Penetration Tester

Vaga não está no LinkedIn

🕒 Janeiro 16

🧀 Wisconsin – Remoto

🧀 Wisconsin – Remote

⏰ Tempo Integral

🟠 Sênior

🔴 Especialista

🔧 Engenheiro de QA (Qualidade de Software)

Candidatar-se

Encontrar Vagas Remotas Similares

Configurar Alerta de Email para Novas Vagas

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo

Sprocket Security

SiteLinkedInTodas as Vagas

11 - 50 funcionários

💼 Consultoria

🏥 Saúde

🛡️ Seguros

Consulting • Healthcare • Insurance

Sprocket Security é uma plataforma de segurança ofensiva orientada por especialistas, especializada em testes de segurança contínuos, testes de penetração e simulações de adversários. A empresa foca em fornecer proteção durante todo o ano por meio de testes persistentes e validação de controles contra agressores de ameaça do mundo real. A Sprocket Security trabalha com indústrias como manufatura, finanças, bancos e seguros para fortalecer posturas de segurança, identificando potenciais caminhos de ataque e descobrindo vulnerabilidades nos sistemas através de seus serviços de gerenciamento de superfície de ataque. Eles oferecem uma gama de serviços de teste, incluindo engenharia social e teste de aplicações web para detectar vulnerabilidades. Ao integrar automação e testadores de penetração especializados, a Sprocket Security oferece uma solução abrangente para monitorar e proteger continuamente os ativos de TI.

Descrição

• Perform web application testing methodologies at scale. • Perform network and wireless testing methodologies at scale from time to time. • Discover newly exploitable systems across our fleet of clients. It's fun to test that new vulnerability the day it's released! • Build payloads and C2 infrastructure that evades defenses. • Mimic tactics and techniques used by real-world adversaries. • Show impact with post-exploitation activities. • Manage our platform by conducting tasks, write findings, and work with clients to help detect and prevent. • Develop tools and contribute to our automated infrastructure. You'll commonly program in the following languages: Ruby, Python, PowerShell, C# Bash, etc. • Advanced usage of the following tools: Burp Suite Pro, Nessus, Metasploit, CobaltStrike, etc. • Manage project lifecycles and present professionally to clients. Kickoff calls, debriefs, etc. • Work closely with development teams to migrate human-driven tasks into automation. • Work with AWS, Azure, terraform, ansible, and gitlab pipelines.

🎯 Requisitos

• Seven or more years of hands-on penetration testing experience. • Five or more years on hands-on Web App penetration testing experience. • Adversary Simulation experience. • Detailed knowledge of identifying and exploiting vulnerabilities in Windows, Linux, and cloud -based systems. • Programming experience in Ruby, Python, Bash. Bonus (C#, JavaScript, terraform, ansible). • Clear and concise verbal and written skills. • United States resident

🏖️ Benefícios

• Unlimited and mandatory PTO for healthy work/life balance. • Company matched 401k (immediate eligibility, no one should have to wait to start saving). • 75% company contribution for health insurance for employees and 50% for dependants. • 100% company contribution for dental and vision. • Work whatever schedule works best for you. We care about results, not 9-5. • Hardware and tools of your choice • Support for your career development with paid training, conferences, certifications, etc.