Senior Security Consultant

Abricto Security; Piemonte; Hybrid; EUR 70,000 - 95,000; Full time

Job summary

Abricto Security is seeking a Senior Security Consultant to apply expertise across penetration testing disciplines and lead engagements for clients. You will present findings to technical teams and executives, guide junior staff, and drive security assessments from scoping to remediation.

Responsibilities include testing web apps, networks, IoT, and cloud architectures, debriefing customers, and developing new tools. A strong track record and communication skills are essential.

Qualifications

• Bachelor's degree or equivalent work experience.
• At least 5 years of penetration testing experience.
• Experience debriefing technical and executive teams on findings.
• Fluent in Mac, Linux and Windows.
• Experience presenting at security conferences.

Responsibilities

• Conduct penetration testing for customer web apps, networks, IoT devices and more.
• Lead assessments for cloud architectures, social engineering, and container environments.
• Debrief customers on findings and provide remediation recommendations.
• Mentor junior staff and guide professional development of the team.
• Develop and share new tools to improve security processes.

Skills

Penetration testing

Communication skills

Public speaking

Mentorship

Education

Bachelor’s degree or equivalent work experience

Tools

AWS

Azure

GCP

Java

Python

C#

Go

Swift

Ruby

Linux

Job description

« back to careers

Senior Security Consultant

The role of a Senior Security Consultant at Abricto Security requires a wide breadth of knowledge across multiple penetration testing disciplines. This position requires the ability to carry out a range of penetration tests offered by Abricto Security. Our consultants are expected to effectively present their findings to technical teams and executives alike. A strong background in leading penetration tests and conducting debriefs is imperative.

What You’ll Be Doing

• Helping our security consultants and junior staff grow professionally by providing guidance and mentorship as needed.
• Conducting penetration testing for our customer’s web applications, networks, IoT devices and more.
• Perform security assessments reviewing IoT and cloud architectures, social engineering and container environments.
• Leading strategic services including Full Circle Security and Advanced Persistent Adversary Emulation.
• Composing and reviewing other consultants’ detailed findings reports to communicate security findings, risk severities and remediation actions.
• Leading as a subject matter expert in reviewing customer’s enterprise or product security architectures for misconfigurations, omissions or other vulnerabilities.
• Leading by example and setting the bar for other security consultants to follow.
• Debriefing customers on assessment findings and providing remediation recommendations.
• Researching and developing new tools to improve processes and procedures.
• Actively learning about new tools and techniques to strengthen our security assessments and services.
• Writing technical blog posts detailing research you’ve done or sharing your professional experiences.
• Collaborating with team members to share ideas and learn new skill sets.
• Working as part of a larger team to deliver both remote and on-site assessments when needed.

What You’ll Bring To The Team

• Strong communication skills, be able to communicate effectively both verbally and written.
• Nice to have certifications include OSCP, OSCE, OSEE, OSWE, CISSP, CSSLP and others.
• Bachelor’s degree or equivalent work experience.
• Experience providing security guidance for popular programming languages and frameworks (e.g. Java, Python, C#, Go, Swift, Ruby).
• Cloud experience for AWS, Azure or GCP.
• Fluent in Mac, Linux, and Windows operating systems.
• At least 5 years of prior penetration testing experience.
• Experience debriefing both technical and executive teams on security assessment findings.
• Ability to deliver training to customers, both virtually and on-site.
• Experience presenting at security conferences.
• Embracing our “You First” attitude, understanding that our customer-centric approach is what sets us apart.

Bonus Points

• Contributions and participation in the security community.
• GitHub project repositories.
• Developed or maintained security tools.
• Published CVEs.
• Participation in CTFs.