Required Skills
- 2+ year of Pen testing
- OSCP cert
- CISP cert
- They don't want network pen testing but web app, cloud, or mobile pen testing
- Need good verbal and written comm
Huge scope for growth and they invest in training
Description
The Security Vulnerability and Penetration Testing Engineer will oversee and serve as a technical resource for all assessment activities related to the security posture of existing and proposed firm systems, platforms, and processes to protect and continually improve the confidentiality, integrity, and availability of information systems per the firm's business objectives, regulatory requirements, and strategic goals.
Main responsibilities :
Perform security penetration testing of the Firm's systems, platforms, and applicationsServe as a Subject Matter Expert (SME) for the VAPT functionServe as the system owner for common VAPT toolsets, platforms, and processesProvide technical assessment reports that are easily understandable by the target audience and include practical and reasonable recommendations based upon sound risk management principlesSkills and experience :
A Computer Science bachelor's degree or substantially equivalent experienceCISSP is requiredGIAC GPEN or GWAPT is preferredOffensive Security OSCP is requiredCommanding knowledge of VAPT concepts and best practices, including the requirements for WhiteHat / ethical hackingExpert understanding of the difference between a vulnerability assessment and a penetration test in the context of assessment scope, objectives, and deliverablesExtensive experience with common automated VAPT tools such as Nessus, Appscan, Burp Suite, Nipper, and TrustwaveExpert in common attack tools and frameworks such as Wireshark, Kali, Metasploit, etc.Expert in mobile platform security technology, including vulnerability identification and exploitation tools, as well as mobile platform security best practices, frameworks, etc.Understand VAPT in the context of risk management and organizational prioritiesPassionate in the practice and pursuit of VAPT excellenceAble to validate the presence of identified vulnerabilities with accuracyMaster in common application platforms and technologies to effectively understand and evaluate complex application assessments via the use of manual techniques and simple tools such as proxies and browser pluginsAuthoritative mastery of OWASP, CVE, general security controls, and other foundational topics, such as the latest application and operating system exploitsExpert knowledge of common scripting and programming languages is advantageous.Ongoing commitment to understanding the threat landscape and common adversary motivations / practices. Ability to quickly adapt practices to evolving circumstancesAble to maintain critical thinking and composure under pressureStrong written and oral communication skills. Ability to convey complex concepts to non-technical constituents. Proficiency in oral and written EnglishCapable of assisting with the preparation of internal training materials and documentationLocation : Belfast, Manila, or Tampa Centers, or the Chicago office
Reports to : Director, Security Engineering
Travel requirements : Ad hoc travel will be required.
Position Type : Center
Development Framework : Business Support
About us
At Baker McKenzie we are different in the way we think, work and behave. With our team of 13,000 people, including over 6,500 locally admitted lawyers, in over 70 offices worldwide, we have a passionately collaborative community of 60 nationalities and are committed to world-class career development to everyone in every job at every level. Baker McKenzie can offer you both the uncompromising commitment to excellence expected of a top firm paired with a passionately global and genuinely collaborative working environment.
Additional Information
Baker McKenzie is an Equal Opportunity Employer. We are committed to promoting diversity and inclusion for all. Our unique international culture is reflected in the drawing together of a worldwide family of individuals from diverse cultures and backgrounds in all of our offices. We encourage the best people - regardless of race, religion or belief if any, gender, gender identity, disability, sexual orientation or age - to fulfill their professional aspirations with us. We are committed to ensuring an inclusive and accessible experience for all candidates