Arrow Search Partners · 4 days ago

Security Analyst/Penetration Tester

New York, NY

Full-time

Onsite

Senior Level

$140K/yr - $180K/yr

3+ years exp

Wonder how qualified you are to the job?

Maximize your interview chances

Human ResourcesRecruiting

Actively Hiring

Insider Connection @Arrow Search Partners

Discover valuable connections within the company who might provide insights and potential referrals, giving your job application an inside edge.

Responsibilities

Manage and execute security assessments for multiple projects simultaneously and ensure project timelines are met

Work with client resources on vulnerability management engagements ranging from vulnerability scanning to remediation consulting

Effectively communicate vulnerability findings and remediation strategy to client stakeholders including client leadership and technical security team resources

Manage consultants, train staff and external clients as necessary

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Penetration TestingVulnerability TestingOWASP StandardsSecurity Testing ToolsCloud Security PracticesRed Team ExercisesSecure Code AnalysisCryptographyNetwork SecurityWeb Application Security

Required

3 – 10 years’ experience in Cyber Security focused role

Expert penetration testing capabilities

Experience performing automated and manual hands-on vulnerability testing, identifying security risks within target systems and developing key recommendations to remediate identified vulnerabilities

Thorough understanding of open security testing standards and projects such as OWASP

Experience with testing tool set solutions, such as Qualys, Tenable, Rapid7, Metasploit, Burp Suite, Kali Linux, etc.

Knowledge of core cloud service provider (AWS, Azure, GCP) security practices and experience using security testing tools against resources in these cloud environments

Experience with covert computer network exploitation and red team exercises

Experience with enterprise secure code analysis solutions such as Veracode, CheckMarkx, AppScan source, etc.

Core understanding of cryptography and key management concepts

Experience with key network security components, including firewalls, intrusion detection systems, anti-virus/anti-malware solutions, authentication systems, logging management systems, content filtering, etc.

Deep understanding of key web application security vulnerabilities, such as Cross-Site Scripting (XSS) and Server-Side Request Forgery (SSRF)