Cyber Security Consultant - Penetration Testing (French speaking)

Bitdefender; United States; Remote; USD 90,000 - 150,000; Full time

Job summary

Bitdefender ищет опытного консультанта по кибербезопасности для выполнения оффенсив-оценок и проведения пен-тестов по мировому портфелю клиентов. Вы будете работать в составе команды Offensive Security, проводить тестирования безопасности веб-приложений, сетевых сред, мобильных приложений и облачных решений, а также поддерживать продажи и развитие сервиса.

Требуется не менее 2 лет в области кибербезопасности, владение французским языком и углубленные знания инструментов и методик взлома;

Qualifications

• Свободное владение французским языком.
• Не менее 2 лет опыта в кибербезопасности.
• Образование: степень бакалавра в области информатики, информационной безопасности или смежной области; OSCP/OSCE/OSWE/CREST CRT/CRTP/CCT INF; опыт в облачной безопасности.
• Сильные навыки коммуникации и межличностного общения.
• Глубокое понимание принципов Offensive Security и инструментов (MITRE ATT&CK, Cobalt Strike, Burp Suite, Fortify и т.д.).
• Умение работать с скриптовыми языками: Python, PowerShell, C#, C/C++, Go.
• Клиент-ориентированность.
• Аналитическое мышление.
• Командная работа.
• Этические принципы взлома.
• Гибкость/адаптивность.
• Страсть к кибербезопасности, участие в bug bounty.

Responsibilities

• Планирование, выполнение и отчетность по оффенсив-услугам с учетом бюджета, сроков и объема.
• Демонстрация продвинутых знаний и методик атак.
• Взаимодействие с клиентами для понимания целей безопасности и предоставления рекомендаций.
• Поддержка продаж: взаимодействие с отделом продаж, определение объема работ.
• Постоянное изучение угроз и лучших практик, внедрение новых техник и инструментов.
• Сотрудничество с другими командами (продажи, Delivery Management, Research).
• Обеспечение качества deliverables согласно методологиям компании.
• Готовность к командировкам.

Skills

Французский язык

Коммуникационные навыки

Аналитическое мышление

Умение работать в команде

Этический хакинг

Гибкость/адаптивность

Education

Степень бакалавра в области информатики/информационной безопасности

OSCP/OSCE/OSWE/CREST CRT/CRTP/CCT INF

Tools

Cobalt Strike

Burp Suite

Fortify

Python

PowerShell

C#

C/C++

Go

Job description

Описание

Bitdefender is a cybersecurity leader delivering best-in-class threat prevention, detection, and response solutions worldwide. Guardian over millions of consumer, enterprise, and government environments, Bitdefender is one of the industry’s most trusted experts for eliminating threats, protecting privacy, digital identity and data, and enabling cyber resilience. With deep investments in research and development, Bitdefender Labs discovers hundreds of new threats each minute and validates billions of threat queries daily. The company has pioneered breakthrough innovations in antimalware, IoT security, behavioral analytics, and artificial intelligence and its technology is licensed by more than 180 of the world’s most recognized technology brands. Founded in 2001, Bitdefender has customers in 170+ countries with offices around the world. For more information, visit https://www.bitdefender.com

Задачи

We are seeking an experienced and passionate Cybersecurity Pen Testing consultant to join Bitdefender's Cyber Operations (Offensive Security) team, collaborating directly with our clients to conduct offensive security assessments. The Pen Testing consultant will be responsible for conducting pen testing engagements within Bitdefender worldwide. They will work alongside a team of skilled professionals dedicated to identifying vulnerabilities within our clients' security posture. The consultant will play a critical role in delivering high-quality services to clients and contributing to the growth of the service and reputation of the firm.

Members of the Offensive Security team are generally familiar with most aspects of cybersecurity but specialize in web application security, network penetration test, mobile application security, red-teaming activity, phishing campaign, secure code review and cloud security and smart contract audits. The role will be expected to support and work in close partnership with the Sales and Delivery Management team. They will facilitate pre-sales support and ensure the delivery of exceptional value to our clients, constantly exploring routes to improve services and positioning Bitdefender as a leader in the security landscape.

• Engagement Management: Perform planning, execution, and reporting of offensive security engagements, ensuring objectives are met within scope, budget, and timeline constraints.
• Technical Expertise: Demonstrate advanced knowledge and proficiency in various offensive security techniques, tools, and methodologies.
• Client Interaction: Interface directly with clients to understand their security objectives, communicate findings, and provide actionable recommendations for improvement.
• Sales Support: Interface directly with Sales to support on client scoping to understand their security objectives and tailor an impactful and valuable solutions.
• Continuous Improvement: Stay abreast of emerging threats, vulnerabilities, and industry best practices, integrating new techniques and tools.
• Collaboration: Collaborate with other teams within the firm, such as Sales, Delivery Management, and Research, to ensure alignment and maximize client value.
• Quality Assurance: Maintain high standards of quality and professionalism in all deliverables across the team, adhering to the firm's methodologies and standards.
• Travel: Willing to travel around and enjoy being out of their comfort zone.

Требования

• Language: Fluent in French.
• Experience: Minimum of 2 years of experience in cybersecurity.
• Education (one or more of the following): Bachelor degree is computer science, information security or any related field OSCP, OSCE, OSWE, CREST CRT, CRTP, CCT INF, Cloud security experience.
• Communication: Strong communication, writing and interpersonal skills to collaborate with external and internal stakeholders.
• Technical Proficiency: Deep understanding of offensive security principles, techniques (e.g. those in the MITRE ATT&CK), and tools (such as Cobalt Strike, Burp Suite, Fortify, etc.) with hands-on experience in areas such as penetration testing, exploit development, and social engineering.
• Good competency in using scripting languages such as, Python, PowerShell, C#, C/C++, Go Lang.
• Client Focus: Strong client-facing skills, with the ability to build and maintain relationships, understand client needs, and deliver impactful solutions in a clear manner.
• Analytical Thinking: Strong analytical and problem-solving skills, with the ability to think creatively and work independently with minimal supervision.
• Team Player: Collaborative mindset, with the ability to work effectively in cross-functional teams and contribute to a positive work environment whilst sharing knowledge with other peers.
• Ethical Standard: Commitment to ethical hacking principles, with a dedication to upholding client confidentiality and integrity in all engagements.
• Adaptability: Ability to thrive in a fast-paced, dynamic environment, with a willingness to adapt to changing priorities and challenges.
• Passion: Demonstrated passion for cybersecurity, evidenced by involvement in security initiatives outside of work, such as public disclosure of vulnerabilities or relevant awards from bug bounty programs.

Why Bitdefender

We value technical competency (and development) in our consultants and the quality of work we deliver to our clients. There is an annual training budget allocated for each consultant to take up cybersecurity related courses/certifications. Dedicated research time to ensure you stay on the top of your game for the next client project. Opportunities to learn and perform a variety of security assessments beyond pen testing and red teaming/adversary simulations such as; cloud security assessments, blockchain security and IoT testing. We have an awesome delivery team that will help minimize distractions and allow you, our consultant, to focus your efforts on the assessment. Work with and learn from fellow similar-minded colleagues from regions such as APAC, Europe, United States with our HQ in Romania.