Associate, Compliance Security Penetration Tester
关于 Coalfire Coalfire 的使命是通过解决客户最难的网络安全挑战来使世界更安全的地方。我们在技术前沿工作,为公司提供建议,评估,自动化和最终帮助企业 navigate 不断变化的网络安全景观。我们的总部位于伊利诺伊州芝加哥,美国和英国各地的办事处,并支持全球客户。但这不是我们的人物。这是我们所做的。我们是思想领导者,顾问和网络安全专家,但最重要的是,我们是一个热情的问题解决者的团队,渴望学习,成长和改变。独立与团队合作,支持以下工作活动:内部和外部网络透测试,应用透测验 (基于浏览器,API,移动),云解决方案透测試,社会工程,无线评估。对各种技术和实施进行安全评估。为全球客户模拟复杂的网络攻击。你将做什么 · 咨询客户在技术安全或合规活动上 · 管理优先事项和任务以实现交付利用目标。· 在内部和客户之间都经营着专业性。·确保质量产品和服务及时交付。·继续发展专业技能,并获得相关行业特定认证。保持实践领域的强知识深度。·与项目经理,质量管理,销售和其他配送团队成员合作,以提高客户满意度,满足项目成果。·开发过程,程序和方法来增进测试流程和体验。·协助报告生成和质量保证流程。·帮助确定潜在的承诺,从初步阶段到实施和补救。·管理正在进行的测试项目升级 · 辅导和培养经验较少的人员 ·通过管理团队实现各种业务目标和指标来促进透测试团队的总体成功 · 学士学位 (四年制大学或大学)或同等教育与工作经验结合 · 3年以上信息安全经验,Web 应用程序和网络透测验经验者
查看英文原文
About Coalfire
Coalfire is on a mission to make the world a safer place by solving our clients’ hardest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. We are headquartered in Chicago, Illinois with offices across the U.S. and U.K., and we support clients around the world.
But that’s not who we are – that’s just what we do.
We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference.
Working independently and collaboratively with a team to support the following work activities where skills apply such as: Internal and External Network Penetration Testing, Application Penetration Testing (Browser-based, API, Mobile), Cloud Solution Penetration Testing, Social Engineering, Wireless Assessments.
Conduct security assessments on a wide variety of technologies and implementations.
Simulate sophisticated cyberattacks for clients worldwide.
What You'll Do
- Advises clients on technical security or compliance activities
- Manages priorities and tasks to achieve delivery utilization targets.
- Operates with professionalism both internally and with clients.
- Ensures quality products and services are delivered on time.
- Continues to develop professional skills with relevant industry specific certifications. Maintains strong depth of knowledge in the practice area.
- Collaborates with project managers, quality management, sales, and other delivery team members to drive customer satisfaction and meet project deliverables.
- Develop processes, procedures, and methodologies to enhance testing processes and experience
- Assist with report generation and quality assurance processes
- Develop client relationships
- Assist in the scoping of prospective engagements, leading engagements from initial stages through implementation and remediation
- Manage project escalations of current testing being conducted
- Mentor and develop less experienced staff
- Contribute to the Penetration Testing Team overall success by managing your team to meet various business objectives and metrics
What You'll Bring
- Bachelor's degree (four-year college or university) or equivalent combination of education and work experience
- 3+ years’ experience in information security with Web Application and Network penetration testing experience
- Experience working with enterprise environments
- Hands-on experience with scripting languages such as Python, Powershell, Shell, or Ruby
- Experience with one or more IT security compliance frameworks, such as PCI, FISMA, HIPAA, FEDRAMP, or HITRUST
- One to three (1-3) years of experience in an IT Security Audit and/or Compliance role
- Experience interacting with management in a consultative manner
- Strong IT understanding with respect to networks, servers, workstations, and applications
- Excellent communication and presentation skills
- Ability to travel up to 20%
Bonus Points
- Deep experience engaging clientele in consulting-related environments
- Experience leading penetration team engagements
- Reverse engineering malware, data obfuscators, or ciphers
- An aptitude for technical writing, including assessment reports, presentations, and operating procedures
- Strong understanding of security principles, policies, and industry best practices
- Experience working with C and various compiler toolchains
- Community contributions or participation including
- CTF, Hack-the-box, or cyber-defense competitions
- Speaking or presentations
- Public security research
Why You’ll Want to Join Us
At Coalfire, you’ll find the support you need to thrive personally and professionally. In many cases, we provide a flexible work model that empowers you to choose when and where you’ll work most effectively – whether you’re at home or an office.
Regardless of location, you’ll experience a company that prioritizes connection and wellbeing and be part of a team where people care about each other and our communities. You’ll have opportunities to join employee resource groups, participate in in-person and virtual events, and more. And you’ll enjoy competitive perks and benefits to support you and your family, like paid parental leave, flexible time off, certification and training reimbursement, digital mental health and wellbeing support membership, and comprehensive insurance options.
At Coalfire, equal opportunity and pay equity is integral to the way we do business. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Coalfire is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. To request reasonable accommodation to participate in the job application or interview process, contact our Human Resources team at .
Originally posted on Himalayas