Job Summary

Our client is currently seeking an Information Security Engineer. In this role, you will validate the overall security of infrastructure components and applications to ensure they comply with internal policies, security architecture best practices, and industry standards.

Duties:

Provide vulnerability assessment and penetration testing services globally through a comprehensive testing process
Participate in special projects ranging from rush testing of critical components to architecture reviews with sister teams to “shift-left“
Act as an SME for infrastructure penetration testing in cross-functional efforts and projects
Participate in the enhancement of testing processes and methodologies
Identify weaknesses and vulnerabilities within the system, exploit them, and propose countermeasures
Scan systems and applications, leverage initial results to build a subsequent attack methodology, and execute effectively
Report information security vulnerabilities to businesses in an actionable manner

Desired Skills/Experience:

3+ years of relevant experience in offensive security with a history of gradually expanding experience prior
Demonstrated hands-on experience with vulnerability assessment and enumeration tools such as Tenable Nessus, Qualys VM, and OSS enumeration tools
Demonstrated hands-on experience with penetration testing tools such as Kali suite, open-source tooling, and Living Off The Land OS
Deep understanding of TCP, IP, and infrastructure stacks including 3-tier and segmented environments
Experience with TTPs, IOCs, and advanced threat analysis and threat mapping
Experience with OS and Network Security including Unix, Linux, Windows, Cisco, etc.
Experience with MITRE ATT&CK Framework or similar
Understanding of common protocols including DNS, SMTP, SNMP, LDAP, and routing protocols
Demonstrated experience working effectively in enterprise environments
Exceptional interpersonal skills and a proven track record of working effectively with globally diverse teams
Ability to understand new and emerging technologies rapidly to keep up with an ever-changing threat landscape
Ability to effectively document and explain exploits and vulnerabilities to technical and non-technical audiences including senior leadership
Ability to understand defensive security principles with an ability to demonstrate offensive opportunities

Benefits:

Medical, Dental, & Vision Insurance Plans
401K offered

KMID: 126861

KellyMitchell Group

New Jobs

Information Security Engineer