Key Responsibilities

Lead a team of penetration testers in executing timely, thorough manual penetration testing of applications and infrastructure assets to identify exploitable vulnerabilities.

Manage scheduling, tracking, reporting, and metrics of the penetration testing program.
Mentor and train team members to equip them perform assessments as needed.

Primary Objectives

Partner with infrastructure and application development teams to advocate for and support effective vulnerability risk reduction across the portfolio.
Support maturation and modernization of software development lifecycle and build pipelines to ensure penetration testing occurs when needed.

Technical Expertise

In-depth understanding of two or more of the following technology areas:
Network infrastructure (routers, switches)
Security products and services (FW, IDS, IPS, AV)
Active Directory, servers, services, desktops, and mobile devices
Operating System (Windows, Unix/Linux/AIX)
Databases (MySQL, SQL, DB2)
Cloud and container technologies like AWS, Azure, Oracle, and Kubernetes
In-depth knowledge in one or more of these programming languages: Java, C#, C, C++, Assembly
In-depth knowledge in one or more of these areas: post-exploitation, exploitation development, or binary reverse engineering

Required Skills and Qualifications

5+ years of experience with testing frameworks and tools such as Burp Suite, Metasploit, Cobalt Strike, Kali Linux, Nessus, PowerShell Empire, AutoSploit, Ghidra, IDAPro, OllyDbg, Fiddler
3+ years of experience in scripting languages such as Python, PowerShell, Bash, and Ruby
Excellent communication and report-writing skills

Benefits

This role may be eligible for discretionary performance-based bonus and/or incentive compensation. The Total Rewards program provides colleagues with a competitive benefits package that includes comprehensive health and wellness benefits, retirement plans, educational assistance, and training programs.

Equal Opportunity Employer

We are proud to be an Equal Opportunity Employer and committed to leveraging the diverse backgrounds, perspectives, and experience of our workforce to create opportunities for our colleagues and our business.

Cybersecurity Specialist - Vulnerability Management

Job Type