Security Vulnerability and Penetration Testing Engineer

Baker McKenzie; Tampa (FL); On-site; USD 90,000 - 120,000; Full time

Job summary

A leading law practice in Tampa is seeking a Security Vulnerability and Penetration Testing Engineer to oversee assessment activities protecting their information systems. The ideal candidate will have a strong background in VAPT, hold CISSP and OSCP certifications, and possess excellent communication skills to convey complex concepts. This full-time position offers opportunities for travel and the chance to work in a dynamic environment.

Qualifications

• CISSP certification required.
• Offensive Security OSCP certification required.
• Strong understanding of VAPT and risk management.

Responsibilities

• Perform security penetration testing of the Firm’s systems.
• Serve as a Subject Matter Expert for VAPT.
• Provide technical assessment reports with practical recommendations.

Skills

Vulnerability Assessment and Penetration Testing

CISSP

Offensive Security OSCP

Experience with automated VAPT tools

Mobile platform security technology

Strong written and oral communication skills

Education

Bachelor's degree in Computer Science or equivalent experience

Tools

Nessus

Burp Suite

Metasploit

Job description

Overview

The Security Vulnerability and Penetration Testing Engineer will oversee and serve as a technical resource for all assessment activities related to the security posture of existing and proposed firm systems, platforms, and processes to protect and continually improve the confidentiality, integrity, and availability of information systems per the firm\'s business objectives, regulatory requirements, and strategic goals.

Responsibilities

• Perform security penetration testing of the Firm’s systems, platforms, and applications
• Serve as a Subject Matter Expert (SME) for the VAPT function
• Serve as the system owner for common VAPT toolsets, platforms, and processes
• Provide technical assessment reports that are easily understandable by the target audience and include practical and reasonable recommendations based upon sound risk management principles

Qualifications and Skills

• A Computer Science bachelor’s degree or substantially equivalent experience
• CISSP is required
• GIAC GPEN or GWAPT is preferred
• Offensive Security OSCP is required
• Commanding knowledge of VAPT concepts and best practices, including the requirements for WhiteHat/ethical hacking
• Expert understanding of the difference between a vulnerability assessment and a penetration test in the context of assessment scope, objectives, and deliverables
• Extensive experience with common automated VAPT tools such as Nessus, Appscan, Burp Suite, Nipper, and Trustwave
• Expert in common attack tools and frameworks such as Wireshark, Kali, Metasploit, etc.
• Expert in mobile platform security technology, including vulnerability identification and exploitation tools, as well as mobile platform security best practices, frameworks, etc.
• Understand VAPT in the context of risk management and organizational priorities
• Passionate in the practice and pursuit of VAPT excellence
• Able to validate the presence of identified vulnerabilities with accuracy
• Authoritative mastery of OWASP, CVE, general security controls, and other foundational topics, such as the latest application and operating system exploits
• Expert knowledge of common scripting and programming languages is advantageous
• Ongoing commitment to understanding the threat landscape and common adversary motivations/practices. Ability to quickly adapt practices to evolving circumstances
• Able to maintain critical thinking and composure under pressure
• Strong written and oral communication skills. Ability to convey complex concepts to non-technical constituents. Proficiency in oral and written English
• Capable of assisting with the preparation of internal training materials and documentation

Location

Belfast, Manila, or Tampa Centers, or the Chicago office

Reports to

Director, Security Engineering

Travel requirements

Ad hoc travel will be required.

Position details

• Position Type: Center
• Development Framework: Business Support

Seniority level

• Associate

Employment type

• Full-time

Job function

• Information Technology

Industries

• Law Practice