Lead Penetration Tester - VantagePoint Security, Inc. Austin, TX, USA Bookmark Share Print 693 1 10

Listing Description

VantagePoint is an Austin, Texas based security consulting services company. We are a small team of security ninjas who are extremely focused on client success and helping our customers reach their security and compliance goals. In this role you will be our penetration testing expert and will lead all testing efforts, including helping us design our overall pen testing offering. As part of this role we will also strongly encourage you to perform research on your security areas of interest and engage the security commnity through blogging, conferences, talks, white papers, and meet ups. We look forward to meeting you!

Must Have Skills/Traits:

* Extreme focus on client satisfaction and assisting our customers in achieving their security/testing goals

* Self-driven and motivated

* Loves working in a dynamic environment

* Takes ownership of responsibilities and is dependable

* Can work well on a team

* Fantastic written and verbal communicator (must have report writing examples)

* Ability to quick understand large systems and assess weaknesses

* 3+ years of relevant security consulting or industry experience

* Familiarization with XSS, filter bypassing, SQL Injection, and all other application layer attacks.

* Familiar with the concepts of networking and common network defenses: layers, routing, sub-netting, firewalls, IPS, WAF, etc.

* Familiarity with common reconnaissance, exploitation, and post exploitation frameworks

* Familiarity with assessment tools, such as scanners, administrative utilities, local proxies, debuggers, fuzzers, etc.

* Ability to perform targeted penetration tests and exploitations without the use of automated tools

* Strong familiarity with OWASP Top 10

* Reverse engineering skills

* Ability to code

Preferred Skills/Trais:

* OSCP or OSCE certification.

* Network+ or Security+ certification

* 3+ years experience and working knowledge of Window and Unix / LinuxPerforming network-based penetration testing for our customers

Performing penetration testing on web applications (internal and external)

Performing red team exercises

Performing assessments of wireless networks

Performing assessments of physical security using social engineering

Writing clear, concise, effective deliverable reports for our customers

Advising clients on security best practices including: application design, infrastructure architecture design, and other considerations

Automating the penetration testing process

Performing research and presenting at conferences

Blogging on penetration testing best practices