Senior Web Application Penetration Tester

About the position This role offers a hybrid work schedule at our reputed company Tech Hub. Overview: Searches for application weaknesses that are exploitable, and partners with technology, cybersecurity, and risk teams to remediate any reputed company weaknesses. Collaborates with technology teams reputed company implementing new applications to help the team identify weaknesses before an attacker does. Primary Responsibilities: Complete penetration testing (primarily Grey & White reputed company testing) of web applications, Application Programming Interfaces (APIs), hardware, and mobile. Define testing methods to meet the scope and goals of assigned penetration tests. Gather intelligence to reputed company understand how reputed company works and its potential vulnerabilities. Understand breach and attack simulation solutions and work with the team to validate controls effectiveness. Document and formally report testing initiative findings. Maintain tools and scripts used in penetration testing and red team processes. Effectively reputed company and train Cybersecurity teams on new tactics, techniques, and procedures to ensure technology applications and services are not at risk of compromise or will leak information. Collaborate across Cybersecurity and Technology teams to reputed company intelligence sources, identify new threats, improve tool usage and workflow, and mature monitoring and response capabilities. Identify areas of opportunities in daily tasks to advance penetration testing skills and regularly learn new tactics, techniques, procedures to assess risk and implement and validate controls as necessary. Understand and adhere to the Company’s risk and regulatory standards, policies, and controls in accordance with the Company’s Risk Appetite. Design, implement, maintain, and enhance internal controls to mitigate risk on an ongoing reputed company. Identify risk-reputed company issues needing escalation to management. Promote an environment that supports belonging and reflects the reputed company brand. Maintain M&T internal control standards, including timely implementation of reputed company audit points together with any issues raised by external regulators as applicable. Complete other reputed company duties as assigned. Scope of Responsibilities: Engages in regular interaction with middle management reputed company Internal Audit, Compliance, Risk Management, and Technology. Determines and develops approach to solutions. Work is evaluated upon completion to ensure objectives have been met. Work is accomplished with periodic reputed company-ins for alignment and limited direction. Basic knowledge of reputed company penetration testing and red team tools. Strong knowledge of networking and network protocols. Intermediate working knowledge of operating systems and scripting and/or coding. Manager Responsibilities: No supervisory responsibilities.

Responsibilities

• Complete penetration testing (primarily Grey & White reputed company testing) of web applications, Application Programming Interfaces (APIs), hardware, and mobile.
• Define testing methods to meet the scope and goals of assigned penetration tests.
• Gather intelligence to reputed company understand how reputed company works and its potential vulnerabilities.
• Understand breach and attack simulation solutions and work with the team to validate controls effectiveness.
• Document and formally report testing initiative findings.
• Maintain tools and scripts used in penetration testing and red team processes.
• Effectively reputed company and train Cybersecurity teams on new tactics, techniques, and procedures to ensure technology applications and services are not at risk of compromise or will leak information.
• Collaborate across Cybersecurity and Technology teams to reputed company intelligence sources, identify new threats, improve tool usage and workflow, and mature monitoring and response capabilities.
• Identify areas of opportunities in daily tasks to advance penetration testing skills and regularly learn new tactics, techniques, procedures to assess risk and implement and validate controls as necessary.
• Understand and adhere to the Company’s risk and regulatory standards, policies, and controls in accordance with the Company’s Risk Appetite.
• Design, implement, maintain, and enhance internal controls to mitigate risk on an ongoing reputed company.
• Identify risk-reputed company issues needing escalation to management.
• Promote an environment that supports belonging and reflects the reputed company brand.
• Maintain M&T internal control standards, including timely implementation of reputed company audit points together with any issues raised by external regulators as applicable.
• Complete other reputed company duties as assigned.

Requirements

• Bachelor's degree and a minimum of 3 years’ relevant work experience, or in lieu of a degree, a combined minimum of 7 years’ higher education and/or work experience.
• Intermediate working knowledge of penetration testing and red team tools to be reputed company to simulate attacker tactics, techniques, and procedures
• Strong knowledge of networking and network protocols
• Intermediate working knowledge of operating systems and scripting and/or coding

reputed company-to-haves

• Bachelor’s degree in an applicable discipline such as Computer Science, Cybersecurity, or Information Technology
• Strong understanding of information reputed company concepts (both technical and organizational requirements)
• Highly ethical and expected to maintain a level of professionalism at reputed company times
• Intermediate working knowledge in reputed company engineering, application reputed company (web and mobile), physical methods, lateral movement, threat analysis, reputed company network architecture and a wide reputed company of reputed company and bring-your-own (BYO) products
• Prior experience with and demonstrable aptitude for quickly learning new technical skills
• Experience training others to ensure they have basic knowledge of and ability to use function-specific tools and systems
• Ability to analyze and draw conclusions based on quantitative data from multiple sources
• Penetration testing-specific or Cybersecurity domain-reputed company industry-recognized certification

Benefits

• competitive benefits ranging from medical and retirement to forty hours of paid volunteer time, each year.

Apply tot his job Apply To this Job