Description

You will support security technology operations and development security within a large-scale environment.

Responsibilities

• Conduct security assessments, penetration testing, and code reviews to identify vulnerabilities and flaws.
• Investigate and resolve security incidents through active participation in incident response activities.
• Design and implement security controls to ensure systems meet industry standards and best practices.
• Document security assessments, findings, and remediation plans to support RFP compliance and regulatory requirements.
• Develop and maintain security testing methodologies, tools, and frameworks to automate processes.
• Collaborate with third-party vendors to evaluate the security of their systems and integrations.

Required Skills

• 3-4 years of experience in security testing, vulnerability assessments, and penetration testing.
• Master’s degree in Computer Science, Information Security, or a related field.
• Proficiency in Python, Ruby, or PowerShell for automation and tool development.
• Deep understanding of cloud platforms including AWS and Digital Ocean, as well as on-premises infrastructure.
• Strong knowledge of networking concepts, DNS, encryption, firewalls, proxies, and IPS/IDS.
• Experience with EDR, AV/AM, SIEM, and vulnerability scanning tools.
• Familiarity with email technologies including DMARC, DKIM, SMTP, and TLS.
• Working knowledge of secure SDLC methodologies and secure coding practices.
• Understanding of security frameworks such as OWASP, NIST, ISO 27001, and PCI DSS.

Preferred Skills

• Relevant certifications such as CEH, CISSP, OSCP, or GIAC.
• Ability to train and coach staff in technical security processes and practices.

Key Skills

Education

Master’s degree in Computer Science, Information Security