Senior Penetration Testing Analyst 2

Overview

Senior Penetration Testing Analyst 2 on Sophos's Red Team, conducting application or network penetration tests for clients worldwide and leading client-facing engagement calls.

What you'll do

• Conduct application security assessments (web, mobile, API, etc.) using off-the-shelf or internally developed exploitation tools to execute manual testing for advanced attacks, OR network penetration testing assessments (external pen test, internal pen test, etc.)
• Produce and deliver vulnerability and exploit information to clients in the form of a professional security assessment report
• Conduct client conference calls, including project kick-off calls, notification of high/critical findings during testing, and close-out calls to review test findings, evidence, process steps to reproduce, and remediation recommendations
• Perform proactive research to identify and understand new threats, vulnerabilities, and exploits
• Conduct exploitation testing using off-the-shelf or self-developed exploitation tools and document findings for client remediation
• Excel as both a self-directed individual contributor and as a member of a larger team
• Perform other essential duties as assigned

What you'll need

• Typically requires 7+ years of related experience in a professional role with a Bachelor's degree; or 5+ years with a Master's degree; or 3+ years with a PhD; or equivalent experience
• Minimum of 4 years of experience with penetration testing
• Minimum of 4 years of experience with at least one of the following: Nmap, Metasploit, Kali Linux, Burp Suite
• Offensive certifications such as CEH, WAPT, GPEN, GWAPT, GAWN, OSCP, etc.
• Knowledge of NetSparker and AppScan; operating systems administration and internals (Microsoft Windows / Linux)
• Experience with various application attack vectors, security test processes, and strong knowledge of common vulnerabilities (i.e. OWASP Top 10)
• Understanding of TCP/IP networking at a technical level
• Bachelor of Science degree in Computer Science, Computer Engineering, Electrical Engineering, or a related technical field; or equivalent professional experience
• Working knowledge of SQL and high-level languages
• Good technical communication skills, both written and verbal; good analytical and problem-solving skills

Nice to have

• Experience in both application security and network security focus areas

Details

• Remote position within India; candidates must reside in and be authorized to work in India
• Potential travel up to 10%