Offensive Security Professional

The Offensive Security Professional is responsible for conducting vulnerability assessments and penetration tests on cloud services, applications, and websites to discover security issues and report them to internal technology teams. The ideal candidate will have 3+ years of experience in a penetration testing or similar offensive security role, with a strong understanding of cloud technologies and security.

Essential Duties and Responsibilities:

• Plan of penetration test plans and their execution against Amazon's services, applications, and websites.
• Utilize a variety of penetration testing tools and techniques to identify security vulnerabilities.
• Document and report findings to internal technology teams and/or clients in a clear and concise manner.
• Work with development and security teams to remediate vulnerabilities.
• Stay up-to-date on the latest security threats and vulnerabilities.
• Assist the blue team with the recommendation and implementation of controls.

Qualifications:

• Bachelor's degree in Computer Science, a related technical field, or equivalent practical experience.
• 3+ years of experience in a penetration testing or similar offensive security role.
• Strong understanding of AWS cloud technologies and security.
• Understanding of OWASP Top 10 Security Risks and their remediation.
• Experience with a variety of penetration testing tools and techniques.
• Experience with mobile application penetration testing.
• Excellent communication and documentation skills.
• Advocate security and secure practices throughout the organization and its clients.
• Ability to work independently and as part of a team.

Preferred Qualifications:

• Perform technical security assessments, code audits, and design reviews.
• Experience with threat modeling, design review, or other threat analysis techniques.
• Experience with security automation tools.
• Experience with cloud security frameworks such as CIS Benchmarks and SOC 2 Type II.
• Experience with threat hunting and SOC.
• Track record of vulnerabilities uncovered in major products.