Penetration Tester (Costa Rica)

Penetration Tester (Costa Rica)

Department : Offensive Security

Employment Type : Full Time

Location : Remote

Description

Company Background

With 30 years of experience in cyber defense, DeepSeas is trusted by nearly 1,000 clients around the world, including Fortune 100 enterprises and mid-market organizations, higher education institutions, as well as municipalities and local governments. Known for its programmatic approach to continuously transforming cyber defense programs, DeepSeas is recognized by Gartner as a top 40 provider of MDR and ranked as a top 5 MDR leader in the 2024 Frost Radar™ : Global Managed Detection and Response (MDR) Market. In addition to its industry-leading MDR service, DeepSeas offers a full suite of advisory, compliance, and testing services to support clients on their cybersecurity transformation journeys, with an approach to cyber defense that prioritizes technical expertise, tradecraft, and continuous innovation to deliver unparalleled results.

Position Overview

In partnership with DeepSeas Program Management Office, the Penetration Tester consults with and leads clients in a wide range of security domains, including penetration testing, vulnerability assessment, and leading incident response tabletops.

Key Responsibilities

• Lead penetration tests and other security assessments in an efficient and professional manner.
• Lead incident response plan development and tabletop exercises in an efficient and professional manner.
• Work closely with clients to ensure that findings are understood by all appropriate stakeholder groups, from the C-Suite to IT administrators.
• Produce and deliver detailed findings and recommendations in professional, accurate and digestible formats.
• Present findings to senior-level staff and board members.
• Act in a professional manner and work proactively to ensure that deadlines are met.
• Partner with Program Management office to coordinate work plans and deadlines in the spirit of exceeding client expectations.
• Partner with Account Executives and / or Solution Engineering as needed / delegated to support sales in winning new business and retaining existing business.
• Train and mentor team members in areas of expertise.
• Skills Knowledge and Expertise
• Industry recognized certification such as OSCP, GPEN, or CEH, and a degree in cybersecurity or related field from an accredited university. Degree requirement may be waived where the candidate has extensive experience.
• 2 or more years experience delivering offensive security services to clients in a professional setting. Knowledge of network and web application penetration testing methods.
• Knowledge of risk treatment and corrective action plans.
• Ability to lead business stakeholders through the incident response lifecycle and identify opportunities for incident response improvement. Exceptional written and oral skills, including the ability to succinctly describe findings, make recommendations and communicate them in business terms.
• Advanced proficiency in Microsoft Word and Excel.
• Advanced proficiency productivity tools such as the Microsoft 365 applications.
• Ability to lead engagements in all of the sub-disciplines below, and ability to coach colleagues in at least three sub-disciplines.

o Incident response plan development

o Incident response tabletops

o External network penetration testing

o Internal network penetration testing

o Vulnerability assessment

o Running phishing campaigns

o Web application penetration testing

o Cloud security assessment

Why DeepSeas?

At Deep Seas, we like to say that heart rates go down, careers take off, and security programs mature. Our values provide the ultimate guide for our daily behavior and decisions. Without these values, we aren't Deep Seas. They preserve the essence of our organization, reflect the personalities of our Deeps (how we affectionately refer to our teammates), and enable us to exceed expectations. Our values are :

This is your chance to join a supportive crew of teammates and an industry-leading organization that values opportunities for growth. If DeepSeas sounds like a good fit for you, send us your resume and let's talk!

Information security is everyone's responsibility :