Job description
Description
Meltwater’s collaborative security team needs a passionate security tester to continue to progress meltwater’s security forwardWorking with a group of fun loving people who are genuinely excited and passionate about security, there would be more laughs than facepalmsIf you believe that improving security is about constantly moving technology forward to be more secure, and shifting security tools and checks earlier in the development lifecycle and enable teams to use such tooling themselves, then you’ll feel at home on meltwater’s security team!
At meltwater we want to ensure that we can have autonomous, empowered and highly efficient teams, and part of the security team’s responsibility is to ensure teams can continue to operate that way without compromising the security of our systems, services and dataAs a security tester at meltwater you’ll be working with teams that have a very diverse technology stackYou will plan, run and analyze results of pentest engagements that we do as part of our internal penetration testing as a service, a security awareness program that we offer to help teams identify and remediate vulnerabilities in their infrastructure and application stack.
Responsibilities
In this role, you will help teams identify and visualize vulnerabilities, and ultimately collaborate to find ways and strategies to mitigate business riskThis role will require you to have strong communication and collaboration skills along with a deep understanding of both application and infrastructure level vulnerabilities, as you will be working with teams that operate and maintain their entire technology stacks themselves.
Break everything you touch, and … yeah you know..Help teams find solutions to the problems
Perform penetrations tests of both infrastructure and web applications, document and contextualize issues with respect to business impact
Create reports that are comprehensive and accurate that can be understood by people with varying technical background
Work with teams to communicate findings, recommendations and knowledge to stakeholders
Educate and collaborate with teams on ways to catch vulnerabilities earlier in their development process
Research emerging attack vectors and techniques
Perform ongoing, proactive analysis of meltwaters internal and external attack surface
Skills & requirements
Skills and background
Curiosity that seeks to explore new techniques and attack vectors
Strong collaboration skills with experience working cross functionally with a diverse group of stakeholders
Strong communication skills and the ability to provide technical guidance to both technical and non-technical audiences
Laughing, yes, we like to have fun while we work :)
Deep expertise in industry accepted security best practices/standards/policies such as nist, owasp, cis, mitre&att@ck
Offensive security testing with a strong understanding of how to find common web and network vulnerabilities
Experience in at least one public cloud provider, preferably aws
Self motivated learner that continuously wants to share knowledge to improve others
Hands-on experience in burp suite (or other interception proxies or application security testing tools)
The ideal candidate is someone who comes from a red team, penetration test or security focused qa background.
You’re someone that can learn fast and apply offensive security knowledge to a diverse technology stack and eager to collaborate with teams to productively remediate business risk in a common sense manner.
It’s a plus if you have experience in thread modelling and/or programming/scripting.
Are you passionate about identifying vulnerabilities and helping teams find ways to remediate them? come work with us! let’s pwn some stuff together!
What you can expect from us:
We have an amazing culture and live our core values every dayYou will have the opportunity to work alongside exceptional people who want to succeed together.
Challenging problems to solve in collaboration with other international teams
Access to the tools you need to solve those challenging problems.
Opportunities to travel to other meltwater engineering offices across the globe.
Community and personal development: periodic hackathons, self-organized tech guilds, and more
The ability to attend conferences and access to training allowing you to level up your skills
During the pandemic, all of our engineering employees are working remotely, so you can be located in the united states, canada, or western europe
About the company
Meltwater, a pioneer of media intelligence and now outside insight, gives businesses the information advantage they need to stay aheadMore than 30,000 companies have used meltwater’s media intelligence to stay on top of billions of online conversations and extract relevant insights to strategically manage their brandsMeltwater is dedicated to personal, global service built on the local expertise of 55 offices across six continentsMeltwater is also committed to fostering the data science ecosystem through mest, a pan-african entrepreneurial program and incubator, and shack15, a global data science communityLearn more at meltwater.com.
All of our solutions are fully web-based, offered as a service, and based on a modern technology stackThis is your opportunity to be part of a small agile team within a big multinational organization!
We are more than 2000 people across the globe, so there is a lot going onWe believe in diversity and inclusion, and building teams with a wide variety of backgrounds and perspectivesThis approach not only raises the quality of our products for our customers, but makes collaboration along the way much more fun.
Read our underthehood blog to see which problems our engineers are solvingAlso have a look at what life is like at meltwater and visit our company profiles on linkedin, xing, facebook, and twitter.
Equal opportunity
Meltwater is firmly committed to affording equal employment opportunities to all candidates and employees alike without regard to race, color, religion, age, national origin, gender, sexual orientation, gender identity or gender expression, marital status disability, veteran status and we treat each individual with respect and dignity.
The “eeo is the law” poster is available at: http://bit.ly/2kbm9ei
And “eeo is the law supplement” poster is available at: http://bit.ly/2kmxnxd
On-line accessibility directive: if you are an individual with a disability and require a reasonable accommodation to complete any part of the application process or are limited in the ability or unable to access or use this online application process and need an alternative method for applying, you may contact us here for assistance.
