Penetration Tester — Lead Security Reviews & Optimization

Energy Innovation Corp; Lowell (MA); On-site; USD 58,000 - 92,000; Full time

Benefits offered by this job

Premium healthcare

Home-office allowance

Job summary

DigitalBridge is hiring a Penetration Tester to join our Lowell, MA office and accelerate our product roadmap. You will lead OWASP Top 10 design reviews and mentor junior staff while profiling legacy code to reduce technical debt.

We're building security-first software for a distributed team, offering a generous home-office allowance and comprehensive healthcare. Candidates should bring hands-on experience, strong problem solving, and the ability to communicate security concepts clearly.

Qualifications

• CISSP familiarity or related security framework.
• Ability to present findings clearly to junior leadership.
• Strong understanding of OAuth 2.0 and security best practices.
• Portfolio or work samples demonstrating security expertise.
• Demonstrated critical thinking and independent judgment.

Responsibilities

• Lead OWASP Top 10 design reviews to catch mistakes before production.
• Profile and refactor legacy code to reduce technical debt over time.
• Profile PCI DSS memory use and identify leaks affecting nodes.
• Reduce latency by optimizing the critical path for users.
• Lead design reviews for junior technology initiatives.
• Sketch Kali Linux sequence diagrams to illustrate data flow.
• Mentor junior hires on PCI DSS integration.
• Decompose the system into IDS/IPS services for deployment.

Skills

CISSP familiarity

Leadership presentation

OAuth 2.0 fundamentals

Portfolio/work samples

Critical thinking

Job description

DigitalBridge is hiring a Penetration Tester to join our Lowell, MA office and accelerate our product roadmap. You will lead OWASP Top 10 design reviews and mentor junior staff while profiling legacy code to reduce technical debt.

We're building security-first software for a distributed team, offering a generous home-office allowance and comprehensive healthcare. Candidates should bring hands-on experience, strong problem solving, and the ability to communicate security concepts clearly.