Dragos, Inc. · 3 days ago

Senior Pen Tester

United States

Full-time

Remote

Senior Level

$140K/yr - $140K/yr

5+ years exp

Wonder how qualified you are to the job?

Maximize your interview chances

Cyber SecurityNetwork Security

Insider Connection @Dragos, Inc.

Discover valuable connections within the company who might provide insights and potential referrals, giving your job application an inside edge.

Responsibilities

Execute customer engagements performing architecture reviews, vulnerability assessments, and penetration tests in industrial environments. These engagements include various tasks, including reviewing documentation, conducting gap analysis, and actively exploiting customer-owned hardware and software.

Perform Scope of Work (SOW) reviews, Rules of Engagement (ROE) development, and other documentation-related tasks requiring meticulous attention to detail and technical accuracy.

Deliver findings and recommendations documents, including verbal presentations and addressing of customer questions.

Transform insights from customer engagements into research and innovation projects to advance Dragos technology. This involves analyzing packet captures (PCAP) and other data types to create protocol dissectors, characterizations, signatures, and other analytics.

Contribute to the broader community by representing Dragos through outreach efforts such as white papers, webinars, and conference presentations, featuring original content and innovative ideas.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

CybersecurityPenetration TestingThreat EmulationAssessment ToolsPythonC2 PlatformsAnsibleDockerAWSAttack VectorsNetwork Data AnalysisCustomer Relationship ManagementTraining FacilitationProblem-SolvingCommunicationPresentationInterpersonal

Required

Minimum of 5 years of hands-on cybersecurity experience.

Proven ability to perform penetration testing and threat emulation using known/expected tactics employed by nation states and other advanced threat actors.

Extensive hands-on experience with common assessment and pen testing tools including Windows (LOTL), Kali, Python, C2 Platforms, Ansible, Docker, AWS, etc.

Thorough understanding of cyber threats, common attack vectors, exploits, and adversary tactics, techniques, and procedures (TTP’s).

Ability to calculate the operational or safety impact of exploited vulnerabilities and recommend mitigations or controls.

Ability to collect and analyze network data in a cybersecurity context.

Capable of establishing excellent rapport with customers across different levels, from practitioners to senior management, including the ability to facilitate training and present complex information to various audiences.

Willingness to travel up to 30% (on average) for on-site customer engagements.