Senior Cyber Penetration Tester & Engineer jobs in United States
cer-icon
Apply on Employer Site
company-logo

UNFI · 1 month ago

Senior Cyber Penetration Tester & Engineer

UNFI is looking for an experienced technical Cybersecurity Penetration Tester and Engineer Senior to help create a resilient food supply chain. The role focuses on performing threat emulations and identifying cybersecurity issues within the UNFI environment while collaborating with staff from other teams.

Food and BeverageHealth CareHospitalityOrganic Food
check
H1B Sponsor Likelynote

Responsibilities

Perform technical penetration testing of APIs, web applications, networks, cloud services, databases, directory services, and infrastructure. – 75%
Strategic attack simulation by analyzing UNFI’s internal and external attack surface and crafting bespoke penetration strategies. – 10%
Writing comprehensive reports outlining identified vulnerabilities, potential exploitation paths. Provide remediation guidance and recommendations from the assessments and support any security questions from network, system, and/or application owners. – 10%
Assess UNFI’s software development and cloud infrastructure from a security perspective and help drive internal security standards. – 5%

Qualification

Penetration TestingCybersecurity CertificationsAdvanced ScriptingThreat EmulationOSINT TechniquesVulnerability AssessmentsCloud SecurityNetwork SecurityMentoringTechnical Communication

Required

At least 1 industry leading or senior level cybersecurity penetration certification, for example: Offensive Security Certified Professional (OSCP), GIAC Penetration Tester Certification (GPEN), GIAC Web Application Penetration Tester (GWATP), GIAC Cloud Penetration Tester (GCPN) or EC-Council Licensed Penetration Tester (LPT) Master
Active GitHub repository account with examples of security tools, scripts, exploits developed OR evidence of past and current artifacts
8+ years of hands-on cybersecurity experience within IT environments
5+ years of experience performing penetration testing and vulnerability assessments
Advanced penetration testing skills across both tools and scripting abilities
Expertise with the following tools: various C2s, Burp Suite, Nmap, Wireshark, Bloodhound
Expertise with cybersecurity scripting in Python, PowerShell, or Go to manipulate vulnerabilities and demonstrate potential exploits
Ability to employ OSINT techniques to maximize attack vectors, simulating real-world cyber threats
Skills in developing implants and evading common security tools
Ability to critically examine an organization and system using knowledge of tactics, techniques, and procedures associated with malicious insider activity, organized crime groups, and both state and non-state sponsored threat actors
Knowledge of web application and cloud infrastructure best practices and understanding of how to exploit misconfigurations and vulnerabilities
Knowledge of network access, identity and access management, including public key infrastructure and understanding of how to exploit misconfigurations and vulnerabilities
Experience creating rules of engagement, test plans, scripts to aid testing efforts, and technical assessment reports that detail findings and remediation efforts
Ability to translate technical findings into actionable insights
Ability to mentor junior staff and transfer technical knowledge as well as contribute to the team's knowledge sharing

Benefits

Paid Time Off
Sick Time
Paid holidays and parental leave
401K Program
Medical, dental, vision, life, and accidental death/dismemberment insurance
Short-term and long-term disability insurance program
Flexible Spending Account and/or Health Savings Account

Company

UNFI is North America’s Premier Food Wholesaler.

H1B Sponsorship

UNFI has a track record of offering H1B sponsorships. Please note that this does not guarantee sponsorship for this specific role. Below presents additional info for your reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (6)
2024 (2)
2023 (4)
2022 (4)

Funding

Current Stage
Public Company
Total Funding
$507.1M
2024-04-25Post Ipo Debt· $500M
2014-07-15Post Ipo Equity· $7.1M
1996-11-01IPO

Leadership Team

leader-logo
Sandy Douglas
Chief Executive Officer
linkedin
leader-logo
Giorgio Matteo Tarditi
President and CFO
linkedin
Company data provided by crunchbase