Amazon.com

Job summaryThe Devices and Services (D&amp;S) Trust &amp; Security team works to ensure that our devices and services are designed and implemented to the high standards required to maintain and enhance customer trust. Security and Privacy are paramount to maintaining trust and we need to continue to build trusted products, maintain and operate trusted environments, and advocate trust to customers and stakeholders. The team develops security automation for devices &amp; services, performs penetration testing, and handles and tracks incident responses to resolution. The Trust team is responsible for enabling business growth and innovation while honoring data policies and controls that help protect customer trust. We are responsible for defining and executing on the security and privacy requirements across the entire organization.Are you interested in being part of a top-notch security team covering all Amazon consumer devices (including hardware and low-level functionality) as well as key Amazon services supporting our consumer devices (such as Computer Vision, AppStore, Device Registration, Kindle, etc.)? Amazon Lab126 is looking for skilled and exceptional security researchers to find security issues in our products to better protect our customers. Your work directly impacts the way our customers, teams, and business across the globe get things done. If you care deeply about keeping customers safe, then we have a job for you! You can learn more about security at Lab 126 here: https://www.youtube.com/watch?v=k0UTTxzeGogKey job responsibilitiesIn this role, you will be part of a dedicated team of passionate security engineers performing vulnerability research to detect high impact issues in Amazon consumer products. You will work on identifying vulnerabilities in diverse product stacks spanning multiple architectures, SoCs to identify vulnerabilities in low level embedded software, operating systems, applications, peripherals or web client, web sites, and cloud services as well as introduce defenses to raise the effort for attackers. You will identify detective and preventative technology and automation to reduce the impact of security threats in advance and be directly involved in our response to critical security issues. You will work with security stakeholders within the company, security research community and partner organizations across the ecosystem to address security issues collaboration with product teams and to do the right thing for our organization. You will lead gap analysis efforts to identify learnings to improve product security. You're well-known for your excellent prioritization skills as well as your ability to communicate at all levels of an organization. If you're passionate about finding security bugs, analyzing security exploits, and enjoy seeing your work's impact across Amazon consumer products and services, then this position is for you. A day in the life• Perform vulnerability detection using variety of automated static, dynamic analysis as well as custom tooling (e.g. static analyzers, fuzzers, scanners, analyzers, etc.) to identify device or web services, vulnerabilities and develop proof of concept exploits.• Conduct campaigns to identify vulnerabilities in various platforms, technology stacks across devices (Android based, real time operating systems, protocols - Wi-Fi, BT, RF) and services (web services, cloud infrastructure and mobile applications)• Advocate for raising security bar for product teams by recommending security fixes, technical solutions and designs to enable product teams to mitigate classes of security vulnerabilities.• Perform analysis of publicly reported vulnerabilities and attacks to synthesize areas of proactive focus spanning product stacks.• Develop detailed technical documentation describing identified vulnerabilities, associated impact as well as recommendations for communication with internal engineering stakeholders as well as leadership• Perform analysis of reported issues and work with product, partner and vendor teams to remediate vulnerabilities. <h3>Basic Qualifications</h3>• Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, Cyber Security or a related field• 7+ years relevant work experience• 2+ year of development experience in C, C++, assembly (x86, x86-64, ARM) and/or Java• Experience with at least one scripting language (e.g. python, ruby, bash, JavaScript, Go)<h3>Preferred Qualifications</h3>Master’s degree in Computer Science, Computer Engineering, Electrical Engineering or equivalent. Candidates with experience in at least one of the areas is preferred. • Experience in performing vulnerability research and reporting vulnerabilities in widely used software or sharing contributions via public research, blogging, and presentations with the security community. • Experience in embedded/IoT device security or web services security specifically, with experience of performing software security audits, vulnerability discovery and analysis. • Experience with common software security vulnerabilities and methods of exploitation, such as memory corruption, privilege escalation, web application exploitation, file format vulnerabilities, protocol-based weaknesses, etc.• Experience with static and dynamic tools for vulnerability detection and exploit mitigation techniques• Experience with extracting firmware, reverse engineering a variety of hardware and software, including firmware, operating systems, and applications, binary analysis and proof of concept exploit development. • Knowledge of common wireless connectivity protocols with focus on protocol or implementation security vulnerabilities (e.g. Bluetooth, Wi-Fi, 802.15.4, Zigbee) or hardware security mechanisms, including secure boot, trusted execution environments or operating system internals and associated security issues with emphasis on Linux, Android and common RTOS environments• Experience with analysis tools such as IDA, Ghidra, Radare, Burp Suite, and network traffic dissectors such as Wireshark.o Experience with service-oriented architecture, web services security, AWS/cloud infrastructure securityo Foundation in, and in-depth technical knowledge of, security engineering, computer and network security, authentication, security protocols and applied cryptography.o Knowledge of network and web related protocols (e.g., TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols)keyword:digitalsecurityAmazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.Pursuant to the Los Angeles Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

California

Senior Security Vulnerability Researcher

Gympass

GET TO KNOW US
We simplify wellness so you can find everything in one place. Gympass is a corporate wellness platform that connects you to thousands of fitness &amp; wellness partners, all with one simple monthly membership. Founded in 2012 and headquartered in NYC, we have a growing global team in 11 offices around the world. At Gympass, you not only have the opportunity to build a career in a fast-paced global environment - but you'll make wellbeing universal, so everyone can be happy and healthy.
WHAT MAKES A GYMPASSER?
We are passionate about our mission! Whatever your job title is, here you can make a global impact and change people’s lives. At Gympass, we collaborate, set high achievable goal expectations, and focus on the end result.  It's a challenging, evolving environment that allows you to learn and grow. You will face a disruptive and emerging business model that will push you in several areas, with no boundaries for creation and collaboration.
THE OPPORTUNITY
We are hiring a SENIOR ENGINEER in OFFENSIVE SECURITY for our INFOSEC TEAM in PORTUGAL!
YOUR IMPACT
We are looking for a team member to help us focus on Secure Application Engineering, challenge our status quo, create missions that improve our engineers and company security and find how to improve the way we work to deliver an amazing product that our customers can trust. We are all-in the cloud and use software engineering principles to solve large scale production challenges.
Within this domain you will work with infosec offensive missions, crafting scenarios and running tests, automation, metric gathering, log scavenging and incident management.
<ul>
<li>You have ran physical and virtual missions as a red team member to understand how products work</li>
<li>You understand how cloud providers structure their offering and the often overlooked places that actors may abuse</li>
<li>You understand observability and metrics</li>
<li>You can write great documentation</li>
<li>You helped teams get identify gaps on mobile and web applications</li>
<li>You make the offensive security landscape accessible for engineers and product managers</li>
</ul>
 WHO YOU ARE
<ul>
<li>3+ years of professional experience in cyber security or related field.</li>
<li>Strong knowledge of offensive security, focused on the Red Team.</li>
<li>Knowledge in Public Cloud infrastructre (preferably AWS).</li>
<li>Experience in reporting on the Red Team engagements providing an in-depth analysis of the security issues identified.</li>
<li>Understanding of cybersecurity frameworks such as OWASP and  Mitre’s ATT&amp;CK.</li>
<li>Awareness of common software security flaws and web application security best practices.</li>
<li>Ability to create tools and scripts for automating security tasks.</li>
<li>Familiarity with the different techniques for exploitations, such as recognition, enumeration, scanning, post-scanning, lateral movement, etc...</li>
<li>Experience with threat modeling.</li>
<li>Knowledge in CI/CD pipelines.</li>
</ul>
The knowledge below is considered a plus:
<ul>
<li>
<ul>
<li>Programming skills in any modern language (.NET, Java, Go, Kotlin, Python, NodeJS, Rust, etc...)</li>
<li>Familiarity with Bug Bounty programs.</li>
<li>Familiarity with CTF challenges.</li>
<li>Knowledge in Burp Suite, Tenable, Shodan, Security ScoreCard, or related tools. </li>
</ul>
</li>
</ul>
WHAT WE OFFER YOU 
We're a wellness company that is committed to the health and well-being of our employees. Our flexible program allows you to customize your benefits, according to your needs! Our benefits include:
WELLNESS: Health, dental, and life insurance.
FLEXIBLE WORK: Choose when and where you work. For most, this will be a hybrid office/remote structure but can vary depending on the needs of the role and employee preferences. We offer all employees a home office stipend and a monthly flexible work allowance to help cover the costs of working from home.
GYMPASS DISCOUNT: We believe in our mission and encourage our employees and their families to find their passion too. Access onsite gyms and fitness studios, digital fitness programs, and online wellness resources for meditation, nutrition, mental health support, and more.
PAID TIME OFF: We know how important it is that our employees take time away from work to recharge. 
BR: Vacations after 6 months and 3 days off per year + 1 day off for each year of tenure (up to 5 additional days) + extra day off for your birthday.
PAID PARENTAL LEAVE: Welcoming a new child is one of the most special moments in your life and we want our employees to take the time to be present and enjoy their growing family.
BR: 100% paid parental leave of 6 weeks to all new parents, of both biological and adopted children, regardless of gender and parent's relationship with the co-parent, Also extended maternity leave under local legislation 
CAREER GROWTH: Outstanding opportunities for personal and career growth. That means we maintain a growth mindset in everything we do and invest deeply in employee development.  
CULTURE: An exciting and supportive atmosphere with ambitious people from around the world! 
FLEXIBLE WORK: We give our employees some flexibility to adjust their working hours, letting them adjust their starting time within a range of 3 hours. 
And to get a glimpse of Life at Gympass...follow us on<a href="https://www.instagram.com/gympasscareers/" rel="noopener noreferrer nofollow ugc" target="_blank"> Instagram</a> @gympasscareers and<a href="https://www.linkedin.com/company/gympass/?viewAsMember=true" rel="noopener noreferrer nofollow ugc" target="_blank"> LinkedIn</a>! 
Belonging @ Gympass
Gympass is committed to creating a diverse work environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, sex, gender identity, sexual orientation, age, non-disqualifying physical or mental disability, national origin, veteran status, or any other basis covered by appropriate law. 
Questions on how we treat your personal data? See our <a href="https://lifeatgympass.wpengine.com/?p=105" rel="noopener noreferrer nofollow ugc" target="_blank">Job Applicant Privacy Notice</a>.

São Paulo

Security Engineer | Offensive Security

Katalon

Established in 2015, <a href="https://www.katalon.com/" rel="noopener noreferrer nofollow ugc" target="_blank">Katalon, Inc.</a> is a global product company providing an End-to-End Software Quality Platform that empowers teams to deliver software with excellence and confidence and proudly achieve the Great Place to Work® Certification™, both in <a href="https://greatplacetowork.com.vn/gptwcertified/katalon-vietnam/" rel="noopener noreferrer nofollow ugc" target="_blank">Vietnam</a> and the <a href="https://www.greatplacetowork.com/certified-company/25" rel="noopener noreferrer nofollow ugc" target="_blank">United States</a> in 2022.Growing from a team of 6 back in 2015 to over 250 employees now, Katalians has been experiencing exponential growth across the region with one vision: “To become the most popular software quality platform in the world by providing indispensable testing tools for software teams of all sizes”.We are looking for a Senior Application Security Engineer who thrives working with engineering teams to secure their products across the entire software development lifecycle.Key Responsibilities:<ul> <li>Participate in and support application security reviews and threat modeling, including code review and dynamic testing; </li> <li>Own and perform application security vulnerability management;</li> <li>Support the Vulnerability Disclosure Program;</li> <li>Facilitate and support the preparation of security releases;</li> <li>Support and consult with the product and DevSecOps teams in application security;</li> <li>Lead both critical and regular security releases;</li> <li>Assist in the creation of application security training;</li> <li>Assist in the development of automated security testing to validate that secure coding best practices are being used;</li> <li>Source code auditing;</li> <li>Reviewing new features and architectural designs;</li> <li>Finding ways to empower engineering teams to build secure software by default;</li> <li>Assist in Penetration Testing both internally and externally.</li> </ul>RequirementsKey Qualifications<ul> <li>BSc in Computer Science or related or 5+ years of experience; </li> <li>Relevant information security certificates (GIAC GWEB, CSSLP, CCSP, etc.);</li> <li>Strong ability to work with colleagues to understand our products and then come up with ways to improve existing security infrastructure;</li> <li>Ability to read and understand code is very important, key languages include;</li> <li>Experience with Penetration testing tools and Devsecops tools such as SonarCloud, Snyk, Burp Suite;</li> <li>Solid understanding of web application security ( Web Pentest). Penetration Testing experience is a plus;</li> <li>Experience in cloud security architecture and infrastructure (AWS is preferred);</li> <li>Experience coding in at least one scripting language;</li> <li>Able to reason about security decisions;</li> <li>Experience leading projects from start to finish and mentoring other security practitioners;</li> <li>An ability to communicate ideas clearly and effectively to engineers who know way more than you about their code;</li> <li>Familiarity with common security libraries, security controls, and common security flaws;</li> <li>Experience with OWASP, static/dynamic analysis, and common security tools;</li> <li>A basic understanding of network and web-related protocols (such as TCP/IP, UDP, HTTP, HTTPS, protocols);</li> <li>Excellent and professional communication skills (written and verbal) with an ability to articulate complex topics in a clear and concise manner;</li> <li>Experience identifying security issues through code review.</li> </ul>Nice To Have, but not required:<ul> <li>Presentation experience at all levels </li> <li>Experience working with compliance, privacy, IT, networking, or related functions</li> </ul>BenefitsAt Katalon, we bring together self-starting, open-minded, and talented people while actively promoting a transparent and growth-enabling working environment. But don’t just take our words for it. Take a better look below!<ul> <li> Attractive compensation package including achievable Quarterly Performance Bonus (up to 120% gross monthly salary) and 13th-Month Bonus </li> <li> 19 annual leave days and other supportive allowances</li> <li> Flexible working time and place together with high-end working equipment at the high-class new office at Viettel Building (Dist. 10, HCMC) </li> <li> Diverse &amp; International Working Environment with Agile culture </li> <li>Premium healthcare package for you and your loved ones</li> <li>A company trip every summer, an annual year-end party, team-building activities, and so much more fun are waiting for you! </li> </ul>Katalon is proud to be an equal opportunity employer. We care about our people and celebrate our differences. We want to work with talented, collaborative, and innovative people. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other characteristics protected by law.

Ho Chi Minh City

Senior Application Security Engineer

GuidePoint Security

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.GuidePoint Security offers an inclusive set of Application Security services helping clients implement, fine tune and run their Application Security SAST, DAST and SCA tools. Many clients need assistance with either supplementing their Application Security teams or simply need teammates who have a specialization in Application Security. Candidates must be located in Eastern or Central times zones to be considered.
Please Note: This is a remote position however candidates must located in the Eastern or Central time zones to be considered.
Roles and Responsibilities:• Perform code reviews• Run client SAST/DAST tools, review outputs and provide recommendations• Perform manual based assessmentsExperience Requirements:• Knowledge of SAST/DAST Application Security tools such as: Burp Suite, Netsparker, Veracode, Checkmarx, etc.• Understanding of a broad range of Application Security issues as well as their mitigation strategies• Understanding of Application Security related vulnerabilities • Experience with reviewing source code written in JavaScript, Python, Java, C++, PHP, or C# a plus• Written communication skills for written interactions with clients• Strong communication skills that include the ability to clearly articulate thoughts and distill complex problems into digestible pieces of information• Personal drive and passion to not only continue growing yourself but also the Application Security Engineering practice• Standard industry certifications are preferredWhy GuidePoint?GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. Since its inception in 2011, GuidePoint has grown to over 675 employees, established strategic partnerships with leading security vendors, and serves as a trusted advisor to more than 3,000 Enterprise-Level customers.
Firmly-defined core values drive all aspects of the business, which have been paramount to the company’s success and establishment of an enjoyable workplace atmosphere. At GuidePoint, your colleagues are knowledgeable, skilled, and experienced and will seek to collaborate and provide mentorship and guidance at every opportunity.  
This is a unique and rare opportunity to grow your career along with one of the fastest growing companies in the nation.Some added perks….
<ul>
<li>Remote workforce primarily (U.S. based only, some travel may be required for certain positions)</li>
<li>100% employer-paid medical and dental premiums with generous employer family contributions</li>
<li>11 corporate holidays and a Flexible Time Off (FTO) program</li>
<li>Healthy mobile phone and home internet allowance</li>
<li>Eligibility for retirement plan after 2 months at open enrollment</li>
</ul>

Eastern

Nueva Ecija

Application Security Analyst - Southeast (Remote)

Network Guard

<h3>Senior Application Security Engineer</h3>
If you’re passionate about security and privacy, and want to use your skills to help safeguard private, uncensored access to the internet for millions of customers, we’d love to speak with you. 
We provide a highly dynamic working environment where you’ll get to work with some of the best privacy and security focused individuals across multiple disciplines, where room for learning and growth are plentiful. 
As a senior individual contributor on our Offensive Security team, you’ll have a broad set of responsibilities including:
<ul>
<li>Prepare and execute penetration testing projects of our assets, services and applications, either individually or as part of a team with members across various geographic locations such as Singapore, Hong Kong, Poland and London.</li>
<ul>
<li>We operate across a wide range of technologies, from client facing applications written in various languages for various platforms, to backend infrastructure and services, and router firmware. We provide an environment where you’ll be exposed to a wide range of technologies that form our <a href="https://www.expressvpn.com/jobs/tech-stack" rel="noopener noreferrer nofollow ugc" target="_blank">tech stack</a>.</li>
<li>You’ll need a strong white-box testing methodology and the ability to identify bugs in source code to go along with good organization and communication skills when delivering penetration tests of our applications and services.</li>
</ul>
<li>Work closely with the engineering teams to provide expert guidance and advice on remediation of identified vulnerabilities</li>
<li>Verify the existence of newly discovered vulnerabilities in our software stack, including triaging and verifying bugs from our bug bounty program and automated scanners, and develop novel attack vectors based on these </li>
<li>Manage and support penetration testing services performed by outside vendors, from project inception, scoping, completion of the assessment, and finally, working with engineering teams to have the identified issues remediated</li>
<li>Bring creative solutions to fruition for solving some of the complex security challenges faced by our organization, and provide security reviews on technical design documents for our solutions</li>
<li>Mentor, guide and support other team members using your strong technical knowledge</li>
<li>Identify inefficiencies in the team’s workflow, suggest solutions and drive them to completion</li>
</ul>
This role focuses strongly on your ability to perform application penetration testing (specifically, desktop and server applications, with some focus on web applications). To be a good fit for this role and efficiently deliver projects, we are looking for individuals with the following skills and abilities.
Suggested Skills
<ul>
<li>Identify vulnerabilities, misconfigurations and deviations from best practices within applications by means of manual source code review, static code analysis, and/or fuzzing using Burp Suite, AFL or similar tooling. We expect vulnerabilities to be identified and exploited up to the levels of OSCP, OSWE or OSED</li>
<li>Experience in identifying and exploiting remote code execution vulnerabilities, as well as IP and DNS leaks</li>
<li>Analyze application binaries, shared libraries, and browser extensions through the use of debuggers and reverse engineering tools to understand the components of the application and assess their security posture, as well as how they interact with the underlying operating system</li>
<li>Experience writing scripts in languages such as: Python, bash, or Golang to showcase your proof of concept</li>
<li>Provide mentorship and guidance to other team members and share knowledge and findings with them</li>
<li>Good knowledge of:</li>
<ul>
<li>TCP/IP, IDS/IPS, firewalls, WAF, and web content filtering</li>
<li>Cryptography: PGP, SSH, PKI</li>
</ul>
</ul>
The skills listed above are not targeted to one specific platform. The ideal candidate should have strong knowledge and skills in one or more of the following areas:
<ul>
<li>Windows, Linux or macOS thick client applications, and their OS interactions</li>
<li>Cloud security assessment or design review capabilities</li>
<li>Mobile application security assessment capabilities</li>
<li>Identify vulnerabilities in protocol implementations or system architecture</li>
</ul>
Finally, candidates with strong experience in manual source code review and vulnerability research, or a strong track record in this area (e.g. CTFs, bug bounty program activity, published CVEs) are preferred.
<h3>What we offer:</h3>
<ul>
<li>Challenging work in a fun and collaborative environment</li>
<ul>
<li>Everyone’s voice matters and everyone is encouraged to provide input on issues we’re trying to solve or improvements we’re aiming to make. Anyone can bring ideas to the table.</li>
<li>If there is an initiative that matters to you and improves the workplace or our processes, propose it, and we’ll help you drive it to completion</li>
</ul>
<li>Time allocated for regular team building activities, including games and CTFs</li>
<li>Attractive compensation and time-off benefits</li>
<li>Spacious open-concept and centrally located offices</li>
<li>Full-time employment with flexible working hours</li>
<li>Fully stocked pantry with fresh fruit and snacks</li>
<li>Team lunches and company events every quarter</li>
<li>Multicultural teams represented by 30+ nationalities</li>
<li>Reports to the Offensive Security Manager</li>
</ul>

新加坡國際學校 Singapore International School

Apply to Burp Suite Cyber Security Jobs in companies remotely and near you. New Burp Suite Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Senior Security Vulnerability Researcher at Amazon.com	Remote Full Time Javascript Android Audits
Security Engineer \| Offensive Security at Gympass	Remote Full Time Red Team Application Security Automation
Senior Application Security Engineer at Katalon	Agile Application Security Auditing AWS Burp Suite
Application Security Analyst - Southeast (Remote) at GuidePoint Security	Application Security Burp Suite C Checkmarx DAST
Senior Application Security Engineer at Network Guard	Application Security BASH Burp Suite Cloud Code Analysis

Burp Suite Cyber Security Jobs

0 Burp Suite Cyber Security Jobs. Page 1 of 1

5 closed burp suite cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Burp Suite Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Burp Suite Cyber Security Jobs

0 Burp Suite Cyber Security Jobs. Page 1 of 1

5 closed burp suite cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Burp Suite Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter