Security Consultant – Penetration Testing, DevSecOps

🕒 Setembro 16

🏈 Alabama, California, +14 estados a mais – Remoto

🏈 Alabama – Remote 🏄 California – Remote 🐊 Florida – Remote 🌽 Illinois – Remote 🏖️ New Jersey – Remote 🗽 New York – Remote 🏈 Ohio – Remote 🍂 Massachusetts – Remote 🚗 Michigan – Remote ❄️ Minnesota – Remote 🔔 Pennsylvania – Remote 🌴 South Carolina – Remote 🎸 Tennessee – Remote 🤠 Texas – Remote ⚔️ Virginia – Remote ☕ Washington – Remote

💵 $82.950 - $135.300 / ano

⏰ Tempo Integral

🟡 Pleno

🟠 Sênior

⛑ DevOps & Engenheiro de Confiabilidade do Site (SRE)

🦅 Patrocina Visto H1B

Esta empresa já patrocinou vistos H1B no passado.

👻 Score fantasma 19%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Por que essa pontuação:

• Aberta há 60 dias.
• As vagas desta empresa costumam ser preenchidas em 238 dias.
• Repostada uma vez.

Candidatar-se

Verificar sua pontuação do currículo

Adaptar currículo + carta de apresentação

Encontrar Vagas Remotas Similares

☆ Salvar☑️ Marcar como candidatado❌ Ocultar

Reportar problema

Capgemini

SiteLinkedInTodas as Vagas

10.000+ funcionários

Fundada em 1967

💼 Consultoria

🏥 Saúde

📦 Logística

Consulting • Healthcare • Logistics

A Capgemini é líder global em parceria com empresas para transformar e gerenciar suas operações aproveitando o poder da tecnologia. Com expertise em uma ampla gama de setores, como aeroespacial, automotivo, bancário e saúde, a Capgemini oferece um portfólio de serviços em constante evolução para atender às necessidades, em constante mudança, de seus clientes. Suas ofertas incluem Cloud, cibersegurança, dados e inteligência artificial (IA), e gestão empresarial, entre outras. A Capgemini também enfatiza inovação e sustentabilidade, ajudando as empresas a alcançar a transformação digital enquanto promove a responsabilidade ambiental e social. Além disso, a Capgemini oferece oportunidades de carreira em diversos níveis e profissões, incentivando a inovação e a diversidade em sua força de trabalho.

Descrição

• Perform manual and automated penetration testing of web applications, APIs, mobile applications, cloud environments, and supporting infrastructure • Conduct reconnaissance, vulnerability discovery, exploitation, and post-exploitation following OWASP, PTES, NIST, and MITRE ATT&CK methodologies • Identify vulnerabilities, validate exploitability, assess business risk, and provide actionable remediation recommendations • Execute assessments against microservices, containers, Kubernetes, and cloud-native applications • Develop proof-of-concepts demonstrating security weaknesses and attack paths • Prepare detailed technical reports and executive summaries for customers and stakeholders • Integrate security controls and testing into CI/CD pipelines • Implement and manage SAST, DAST, SCA, IaC, container security, secrets detection, and API security testing solutions • Collaborate with development teams to remediate vulnerabilities and adopt secure coding practices • Participate in security architecture reviews, threat modeling exercises, and secure design assessments • Automate security testing and compliance validation within DevOps toolchains • Develop security guardrails and policy-as-code capabilities • Perform vulnerability triage, risk prioritization, and remediation tracking • Support continuous security monitoring and risk assessment activities • Analyze emerging threats, attack techniques, and security trends • Assist in developing security standards, procedures, and best practices • Work with engineering, cloud, and infrastructure teams to improve organizational security posture • Present findings and recommendations to developers, architects, engineering teams, and leadership • Provide security consulting throughout the software development lifecycle

🎯 Requisitos

• Bachelor's degree in Computer Science, Information Security, Engineering, or a related field • 5-8 years of hands-on cybersecurity experience • Minimum 3+ years conducting application and API penetration testing • Experience implementing or supporting DevSecOps initiatives within CI/CD environments • Strong understanding of web application security, API security, Secure SDLC, OWASP Top 10, OWASP API Top 10, MITRE ATT&CK, threat modeling, and vulnerability management • Hands-on experience with Burp Suite Professional, Nmap, Nessus / Qualys / Tenable, Metasploit, Kali Linux, Checkmarx, Veracode, Snyk, SonarQube, and GitHub Actions / Azure DevOps / Jenkins • One or more listed security certifications: OSCP, CRTO, PNPT, CEH, GWAPT, GPEN, CISSP, CCSP, Azure Security Engineer Associate, or AWS Security Specialty; OSCP preferred • Experience with container security, including Docker and Kubernetes • Experience conducting cloud penetration testing • Understanding of Infrastructure as Code, including Terraform and CloudFormation • Familiarity with Red Team methodologies and adversary simulation • Exposure to Zero Trust Architecture and Secure-by-Design principles • Experience with AI/LLM security testing is a plus • Excellent communication, consulting, and stakeholder management skills

🏖️ Benefícios

• Paid time off: vacation (12-25 days depending on grade), company-paid holidays, personal days, and sick leave • Medical, dental, and vision coverage (or provincial healthcare coordination in Canada) • Retirement savings plans, including 401(k) in the U.S. and RRSP in Canada • Life and disability insurance • Employee assistance programs • Other benefits as provided by local policy and eligibility • Potential eligibility for variable incentives, bonuses, or commissions

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo