Summary
What you’ll impact
The Senior Application Security Pentester/Analyst at the organization leads and conducts advanced security assessments across a variety of technologies while mentoring junior staff and providing consultative guidance to clients. The role also involves research, whitepaper creation, and participation in initiatives like the IoT Village.
Responsibilities
What you'll do
- Interface directly as a project lead, senior analyst, or in a scoping capacity
- Mentor junior analysts throughout client assessments, research projects, findings reviews, and general professional and technical development
- Perform hands-on security assessments and reviews on various pieces of technology including but not limited to:
- ---Web apps and APIs
- ---Mobile apps
- ---Networks
- ---Cloud architecture and configuration
- ---Source code analysis
- ---Hardware and firmware
- Create comprehensive assessment reports that clearly identify vulnerabilities, how they impact our client’s digital assets, and remediation strategies
- Provide consultative advice to ISE’s clients regarding best practices, design guidance, new threats, policies and processes, etc. Basically: be their genius friend who helps solve problems.
- Perform research and develop whitepapers/presentations/etc. regarding relevant research, security topics, tools and techniques driven by your areas of interest and expertise
- Opportunity to participate in IoT Village
Requirements
What you’ll bring
- 6+ years in security consulting with a focus on application/software
- Experience with programming and developing exploits
- Familiarity with Unix command line tools and working in CLI environments
- Skillset in the following:
- ---Web and desktop application security (Advanced)
- ---Cloud security and architecture (Advanced)
- ---Mobile application security (Basic)
- Background in the following:
- ---Software vulnerability analysis, code analysis, and fuzzing
- ---Reverse engineering through static and dynamic analysis
- ---Analyzing cryptographic workflows
- ---Analyzing network traffic
- ---Experience interacting with clients in a consultative environment
- Strong technical writing and oral communication skills
- Public speaking experience
- Desire to make things better: help our clients secure their products, help your colleagues grow and learn, self-motivated and always seeking improvement