Offensive Security Engineer Red Team

Snell & Wilmer L.L.P.; Salt Lake City (UT); Remote; USD 80,000 - 120,000; Full time

Job summary

An established industry player is seeking an Offensive Security Engineer to join their team. This role offers a unique opportunity to work remotely while conducting various offensive security tests, including penetration testing and vulnerability assessments. You will collaborate with diverse teams to enhance security measures and ensure compliance with industry standards. Ideal candidates will have a strong background in cybersecurity, hands-on experience with cloud environments, and excellent communication skills. Join this forward-thinking firm and make a significant impact on their security posture.

Benefits

Medical Insurance

Dental Insurance

Vision Insurance

401K/Profit Sharing

Paid Holidays

Tuition Reimbursement

Paid Time Off

Qualifications

• At least 2 years of hands-on experience in penetration testing.
• Strong knowledge of cybersecurity practices and risk management.

Responsibilities

• Perform penetration tests to identify security risks.
• Develop detailed reports documenting findings and recommendations.

Skills

Penetration Testing

Vulnerability Assessments

Cloud Security

Risk Management

Incident Response

Programming (Python, Bash, Java, C++, PowerShell)

Communication Skills

Education

Formal Training in Cybersecurity

Certifications (OSCP, C|EH, GPEN, CEPT)

Tools

AWS

GCP

Azure

Job description

Snell & Wilmer, one of the largest and most prestigious law firms in the western United States, is currently looking to fill an Offensive Security Engineer position. You will have the opportunity to work remotely in this role, with potential locations near Salt Lake City, Utah; Dallas, Texas; Las Vegas, Nevada; Phoenix, Arizona; or Tucson, Arizona.

Responsibilities:

1. Perform or manage various types of offensive security tests to identify potential risks, including:

• Network, Mobile, and Application Penetration Testing
• Cloud Security Assessments
• Adversarial Simulation / Red Teaming
• Vulnerability Assessments
• Hardware / Device Security assessments

Test and validate security controls protecting production systems.

Investigate and evaluate risks identified from threat intelligence sources.

Analyze and evaluate security vulnerabilities, identifying and classifying possible threats.

Help implement best practices to improve system and application security.

Develop detailed reports to document findings and recommend solutions.

Present findings and recommendations to stakeholders and partners.

Ensure compliance with applicable regulations and industry standards by conducting tests and testing procedures.

Automate repeatable security tests.

Research, recommend, and track security-related technology solutions.

Additional Responsibilities:

1. Plan, scope, coordinate, and execute penetration tests from initiation to closure.
2. Carry out application & network testing of the cloud to expose weaknesses in security.
3. Perform black, white, and gray box testing, including manual and automated testing.
4. Plan, create, and execute penetration attack methods, scripts, and tests according to current policies and processes.
5. Simulate security breaches to test system security.
6. Work with the business to determine test requirements and understand the impact of identified flaws.
7. Create reports and recommendations from findings.
8. Collaborate with other teams to advise on methods to mitigate or lower security risks.

Experience and Qualifications:

• Formal training and certifications in cybersecurity engineering concepts.
• At least 2 years of hands-on experience conducting manual penetration testing and vulnerability assessments, including network and application testing, using various testing techniques.
• Strong knowledge of cybersecurity practices, risk management, incident response, and vulnerability management.
• Experience working in a cloud environment (AWS, GCP, Azure).
• Proficiency in programming languages such as Python, Bash, Java, C++, or PowerShell.
• Understanding of the Software Development Life Cycle and infrastructure/cloud architecture security testing approaches.
• Ability to conduct and lead security assessments independently.
• Excellent communication skills to convey technical information to diverse audiences.

Certifications:

• OSCP, C|EH, GPEN, or CEPT preferred.

Snell & Wilmer offers a competitive, performance-based compensation package along with comprehensive benefits including medical, dental, vision, disability, life insurance, 401K/profit sharing, paid holidays, tuition reimbursement, and paid time off. We value Diversity, Equity, and Inclusion, and are an Equal Employment Opportunity employer.