Penetration Tester

Osec; United States; Remote; USD 90,000 - 130,000; Full time

Benefits offered by this job

Flexible working hours

Competitive health packages

Life insurance

401k plan with company contributions

Maternity and parental leave

On-the-job training opportunities

Paid, flexible vacation

Job summary

OccamSec is seeking a skilled Penetration Tester to join our Assessment Team and contribute to offensive and defensive security projects. You will work with seasoned professionals and report to an Assessment Team Lead.

You will perform security audits across API, mobile, cloud and web applications, draft detailed reports, and provide actionable guidance to clients to reduce risk. Strong communication and cloud security experience are essential.

Qualifications

• Excellent written and oral communication skills.
• 2-3 years of professional penetration testing experience.
• Familiarity with scripting languages such as Python, Perl, Go or Ruby.
• Hands-on experience with server or application technologies.
• Proficient in using penetration tools across API, mobile, cloud and web apps.
• Experience with AWS services (EC2, S3, KMS, RDS) and cloud security best practices.
• Familiarity with network protocols including IP, sub-netting, routing and switching.

Responsibilities

• Conduct security audits, network penetration tests, and web application, API and cloud assessments.
• Draft security assessment reports with findings and evidence walkthroughs.
• Use social engineering to identify security awareness improvements.
• Provide guidance to clients on reducing security risks to networks and products.
• Operate as part of a team on large, complex projects with oversight from senior team members.
• Operate independently on projects within defined skill set, with PM oversight.
• Maintain proficiency in current security tools and skills.

Skills

Communication skills

Team collaboration

Scripting familiarity

Tools

Wireshark

tcpdump

Penetration testing tools

Job description

The Penetration Tester is responsible for working as part of the Assessment Team to conduct and participate in offensive and defensive security projects for OccamSec and its clients. This individual will work as part of a security team and report to an Assessment Team Lead.

Job Responsibilities:

• Conduct security audits, network penetration tests, and web application, API and cloud assessments.


• Draft security assessment reports that outline findings and provide a walkthrough of the assessment performed with evidence provided appropriately.


• Use social engineering to identify improvement for security awareness and education.


• Provide guidance and recommendation to clients on ways to fix or reduce security risks to their networks and products.


• Operate as part of a team on larger, more complex projects with oversight from senior team members.


• Operate independently on projects within defined-skill set, with oversight from a Project Manager.


• Maintain proficiency in current security tools and skills.

Experience:

• Candidates with at least 2-3 years of professional experience are preferred.


• Proficient in working with AWS services like EC2, S3, KMS, RDS, or similar services on Azure & GCP, with a focus on implementing security best practices.


• Skilled in conducting penetration tests for API, Mobile, Cloud, and Web Applications.


• Familiarity with scripting languages such as Python, Perl, Go or Ruby.


• Hands-on experience in building or developing Server or Application Technologies.


• Utilized penetration tools effectively in various scenarios.


• Applied expertise in replicating threat behaviors.


• Proficient in using packet analyzer tools like Wireshark and tcpdump.


• Sound understanding of IP network protocols, sub-netting, routing, switching, etc.


• Extensive background in penetrating and exploiting secure networks and systems, staying updated with the latest security software packages, protocols, and computer technologies.


• Excellent written and oral communication skills, with a proven track record in generating comprehensive reports and assessments.

Benefits

• Flexible working hours;


• Competitive health packages;


• Life insurance;


• 401k plan with company contributions


• Maternity and parental leave;


• On-the-job training opportunities; and


• Paid, flexible vacation.