Pen Tester

Bridge Technologies and Solutions; San Francisco (CA); On-site; USD 100,000 - 130,000; Full time

Job summary

A leading technology firm in San Francisco is seeking a skilled security professional to conduct vulnerability testing, develop application security practices, and enforce secure coding standards. You will work closely with developers to implement security tools and provide training on best practices. Ideal candidates will have hands-on experience with various security tools and programming languages. This position offers a chance to make a significant impact on application security within the development lifecycle.

Qualifications

• Experience with architecture & design reviews.
• Good at assessing security policies and practices.
• Hands-on experience in Ethical hacking.

Responsibilities

• Conduct black box and white box vulnerability testing.
• Setup threat models and protocol fuzzers.
• Develop and support security tools and services.

Skills

Vulnerability testing

Threat modeling

Secure code review

Application security

Ethical hacking

Java

Python

C/C++

Ruby

Perl

Node.js

Understanding of malware

Tools

CheckMarx

Coverity

IBM AppScan Enterprise

Nessus

Qualys

Fortify

Veracode

Burp Suite

MS Threat Modeler

Job description

• Conduct black box, white box vulnerability and penetration testing
• Setup threat models and protocol fuzzers
• Experience in architecture & design reviews with developers at all levels
• Develop, implement & support security tools and services
• Good at assessment of security policies, best practices and recommendations
• Experience with vulnerability tracking methods and tools
• Conduct secure code review trainings to developers
• Understanding of OWASP, SANS, CWE standards,
• Experience with enforcing application security in the SDLC of web applications
• Develop Application Security practice
• Experience in Ethical hacking domain
• Hands‑on experience on Java, Python, C/C++, Ruby, Perl, Node.js, DoJo and Angular.js
• Experience with tools like CheckMarx, Coverity, IBM AppScan Enterprise, Nessus, Qualys, GFI, Client Fortify, Veracode, Burp Suite, MS Threat Modeler etc.
• Good understanding of malware

Additional Information

All your information will be kept confidential according to EEO guidelines.