Senior Penetration Testing Analyst
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior penetration tester conducting application or network security assessments for Sophos, a cybersecurity provider. Leading client readiness, exploitation testing, reporting, and remediation discussions.
Responsibilities:
- Coordinate activities, documentation, readiness schedules, and information between business, clients, and project teams
- Act as the point of contact for testing readiness and communicate readiness status
- Use project management tools to monitor tasks, responsible parties, timelines, and status
- Report and escalate issues to management
- Take ownership of new and different requests and identify opportunities to add value
- Conduct application security assessments covering web, mobile, and API security, or network penetration testing assessments
- Use off-the-shelf and internally developed exploitation tools for manual testing and advanced attacks
- Produce and deliver professional security assessment reports containing vulnerability and exploit information
- Lead client conference calls covering readiness, troubleshooting, project kick-off, high/critical finding notifications, and close-out reviews
- Research new threats, vulnerabilities, and exploits
- Conduct exploitation testing and document findings for client remediation
- Work independently and as part of a larger team
Requirements:
- 5+ years of experience in Information Security
- Minimum of 2 years of experience with penetration testing
- Minimum of 2 years of experience with at least one of: Nmap, Metasploit, Kali Linux, Burp Suite
- Excellent client-facing and internal written and verbal communication skills
- Ability to learn quickly and thrive in a high-energy team environment
- Professional, “get it done” attitude, strong work ethic, and team-player approach
- Solid organizational skills, attention to detail, and multitasking skills
- Experience with NMap scanning
- Understanding of web application authentication methods
- Understanding of APIs and API authentication methods
- Understanding of SOAPUI/Restlet and other API testing tools
- Experience with Linux
- Understanding of networking appliances, including routers, load balancers, firewalls, WAF, IDS/IPS, and web content filters/proxies
- Understanding of tools for validating network access with a penetration testing platform
- Applicants must have legal authorization to work in India without employer sponsorship
Benefits:
- Remote-first working model
- Employee-led diversity and inclusion networks
- Annual charity and fundraising initiatives
- Volunteer days
- Global employee sustainability initiatives
- Global fitness and trivia competitions
- Global wellbeing days
- Monthly wellbeing webinars and training
- Recruitment and selection process adjustments for applicants with disabilities or other needs
Similar Jobs
SAP Security Consultant – Contract
SAP Security Consultant designing and delivering ECC, S/4HANA, Fiori, BTP, and GRC security solutions. Supporting SAP implementations and operations for leading Australian enterprises.
Senior Security Engineer
Senior Security Engineer hardening beverage-industry technology platforms across VIP’s U.S. operations. Leading segmentation, detection, vulnerability, identity, and incident-response engineering.
Staff Security Engineer – AppSec
Arquiteto AppSec definindo padrões e controles para proteger aplicações, APIs e sistemas com LLMs da Stone, empresa brasileira de tecnologia e serviços financeiros.
CISO/VP, Data Security
CISO/VP Data Security owning cybersecurity, controls, vendor risk, and regulatory readiness. Protecting a fast-growing fintech and cryptocurrency company while advising leadership and regulators.
Senior Security Engineer
Security Engineer securing Pair Team’s AI-enabled healthcare and Medicaid platform. Building cloud, application, AI, and compliance controls for whole-person care.
System Director – Facilities, Security, Asset Management
System Director overseeing facilities, safety, security, assets, vendors, and regulatory compliance for Emerus small-format hospitals. Leading enterprise operations, emergency preparedness, and recall management.
IT Security Consultant
IT Security Consultant advising Evonik, a global specialty chemicals company, on information security, risk management, and M&A security assessments. Home-office role in Brazil.
Information Security Expert
Information Security Expert strengthening CREALOGIX’s digital banking and financial technology security. Developing ISMS, managing audits, assessing risks, and advising technical and business stakeholders.
Information Security Officer
Information Security Officer leading Vektor Group’s BSI-based ISMS, ISO 27001 certification, and NIS-2 compliance. Securing AI platforms built for defence and government customers.
IT Security Architect – IAM, On-Premises
IT Security Architect defining IAM, Active Directory, Entra ID, and on-prem security standards. Advising technical teams at sports nutrition company The Quality Group.
IT Security Architect – IAM, On-Premises
IT-Security-Architekt für IAM, Active Directory und On-Prem-Infrastruktur bei Sporternährungsanbieter The Quality Group. Entwicklung von Sicherheitsstandards und Beratung technischer Teams.
Cybersecurity Consultant
Consultant cybersécurité chez Wavestone, cabinet international accompagnant les transformations stratégiques. Intervention sur gouvernance, cloud, audits, risques et sécurité des systèmes.
Founding Information Security Lead
Founding Information Security Lead owning security, compliance, and IT operations for Flodesk’s email marketing platform. Building SOC 2, ISO 27001, and CCPA readiness.
Cybersecurity Architect
Cybersecurity Architect leading RMF, risk mitigation, and ATO efforts for DoD Zero Trust systems. GDIT delivers technology and mission services to U.S. government, defense, and intelligence agencies.
Senior Security Agent / AI Red Team Engineer
AI red-team engineer attacking PGTEK agents and converting findings into durable controls. Supporting secure Federal and DoD systems through threat modeling, remediation, and authorization activities.
Software Security Lead
Software Security Lead securing Cisco’s enterprise IT and Operations platforms across applications, cloud, identity, data, and AI. Leading threat modeling, architecture reviews, risk remediation, and security metrics.
Staff Security Researcher
Staff Security Researcher conducting vulnerability research and penetration testing for GitLab’s AI-powered DevSecOps platform. Developing attack methodologies, tooling, and security improvements.
Software Security Lead
Cisco software security lead securing AI-enabled enterprise platforms and applications. Leading threat modeling, architecture reviews, risk remediation, and portfolio security metrics.
Principal Security Researcher
Principal Security Researcher securing GitLab’s AI-powered DevSecOps platform. Leading vulnerability research, AI attack analysis, penetration testing, and remediation across GitLab’s codebase.
Application Security Remediation Engineer
Application Security Remediation Engineer remediating Wiz findings across enterprise applications for Arctiq’s technology services clients. Securing code, dependencies, containers, and DevSecOps delivery pipelines.