INFO SECURITY ENGINEER 5 (Penetration Testing)

INT Technologies; Winston-Salem (NC); On-site; USD 90,000 - 120,000; Full time

Job summary

A leading technology consulting firm is seeking an INFO SECURITY ENGINEER 5 specializing in penetration testing. The role involves conducting dynamic security testing, reviewing test results, and providing security consulting support. Candidates should have over 5 years of security applications experience and the ability to communicate vulnerabilities effectively within a corporate environment. This contract position requires onsite work in various locations, including North Carolina.

Qualifications

• 5+ years of experience in security applications and systems.
• Minimum of 5 years of Information Security Engineer/Consultant experience with application penetration testing.
• Demonstrated experience creating and communicating reports regarding web application vulnerabilities.

Responsibilities

• Conduct dynamic application security testing using both manual and automated testing tools.
• Review test results from tools and ensure successful completion.
• Communicate security risks to ISCs and ORCs.

Skills

Strategic problem-solving

Strong analytical skills

Excellent verbal and written communication skills

Collaboration and partnering skills

Tools

Automated penetration testing tools

Manual penetration testing tools

Job description

INFO SECURITY ENGINEER 5 (Penetration Testing)

Contract

Locations: MN-Minneapolis; AZ-Chandler; NC-Charlotte; NC-Winston Salem; CA - San Francisco

Type: Contract  Duration: 3 months

Job description:

• Conduct dynamic application security testing using both manual and automated testing tools.
• Review test results from tools.
• Ensure that automated tests are completed successfully.
• Configure tools as required to be successful in evaluating VERA (Vendor remote access) applications.
• Identify and remove any false positives from automated testing tool reports.
• Triage & Disposition results and enforce a Bug Bar.
• Verify/validate defect fixes.
• Provide application security consulting SME Support to developers.
• Assist developers with understanding of security defects and risk.
• Assist in defining acceptable solutions to fix defects.
• Communicate security risk to ISCs and ORCs to document security issues and controls for security planning purposes.
• Help maintain Security Coding Standards and Bug Bar as required.
• Assist in the Development of standards as required.
• Provide training.
• Stay up to speed on 3rd party (inside and outside Wells Fargo) known security vulnerabilities.
• Develop and review malicious use cases/threat models.
• Maintain a broad understanding of security technologies and products.
• Actively participate in improving the security culture and education throughout the organization.

Required skills:

• 5+ years of experience in security applications and systems.
• Minimum of 5 years of Information Security Engineer/Consultant experience with application penetration testing.
• Minimum of 5 years of demonstrated experience with automated penetration tools.
• Minimum of 5 years of demonstrated experience with manual penetration testing tools.
• Demonstrated experience with creating and communicating reports regarding web application vulnerabilities to various levels of personnel within a large organization.

Desired skills:

• Advanced Information Security technical skills.
• Ability to manage complex issues and develop solutions.
• Excellent verbal and written communication skills.
• Knowledge and understanding of application or software security such as web application penetration testing, secure code review, secure static code analysis.
• Knowledge and understanding of banking or financial services industry.
• Experience working in a large enterprise environment.
• Strong analytical skills with high attention to detail and accuracy.
• Knowledge and understanding of information security industry standards and government regulations.
• Ability to manage multiple and competing priorities.
• Ability to work with limited supervision.
• Ability to take on a high level of responsibility, initiative, and accountability.
• Good attention to detail and accuracy skills.
• Strong collaboration and partnering skills.
• Demonstrated experience developing and reviewing malicious use cases/threat models.

Job expectations:

• Ability to work weekends and holidays as needed or scheduled.
• Candidate will be required to work onsite at certain facilities in these cities: MN-Minneapolis; AZ-Chandler; NC-Charlotte; NC-Winston Salem; CA - San Francisco.

All your information will be kept confidential according to EEO guidelines.

Please let me know if you might someone to refer or if you are interested for the role. Please reply with an updated copy of your resume and preferred time for a call. You can call me back at 303.945.3632.