189 applicants

Company

HealthEquity · 14 hours ago

Principal Penetration Tester

United States

Full-time

Remote

Lead/Staff

$135K/yr - $180K/yr

Maximize your interview chances

Financial ServicesHealth Care

Growth Opportunities

H1B Sponsor Likely

Insider Connection @HealthEquity

Discover valuable connections within the company who might provide insights and potential referrals.
Get 3x more responses when you reach out via email instead of LinkedIn.

Responsibilities

Lead Penetration Testing: Perform thorough penetration testing on applications, networks, systems, and infrastructure. Simulate real-world attacks to identify vulnerabilities and risks.

Security Assessments: Conduct risk assessments and vulnerability analysis, providing detailed reports that outline findings, severity, and remediation recommendations.

Red Team Engagements: Lead and participate in advanced Red Team exercises to test an organization’s security readiness against sophisticated attacks.

Tool Development: Build, modify, and customize tools/scripts for specific penetration testing scenarios.

Reporting and Documentation: Generate comprehensive reports that explain the vulnerabilities found, their potential impact, and recommended remediation strategies.

Collaboration: Work closely with IT, development, and operations teams to communicate vulnerabilities and guide remediation efforts.

Research and Development: Stay up-to-date on the latest threats, vulnerabilities, and security technologies. Continuously research new attack techniques and defense strategies.

Mentorship: Mentor junior team members, providing guidance and sharing knowledge of best practices and cutting-edge techniques. Continue to formally document HealthEquity’s layered security model and build out current and future state security models.

Foster a working environment that is conducive to two-way communication, teamwork and learning.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Penetration TestingSaaS ApplicationsWeb Application SecurityBurp SuiteMetasploitOWASP Top 10Exploit Chaining

Required

Proven experience in penetration testing, particularly on SaaS applications.

Familiarity with solutions like Burp Suite, Metasploit, and OWASP Top 10.

Strong understanding of web application security and common vulnerabilities.

Ability to think like an attacker and approach testing with a black box mentality.

Ability to chain multiple exploits together to demonstrate complex attack scenarios.

Excellent problem-solving skills and attention to detail.

Strong communication skills, with the ability to explain complex security issues to non-technical stakeholders.

Company

HealthEquity

Glassdoor

4.1

HealthEquity connects health and wealth by administering Health Savings Accounts (HSAs) and other consumer-directed benefits.

Founded in 2002

Draper, Utah, USA

1,001-5,000 employees

http://www.healthequity.com

H1B Sponsorship

HealthEquity has a track record of offering H1B sponsorships. Please note that this does not guarantee sponsorship for this specific role. Below presents additional info for your reference. (Data Powered by US Department of Labor)

Distribution of Different Job Fields Receiving Sponsorship

Represents job field similar to this job

Trends of Total Sponsorships

2023 (27)

2022 (7)

2021 (1)

2020 (2)