree in Computer Science or an OSCP, is a definite bonus • Experience with AWS cloud environments preferred with an understanding of its major technologies, such as IAM, EC2, VPC, EBS, S3, CloudWatch, and Lambdas, and how to keep them secure • Secondary expertise in one or more of the following areas preferred: Cloud Security Assessments, Mobile Application Security Testing, Hybrid Application Assessments, or AI/LLM Security Assessments. Ability to communicate technical findings clearly to both technical and executive stakeholders, including actionable remediation guidance.

🏖️ Benefícios

• Our comprehensive benefits program is tailored to meet your needs at an affordable price. • We embrace diversity and an inclusive culture. • We value our employees and who they are, which fosters a powerful and collective talent base to successfully serve our clients and the security community with unparalleled expertise.