Security Consultant – Penetration Testing, DevSecOps

🕒 Setembro 16

🏈 Alabama, Arizona, +17 estados a mais – Remoto

🏈 Alabama – Remote 🌵 Arizona – Remote 🏄 California – Remote ⛰️ Colorado – Remote 🐊 Florida – Remote 🌽 Illinois – Remote 🌾 Nebraska – Remote 🏖️ New Jersey – Remote 🗽 New York – Remote 🏈 Ohio – Remote 🍂 Massachusetts – Remote 🚗 Michigan – Remote ❄️ Minnesota – Remote 🔔 Pennsylvania – Remote 🌴 South Carolina – Remote 🎸 Tennessee – Remote 🤠 Texas – Remote ⚔️ Virginia – Remote ☕ Washington – Remote

💵 $70.176 - $170.040 / ano

⏰ Tempo Integral

🟡 Pleno

🟠 Sênior

⛑ DevOps & Engenheiro de Confiabilidade do Site (SRE)

🦅 Patrocina Visto H1B

Esta empresa já patrocinou vistos H1B no passado.

👻 Score fantasma 2%

O que significa: quão provável esta vaga está aberta sem contratação ativa.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Configurar Alerta de Email para Novas Vagas

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo

Capgemini

SiteLinkedInTodas as Vagas

10.000+ funcionários

Fundada em 1967

💼 Consultoria

🏥 Saúde

📦 Logística

Consulting • Healthcare • Logistics

A Capgemini é líder global em parceria com empresas para transformar e gerenciar suas operações aproveitando o poder da tecnologia. Com expertise em uma ampla gama de setores, como aeroespacial, automotivo, bancário e saúde, a Capgemini oferece um portfólio de serviços em constante evolução para atender às necessidades, em constante mudança, de seus clientes. Suas ofertas incluem Cloud, cibersegurança, dados e inteligência artificial (IA), e gestão empresarial, entre outras. A Capgemini também enfatiza inovação e sustentabilidade, ajudando as empresas a alcançar a transformação digital enquanto promove a responsabilidade ambiental e social. Além disso, a Capgemini oferece oportunidades de carreira em diversos níveis e profissões, incentivando a inovação e a diversidade em sua força de trabalho.

Descrição

• Perform manual and automated penetration testing of web applications, APIs, mobile applications, cloud environments, and supporting infrastructure • Conduct reconnaissance, vulnerability discovery, exploitation, and post-exploitation activities using OWASP, PTES, NIST, and MITRE ATT&CK methodologies • Identify vulnerabilities, validate exploitability, assess business risk, and provide actionable remediation recommendations • Execute security assessments of microservices, containers, Kubernetes, and cloud-native applications • Develop proof-of-concepts demonstrating security weaknesses and attack paths • Prepare detailed technical reports and executive summaries for customers and stakeholders • Integrate security controls and testing into CI/CD pipelines • Implement and manage SAST, DAST, SCA, IaC, Container Security, Secrets Detection, and API Security testing solutions • Collaborate with development teams to remediate vulnerabilities and adopt secure coding practices • Participate in security architecture reviews, threat modeling exercises, and secure design assessments • Automate security testing and compliance validation within DevOps toolchains • Develop security guardrails and policy-as-code capabilities • Perform vulnerability triage, risk prioritization, and remediation tracking • Support continuous security monitoring and risk assessment activities • Analyze emerging threats, attack techniques, and security trends • Assist in developing security standards, procedures, and best practices • Work with engineering, cloud, and infrastructure teams to enhance organizational security posture • Present findings and recommendations to developers, architects, engineering teams, and leadership • Provide security consulting throughout the software development lifecycle

🎯 Requisitos

• Bachelor's degree in Computer Science, Information Security, Engineering, or a related field • 5-8 years of hands-on cybersecurity experience • Minimum 3+ years of experience conducting application and API penetration testing • Experience implementing or supporting DevSecOps initiatives within CI/CD environments • Strong understanding of Web Application Security, API Security, Secure SDLC, OWASP Top 10, OWASP API Top 10, MITRE ATT&CK, Threat Modeling, and Vulnerability Management • Hands-on experience with Burp Suite Professional, Nmap, Nessus / Qualys / Tenable, Metasploit, Kali Linux, Checkmarx, Veracode, Snyk, SonarQube, and GitHub Actions / Azure DevOps / Jenkins • One or more listed security certifications: OSCP, CRTO, PNPT, CEH, GWAPT, GPEN, CISSP, CCSP, Azure Security Engineer Associate, or AWS Security Specialty • Experience with container security (Docker, Kubernetes) • Experience conducting cloud penetration testing • Understanding of Infrastructure as Code (Terraform, CloudFormation) • Familiarity with Red Team methodologies and adversary simulation • Exposure to Zero Trust Architecture and Secure-by-Design principles • Experience with AI/LLM security testing is a plus • Excellent communication, consulting, and stakeholder management skills

🏖️ Benefícios

• Vacation: 12-25 days, depending on grade • Company paid holidays • Personal Days • Sick Leave • Medical, dental, and vision coverage (or provincial healthcare coordination in Canada) • Retirement savings plans (e.g., 401(k) in the U.S., RRSP in Canada) • Life and disability insurance • Employee assistance programs • Other benefits as provided by local policy and eligibility • Variable incentives, bonuses, or commissions may be available