Penetration Test Engineer - Remote

March 13

Apply Now

Receive Emails with Similar Jobs

CrowdStrike

WebsiteLinkedInAll Job Openings

CrowdStrike is a cybersecurity company that provides cloud-based security services to stop breaches. It is recognized as a leader in endpoint protection, identity and cloud security, and managed detection and response. CrowdStrike's platform, Falcon, integrates artificial intelligence to offer real-time visibility, detection, and protection against sophisticated cyber threats. The company is lauded for its effectiveness in securing networks and data, making it a trusted partner for businesses worldwide.

Next-Generation Endpoint Protection • Endpoint Detection and Response • Next Generation Anti-Virus • Managed Threat Hunting • Incident Response

5001 - 10000 employees

Founded 2011

🔒 Cybersecurity

☁️ SaaS

🤖 Artificial Intelligence

📋 Description

• This position is responsible for developmental and operational penetration testing for our product and all our online properties. • This position requires someone with expertise in manual and automated web application penetration testing with the knowledge needed to breach security defenses. • The ideal candidate will have at least two years of experience performing penetration tests using a mix of commercially available, open source, and personally built tools. • A solid understanding of network protocols, server and web application weaknesses is also needed. • The successful candidate will also have good communication skills and will provide a high level of security expertise to the company while working in a complex distributed environment. • Perform comprehensive penetration testing assessments across the organization. • Manage the entire lifecycle of penetration testing findings from discovery, triage, advising, remediation, and validation. • Work with various different business units to perform penetration testing assessments on systems or applications before go live rollouts. • Examine systems and applications to assess the current security posture. • Manage penetration testing related tickets to ensure issues are remediated within proper timelines. • Advocate for security best practices across the organization.

🎯 Requirements

• Advanced knowledge of server and client operating systems. • Extensive computer skills and an understanding of networking, cryptography, web applications, databases, and wireless technologies. • Ability to prioritize impactful findings and drive these items to remediation. • Experience working with Mac, Windows, Linux and/or other Unix-like variants. • Extensive understanding of TCP, UDP, HTTP, IP and other network protocols. • A detailed understanding of how to triage vulnerabilities using CVSS calculators and the ability to validate security related findings. • Possess the ability to work independently. • Proactive go-getter attitude to solve challenging problems. • Stays up to date with current vulnerabilities and vulnerability related news in various industries. • Ability to automate and script tasks using your preferred language (e.g. GoLang, Python, Ruby, Perl, BASH). • The ability to work remotely with teammates across the organization and maintain healthy working relationships. • Bonus Points: • Familiarity with the OWASP Top 10 list • Experience working with cloud technologies (AWS, GCP, Azure, Kubernetes or docker), infrastructure as code tools (e.g., Terraform, Ansible), and/or container technologies • Familiarity with common threat actor tools, techniques, and procedures (TTPs), attack kill chains, and security control evasion. • Experience executing effective email phishing campaigns with custom domains, website hosting, payload delivery, credential harvesting, and additional components in this area. • Ability to utilize and write scripts against common web APIs (REST, SOAP). • Knowledge of cloud platforms and highly concurrent systems. • Knowledge of build pipelines and CI tools. • You’re a clear thinker and efficient communicator (i.e. written and verbal). • Ability to create elegant looking slide decks. • Technical security certifications or academic background are a plus. • CVEs or bug bounty rewards. • Documented CTF write-ups or victories. • Hacker or professional group affiliations.

🏖️ Benefits

• Remote-friendly and flexible work culture • Market leader in compensation and equity awards • Comprehensive physical and mental wellness programs • Competitive vacation and holidays for recharge • Paid parental and adoption leaves • Professional development opportunities for all employees regardless of level or role • Employee Resource Groups, geographic neighbourhood groups and volunteer opportunities to build connections • Vibrant office culture with world class amenities • Great Place to Work Certified™ across the globe