Security Engineer (Pen Tester)

Description:
Summary: The main function of a Security Engineer is to plan, coordinate, and implement security measures for information systems to regulate access to computer data files and prevent unauthorized modification, destruction or disclosure of information. A typical data security administrator is responsible for planning, coordinating and implementing security measures to safeguard the computer database.
Job Responsibilities:
Identify security issues and risks, and develop mitigation plans
Design, implement, support, and evaluate security-focused tools and services including project leadership roles
Develop and interpret security policies and procedures
Participate in security compliance efforts
Develop and deliver training materials and perform general security awareness and specific security technology training
Evaluate and recommend new and emerging security products and technologies
Qualifications:
Bachelor's degree in a technical field such as computer science, computer engineering or related field required
8+ years experience required
Strong experience and detailed technical knowledge in Security Engineering, system and network security, authentication and security protocols, cryptography, and application security
Consistent implementation of security solutions Experience in infrastructure or application-level vulnerability testing and auditing
Additional Skills and Experience
Seeking a Lead Network Penetration Tester to head our network security team. This role involves overseeing complex penetration testing projects, managing a team of security professionals, and enhancing our network security. The candidate should have a thorough understanding of network protocols, systems, Active Directory, and be well-versed in the latest cybersecurity threats and solutions.
Key Responsibilities:
- Lead advanced penetration testing on network infrastructure, including wired and wireless networks and AWS Cloud infrastructure.
- Guide the team in identifying and exploiting network and system vulnerabilities.
- Develop and implement comprehensive test plans, scenarios, scripts, and procedures.
- Analyze test results, prepare detailed reports, and present findings to senior management.
- Mentor and develop team members in cybersecurity best practices.
- Collaborate with various departments to integrate security into network operations.
- Keep abreast of new technologies, attack techniques, and security trends.
- Spearhead research and development in network penetration testing methodologies and tools.
Technical Skills:
- Expertise in network protocols (TCP/IP, HTTP, HTTPS, DNS, etc.) and infrastructure.
- Advanced penetration testing skills, independent of tools like Metasploit and Wireshark.
- In-depth knowledge of operating systems, including Windows, Linux, and Unix.
- Proficiency in scripting languages (e.g., Python, Bash).
- Extensive experience with AWS Cloud Services.
- Extensive experience with security systems such as firewalls, IDS/IPS, and VPNs.
- Comprehensive understanding of Active Directory in network security.
- Strong knowledge of network terminologies and practices.
- OSCP or related network penetration testing certifications preferred.
Qualifications:
- Bachelor's degree in Computer Science, Information Security, or a related field.
- At least 7 years of experience in network penetration testing, with 2+ years in a leadership role.
- Proven ability to lead and manage a high-performing security team.
- Strong analytical, strategic planning, and problem-solving skills.
- Excellent communication and presentation skills.
- Effective leadership and collaborative abilities.