Web App Security Specialist, Red Team, Mandiant

Google Inc.; Missouri; Remote; USD 90,000 - 130,000; Full time

Job summary

A leading tech company is seeking a Web App Security Specialist to conduct offensive cyber security engagements. The ideal candidate will have experience in penetration testing and strong knowledge in various programming languages. Responsibilities include advising clients on security best practices and collaborating with internal teams. Commitment to diversity and equal opportunity in the workplace is essential.

Qualifications

• 3 years of experience with penetration testing and red teaming.
• Knowledge of programming languages such as C#, Python, Java.
• Certifications related to offensive security preferred.

Responsibilities

• Conduct offensive application cyber security engagements.
• Address client concerns and drive them to closure.
• Advise clients on security best practices.

Skills

Penetration testing

Red teaming

Communication

Collaboration

Education

Bachelor's degree in Computer Science or related field

Tools

Static and dynamic application testing tools

Job description

Web App Security Specialist, Red Team, Mandiant

Experience driving progress, solving problems, and mentoring more junior team members; deeper expertise and applied knowledge within relevant area.

Remote location: Missouri, USA.

Responsibilities

• Conduct offensive application cyber security engagements of a varied nature.
• Address client concerns, issues, or escalations, and drive them to closure to maintain engagement value.
• Advise clients on security best practices for remediating discovered issues.
• Collaborate with internal teams to expand capabilities and deliver greater value to clients.
• Research and learn continuously to expand knowledge and share insights with the team.

Requirements

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
• 3 years of experience with penetration testing and red teaming functions, including network, web application, mobile, cloud, social engineering, scripting, or tool development.

Preferred qualifications:

• Certifications related to offensive security including OSWE, GWAPT, GMOB, OSCE, OSEP, OSEE, OSCP, or equivalent mobile/web certifications.
• Experience in one or more of the following such as network protocols, enterprise application design and architecture, mobile security, project management, “OWASP Top 10”, source code review, and reverse engineering.
• Experience working in offensive security consulting.
• Experience in software development and understanding of underlying programming languages such as C#, Python, ASP, .NET, ObjectiveC, Go, Java (J2EE) or similar.
• Knowledge of tools used for both static and dynamic application testing.
• Excellent communication, collaboration, and public speaking skills.

Google is proud to be an equal opportunity and affirmative action employer. We are committed to building a workforce that is representative of the users we serve, creating a culture of belonging, and providing an equal employment opportunity regardless of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), expecting or parents-to-be, criminal histories consistent with legal requirements, or any other basis protected by law.