Job details
Job type full-time part-time contract number of hires for this role 1
Qualifications
Penetration testing: 5 years (required)
Cybersecurity: 1 year (preferred)
Full job description
Position summary:
Individuals within the information security office plan, execute, and manage multi-faceted projects related to cyber security to detect, prevent and respond to threats that is affecting the companyIndividual should have a mindset of a defender and should be able to operate in a fast-paced environment working closely with our support teams which includes network, firewall, server and application development teamsThese professionals work directly with the customers, third parties and other internal departments and organizations to facilitate information security management processes and to identify vulnerable areasThey also communicate and educate it and the business about security policies and industry standards, and provide solutions for enterprise/business security issues
Primary duties and responsibilities:
Be able to handle the most dynamic and challenging scenarios encountered by the program and assist other analysts by providing direction and guidance when necessary.
Perform vulnerability metrics reporting for ad-hoc and scheduled metrics report for various kpis around vulnerability management activities
Perform in-depth analysis of red team engagements results and provide a detail report that describes findings, exploitation procedures, risks and recommendations.
Responsible to identify and exploit security vulnerabilities in a wide array of solutions in a variety of situations.
Execute penetration testing projects using the established methodology, tools and rules of engagements.
Design security test cases with the intent to exploit security-protected applications
Respond to questions from stakeholders about security assessment reports.
Collaborate with support groups/stakeholders on details about identified vulnerabilities.
Make recommendations on how we can improve application and network security assessment processes (security tools, automation, delivery)
Analyze business policies for effectiveness, make suggestions on security policy improvements, and enhance security testing methodology material.
Stay up to date on latest vulnerabilities and potential impact to amerisourcebergen environment, as new vulnerabilities are released, must stay on top of information related to them and how they may impact amerisourcebergen
Testing application code level vulnerabilities using penetration testing methodologies
Maintain day-to-day relationship with security and services partners * develop security solutions for critical and/or highly complex assignments.
Develop remediation strategies and risk responses associated with the protection of infrastructure and information assets.
Ability to work independently taking initiative and as part of a team participating in a collaborate effort for a common goal.
Mentors less-experienced team members.
Experience and educational requirements:
Bachelor’s degree in computer science, cybersecurity or other related field, or equivalent work experience.
Experience in application and network security testing
Typically requires at least 8 years of combined it and security work experience with a broad range of exposure to systems analysis, application development, systems administration and over 5 years’ experience in conducting penetration testing.
Requires security certification(s) (i.e., certified information systems security professional (cissp), or certified information security manage (cism) or certified ethical hacker (ceh), offensive security certified professional (oscp), elearnsecurity web application penetration tester (ewpt)or other equivalent recognized security certifications (oscp & ewpt is major plus)
Familiarity with programming languages (such as sql, c ++, javascript, ruby, .net, java, apex, abap, and python)
Working knowledge with open-source security tools (burp, nmap, sslscan, sqlmap, nikto, metasploit, etc.) and cots (webinspect, fortify, qualys, tanium)
Familiar with owasp top 10 methodologies
Familiar with sans top 25 controls
Familiar with penetration testing standards
Familiar with mitre attack framework
Job types: full-time, part-time, contract
Experience:
Cybersecurity: 1 year (preferred)
Penetration testing: 5 years (required)
Work location:
Fully remote
Work location: remote
