Senior Web Application Penetration Tester

🕒 6 dias atrás

Candidatar-se

Encontrar Vagas Remotas Similares

Configurar Alerta de Email para Novas Vagas

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo

SIXGEN

SiteLinkedInTodas as Vagas

51 - 200 funcionários

💼 Consultoria

🎖️ Defesa

🔒 Cibersegurança

💰 $500.000 Seed Round em 2017-09

Consulting • Defense • Cybersecurity

SIXGEN é uma empresa de cibersegurança que oferece capacidades cibernéticas tanto defensivas quanto ofensivas. A empresa se concentra em desenvolver e aplicar automação e aprendizado de máquina ao longo do ciclo de operações de cibersegurança para aumentar a eficiência enquanto preserva as práticas de comércio. SIXGEN oferece uma solução abrangente para operações cibernéticas, integrando capacidades em áreas como espaço, RF e operações com drones, com seus poderosos produtos cibernéticos e serviços especializados. A empresa fornece soluções cibernéticas unificadas, incluindo exploração de vulnerabilidades de acesso remoto e outras operações cibernéticas em uma plataforma autônoma listada na Lista de Produtos Aprovados (APL) do DoDIN.

Descrição

• Conduct penetration testing of web applications, APIs, mobile applications, databases, and client-side technologies • Perform application enumeration, endpoint discovery, vulnerability research, and exploitation activities • Identify, validate, and assess vulnerabilities across complex environments • Analyze attack paths and security weaknesses to determine business and operational impact • Develop and utilize custom tools, scripts, and payloads to support testing activities • Perform network mapping, vulnerability analysis, and security assessments across applications and supporting infrastructure • Research emerging vulnerabilities, attack techniques, and exploitation methodologies • Support post-exploitation activities involving cloud and enterprise environments when applicable • Collaborate with clients and internal teams to define scope, review findings, and recommend remediation strategies • Communicate technical concepts and findings to technical and non-technical stakeholders • Produce comprehensive reports including detailed findings, exploitation procedures, risk analysis, and mitigation recommendations • Participate in client meetings and provide ongoing updates throughout assessment activities

🎯 Requisitos

• 5+ years of experience in web application penetration testing or offensive cybersecurity • Demonstrated experience conducting manual web application security assessments • Knowledge of modern web application vulnerabilities, attack methodologies, and exploitation techniques • Experience with network mapping, vulnerability scanning, and penetration testing methodologies • Familiarity with NIST 800-series standards and cybersecurity best practices • Experience developing scripts, payloads, or custom testing tools • Strong analytical, problem-solving, and communication skills • Must be able to obtain a Secret Clearance • One or more listed offensive security certifications strongly preferred, including CWES, CWEE, OSCP, OSWA, OSWE, CRTO, GWAPT, or other relevant hands-on offensive security certifications • Preferred experience with cloud environments, post-exploitation activities, Active Directory security assessments, FISMA compliance requirements, government or regulated industry clients, and common offensive security tools and frameworks

🏖️ Benefícios

• Employer-paid health insurance premiums (medical, dental, vision) for you and your family • Employer-paid short/long term disability insurance and basic life/AD&D insurance • 401K with a 4% employer contribution • Professional development reimbursement options available (training, certification, education, etc) • Flexible and remote work policies for most positions • Flexible PTO and holiday schedule