Offensive Security Engineer

EMPLOYERS; United States; Remote; USD 80,000 - 115,000; Full time

Job summary

An innovative firm is seeking an Offensive Security Engineer to enhance its cybersecurity posture through adversary simulation and vulnerability assessments. This exciting remote role involves managing security tools, conducting penetration tests, and developing strategies to mitigate risks. The ideal candidate will have extensive experience in IT security, including application development and network security. Join a dynamic team that values collaboration and integrity, and contribute to a mission-driven organization dedicated to protecting its infrastructure and clients. If you're passionate about cybersecurity and want to make a significant impact, this opportunity is perfect for you.

Qualifications

• 5+ years in IT with strong networking knowledge.
• 3+ years in network and web application penetration testing.
• Security certifications are required.

Responsibilities

• Plan and manage network/cloud security risk assessments.
• Perform penetration testing and document vulnerabilities.
• Create reports and propose remediation strategies.

Skills

Application Development

Networking

Cloud Security

Security Frameworks

Vulnerability Management

Scripting

Public Speaking

Report Writing

Team Collaboration

Education

College / University Degree

Tools

SIEM

Incident Detection and Response

Vulnerability Assessment Tools

Data Loss Prevention

Identity Access Management

Forensics Tools

Job description

Offensive Security Engineer| 100% Remote Opportunity (must live in the U.S and workwithoutsponsorship)

Job Profile/Summary

The Offensive Security Engineer will perform adversary simulation/emulation operations to test and improve our global detection and response capabilities, and to identify weaknesses in our infrastructure and products (insurance industry). The Offensive security engineer will monitor and analyze emerging cyber threats, vulnerabilities, and exploits relevant to our infrastructure and products.

The Offensive Security Engineer will be responsible for day-to-day management of all risk and security related tools along with the planning, teaching, and guiding other team members to use the tools. These tools include SIEM, Incident Detection and Response, Vulnerability and Web Security Management, Data Loss Prevention, Identity Access Management, Forensics, IT Service Management, Security Awareness and Phishing Training.

Essential Duties/Responsibilities

·Plan, coordinate, manage and assess network/cloud security risk using automated and manual penetration techniques to identify security vulnerabilities.

·Exploit vulnerabilities and identify and document risks to networks and systems or applications.

·Performing social engineering / phishing activities such as reconnaissance of targets, developing phishing campaigns, web hosting administrator, developing malicious phishing payloads.

·Create assessment reports that document vulnerabilities, identify causes, and propose remediation strategies.

·Participate in management, maintenance, and deployment of penetration testing tools/vulnerability assessment tools and technologies.

·Manage vendor relationship management ensuring that service levels, vendor obligations, and budgets are reviewed and met.

·Support Enterprise Risk Management: Management of risks, facilitate awareness and approval steps (where applicable)

·Create a positive environment by monitoring workloads of the team while meeting client expectations and respecting the work-life quality of team members.

·Proactively seek guidance, clarification, and feedback.

·Keep leadership and key stakeholders informed of information processing risk; and

·Develop policies and procedures for securing network infrastructure and web applications.

Job Requirements/Competencies

·Strong Knowledge of Application Development, Systems, Networking, Cloud

·Understanding of security frameworks, standards, and recommendations

·Strong technical knowledge of security risks and management

·Understanding of secure web communications and technologies

·Knowledge of vulnerabilities and exploits

·Willingness to continually learn

·Ability to script or write code

·Soft Skills – Public Speaking, Report Writing, Team Player

·Security certified

·College / University degree required

·Deploy and demonstrated impact in Application Security, Penetration Testing, Vulnerability Testing, Command & Control, or another related field.

·Understanding of MITRE ATT&CK & Compliance frameworks

Number of Years’ Experience

·5+ years of experience in an IT role with a strong understanding of networking

·3+ years of hand-on experience preforming network and web application penetration tests

Work Environment:

Remote: This role is remote (WFH), and only open to candidates currently located in the United States and able to work without sponsorship.

·It requires a suitable space that provides a private and quiet workplace.

·Expected Work Hours: Schedules are set to accommodate the requirements of the position and the needs of the organization and may be adjusted as needed.

·Travel: May be required to travel to off-site location(s) to attend meetings, as necessary

Salary Range: $80,000 - $115,000 and a comprehensive benefits package, please follow the link to our benefits page for details! https://www.employers.com/careers/our-benefits-and-perks/

About EMPLOYERS

As a dynamic, fast-growing provider of workers' compensation insurance and services, we are seeking a goal-oriented individual willing to put their ideas to work!

We offer a positive, challenging work environment, combined with an opportunity to build your career as you help us grow our business, in innovative and imaginative ways that are uniquely EMPLOYERS!

Headquartered in Nevada, EMPLOYERS attributes its long-standing success to its most valuable resource, our employees across the United States. EMPLOYERS is known for the quality service and expertise we provide to our clients, and the exemplary work environment we provide for our employees.

We live and breathe our core values: Integrity, Customer Focus, Collaboration, Initiative, Accountability, Innovation, and Personal Fulfillment. These are the pillars that support how we do business with our clients as well as how we treat each other!

At EMPLOYERS, you’ll discover an energetic environment that inspires top achievement. As “America’s small business insurance specialist,” we have the resources, a solid reputation, and an expanding nationwide identity to enrich your work/life and enhance your career. #LI-Remote