Senior Security Engineer

Position Summary

The Senior Security Engineer role offers an exciting opportunity to work on a range of high-profile client engagements while continuing to deepen their skills and broaden their impact on the security community as a whole. They will work with team members to lead penetration and vulnerability management engagements, assessing the security and compliance of various types of client applications and supporting infrastructure against regulatory and industry requirements and standards, as well as security best practice frameworks.

The ideal candidate is a technical leader with broad and deep technical skills, meeting the objectives of their engagements, collaborating with clients, and providing subject matter expertise across one or more technical domains. The Senior Security Engineer is a trusted advisor to clients, and through objective penetration testing and results reporting, supports the client in making well-informed, risk-based decisions to improve overall security posture.

Responsibilities

Conduct network, web application and other types of penetration testing, code reviews, social engineering, red team engagements, and physical security assessments.
Conduct security assessments on a wide variety of technologies and implementations.
Simulate sophisticated cyberattacks for clients worldwide.
Being part of a global team of penetration testers, sharing knowledge and methodologies.
Running and conducting penetration test projects with minimal oversight.
Perform Vulnerability Assessments, Penetration Test, Ethical Hacking, Firewall Assessments, Social Engineering engagements.
Manage priorities and tasks to achieve utilization targets.
Advise clients on technical security or compliance activities.
Write comprehensive reports including assessment-based findings, outcomes, and propositions for further system security enhancement.
Participate in the development and implementation of the enterprise security architecture and supporting security standards to ensure compliance with corporate policies, and relevant legislative and regulatory requirements.
Either handle or escalate client and project-related issues in a timely manner.
Collaborates with the service delivery team and quality assurance to drive customer satisfaction.
Other duties, as assigned.

Experience

5+ years of professional experience in a penetration testing role.
Ensures quality reports and services are delivered efficiently and on time.
Should be well versed in all aspects of penetration testing, with an emphasis on web applications, internal networks, and external networks.
Problem solving skills and the ability to work under pressure in a fast-paced environment.
Experience with security hardening techniques and policy development, particularly regarding secure software development methodologies and process
In depth knowledge of Windows/Linux/UNIX operating systems
Demonstrates advanced knowledge of the principles, best practices architecture and design approaches to applicable capabilities, services, and standard controls.
Experience with one or more IT security compliance frameworks (PCI, NIST, ISO, CIS)
Hands on experience in security systems, including firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, content filtering, etc.
Operates with professionalism both internally and with clients.

Education & Certifications

A university degree in Computer Science, Engineering, or related work experience.
Offensive Security Certifications preferred, such as OSCP, OSWE, OSEP, OSCE
Certified Ethical Hacker (CEH)
Vulnerability Management/Assessment tools
Penetration Testing tools