Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: InfoSec Jobs - Junior to Senior Penetration Tester San Jose, CA or REMOTE GPEN, GXPN, GWAPT InfoSec Jobs


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Junior to Senior Penetration Tester
Company AppSec Consulting
Location San Jose, CA or REMOTE
Preferred GIAC Certifications GPEN, GXPN, GWAPT
Travel 10%
Salary DOE
URL https://www.appsecconsulting.com/company/careers/senior-penetration-tester
Contact Name Travis Lee
Contact Email careers/at/appsecconsulting.com
Expires 2019-02-28

Job Description

AppSec Consulting has an immediate opening for a Junior to Senior Penetration Tester to join our growing consulting company. This regular, full-time position is a great opportunity for someone with strong network and application penetration testing skills who would like to work on a variety of interesting projects.

We have plenty of exciting projects to work on, including security assessments of networks of all sizes, web applications, mobile applications, execution of social engineering campaigns, and even physical security assessments. This is an opportunity for a team player who would like to work with a world-class team, is ready to get started quickly, and is eager to learn some new skills and have fun while doing so.

Primary Job Duties

-Conducting all types of network and application penetration tests, vulnerability assessments, and architecture reviews. We expect you to have experience doing similar assessments, but we will train you on our proprietary assessment and reporting methodology
-Conducting social engineering campaigns and physical penetration tests
-Writing a formal security assessment report for each penetration test, using our company’s standard reporting format
-Participating in conference calls with clients to review your assessment results and consult with the clients on remediation options
-Retesting security vulnerabilities that have been fixed and republishing your report to indicate the results of your retesting
-Participating in conference calls with potential clients to scope out newly requested security projects and estimate the amount of time required to complete the project

Occasional Job Duties

-Providing on-the-job training and mentoring to other members of the team
-Assisting with security assessment and reporting methodology enhancements
-Performing security research on topics that interest you and publishing blog articles

Work Location

Our company is headquartered in San Jose, California. However, the right candidate for this position can perform most work remotely. Some of the work may involve some travel, but not much.

Technical Skills

We are looking for passionate people with the right mix of technical skills and experience. This is not a comprehensive list of requirements, but a list of qualities that we typically look for in a candidate.

-Previous experience performing penetration testing. This could include some or all of the following:
-Network penetration tests
-Vulnerability assessments
-Web application penetration tests
-Mobile application penetration tests
-Social engineering campaigns
-Physical penetration tests
-Scripting or coding experience (Ruby, Python, Perl, PowerShell, JavaScript, etc.)
-Strong understanding of security fundamentals and network protocols
-Strong understanding of web application security and related protocols
-Experience with static/dynamic analysis and exploit development
-Experience performing security assessments on embedded/hardware devices
-Knowledge of industry compliance and regulations, particularly PCI
-Experience in IT or IT Security roles (System/Network Administration, Developer, Security Engineer, etc.)
-Security related certifications (OSCE, OSCP, GXPN, GPEN, CISSP, etc.) are preferred, but not required if you have a good track record of real-world experience

Soft Skills

-Honesty and integrity
-Solid written and verbal communication skills
-Strong attention to detail
-Solid commitment to providing quality and detail oriented work
-Strong customer focus. The goal should be to make customers happy enough that they ask for you to be called back to do more work for them
-Desire to learn new things and be a participant in the local information security community

Other Requirements

-Must undergo criminal background check and drug testing
-Flexibility to work odd hours at times. For the most part this is a Monday-Friday 8:00 to 5:00 job, but sometimes customers require us to do certain work during weekends or off-hours

Job Benefits

-Competitive salary including performance incentives
-Reasonable work hours compared with most consulting firms. We expect employees to work hard and produce results, but we also understand that our employees have a life outside of work and are not a 60 hour per week body shop. A typical work week is 40 hours. Weekend and overnight work is rare and is rewarded with extra bonuses or time off during the week
-Company sponsored medical and dental insurance
-Company sponsored 401K with company match
-Company sponsored training budget
-You’ll be part of a closely-knit team of dedicated employees

If you think you’re the right person for this challenging and fun career opportunity, please send your resume to careers@appsecconsulting.com.