Penetration Tester - SynerComm, Inc. Milwaukee, WI, USA Bookmark Share Print 374 1 13

Listing Description

SynerComm is seeking full-time local (SE Wisconsin) and remote security professionals to join our growing team. Our AssureIT team has built a tremendous reputation for providing industry leading consulting and professional services. The demand for our services continues to grow and we're looking for the right people to join us in making a difference in our industry.

Traits of the ideal candidate include:

• OSCP and CISSP certifications

• Understanding of OWASP Top 10 categories and vulnerability testing

• Experience in mobile application security and testing

• Experience with evasion techniques to bypass firewalls, intrusion detection and anti-malware

• Experience writing vulnerability exploits

• Application development background and security knowledge – example of languages include C, C#, C++, Java, J2EE

• Script development (PowerShell, Python, Perl, Ruby, etc.)

• Vulnerability and threat management experience

• Experience with various security tools and products (Burp, Metasploit, WebInspect, Core Impact, etc.)

• Good understanding of the components of a secure DLC/SDLC

• Vulnerability analysis and application reversing skills

• Understanding of cryptography principles

• Digital forensics and incident response

• Physical securityWork collaboratively and independently with teammates to provide professional services to our clients

Perform application and infrastructure penetration tests, as well as physical security review and social engineering tests for our global clients

Perform security reviews of application designs, source code and deployments as required, covering all types of applications (web application, web services, mobile applications, thick client applications, SaaS)

Participate in Security Assessments of networks, systems and applications

Provide professionally written technical reports of vulnerabilities, findings and mitigation solutions to clients

Work on improvements for provided security services, including the continuous enhancement of existing methodologies, tools and reports