Key Facts

Remote From:

New York (USA)

Category: Penetration Tester

Full time

Mid-level (2-5 years)

English

Hard Skills

Penetration Testing Amazon Web Services Network Security Endpoint Security Mobile Security Web Application Security Scripting Wireshark Tcpdump Network Protocols +3 more

Other Skills

•
Communication
•
Teamwork
•
Problem Solving

Roles & Responsibilities

2-3 years of professional experience
Proficient in AWS services like EC2, S3, KMS, RDS or similar services on Azure GCP
Skilled in conducting penetration tests for API, Mobile, Cloud, and Web Applications
Familiarity with scripting languages such as Python, Perl, Go or Ruby

Requirements:

Conduct security audits, network penetration tests, and web application, API and cloud assessments
Draft security assessment reports that outline findings and provide a walkthrough of the assessment performed
Use social engineering to identify improvement for security awareness and education
Provide guidance and recommendations to clients on ways to fix or reduce security risks

OccamSec

Cybersecurity

About OccamSec

As an industry leader in cybersecurity, OccamSec excels in providing a wide range of services extending to penetration testing, continuous penetration testing, threat hunting, red team operations, purple team engagements, and vulnerability research. With a commitment to cutting-edge methodologies, we enable organizations to fortify their security posture and proactively detect and address vulnerabilities before they can be exploited. At OccamSec, we understand that today's threat landscape is constantly evolving, requiring a proactive and dynamic approach to cybersecurity. Our team of skilled professionals is adept at conducting rigorous penetration tests to identify weaknesses in your systems and networks, allowing you to fortify your defenses against potential attacks. Our continuous penetration testing services ensure that your security remains robust and up to date, providing ongoing monitoring and assessments to detect and address any emerging vulnerabilities in real time. In addition, our threat hunting capabilities enable us to actively search for potential threats within your infrastructure, while our red and purple team exercises simulate real-world attacks to evaluate your overall security readiness. Complemented by our cutting-edge vulnerability research, we deliver comprehensive insights and actionable recommendations to empower your organization in staying one step ahead of cyber threats. Choose OccamSec and stay confident in your cybersecurity defenses.

Company type: SME

Industry: Cybersecurity

Founded: 2018

Company size: 11 - 50

Website LinkedIn See all jobs →

Job description

The Penetration Tester is responsible for working as part of the Assessment Team to conduct and participate in offensive and defensive security projects for OccamSec and its clients. This individual will work as part of a security team and report to an Assessment Team Lead.

Job Responsibilities:

Conduct security audits, network penetration tests, and web application, API and cloud assessments.
Draft security assessment reports that outline findings and provide a walkthrough of the assessment performed with evidence provided appropriately.
Use social engineering to identify improvement for security awareness and education.
Provide guidance and recommendation to clients on ways to fix or reduce security risks to their networks and products.
Operate as part of a team on larger, more complex projects with oversight from senior team members.
Operate independently on projects within defined-skill set, with oversight from a Project Manager.
Maintain proficiency in current security tools and skills.

Experience:

Candidates with at least 2-3 years of professional experience are preferred.
Proficient in working with AWS services like EC2, S3, KMS, RDS, or similar services on Azure & GCP, with a focus on implementing security best practices.
Skilled in conducting penetration tests for API, Mobile, Cloud, and Web Applications.
Familiarity with scripting languages such as Python, Perl, Go or Ruby.
Hands-on experience in building or developing Server or Application Technologies.
Utilized penetration tools effectively in various scenarios.
Applied expertise in replicating threat behaviors.
Proficient in using packet analyzer tools like Wireshark and tcpdump.
Sound understanding of IP network protocols, sub-netting, routing, switching, etc.
Extensive background in penetrating and exploiting secure networks and systems, staying updated with the latest security software packages, protocols, and computer technologies.
Excellent written and oral communication skills, with a proven track record in generating comprehensive reports and assessments.

Benefits