CRI Group

Nature of the tasks- Contribute to the design of the overall application security.- Define security requirements and derive technical actions targeting the application components and the code base.- Analyse SAST and DAST findings (initial triage with the team), performing code review of implemented corrections.- Draft documentation such as architecture design descriptions, assessment reports and configuration descriptions.- Take an active part in developing and improving the application security, and have it understood and implemented by the team.- Analyse risks and security policy requirements and propose actions.- Vulnerability testing definition of corrective actions.- Categorize events, incidents and vulnerabilities based on relevance, exposure and impact.- Advance security enhancements in DevSecOps processes.- Provide security training and education.- Draft security programmes, security plans and propose implementation actions.- Animate the Security Champions communitySkills and knowledge- Experience with ISO 27000 family of standards or equivalent security standards implementation. - Knowledge of ITSRM2 is a plus.- Excellent knowledge of application security.- Experience in the security aspect of software development (i.e.: authentication with open id connect - SAML or CAS, secure rest or web services, encryption with PKI, authorisation, secrets management).- Experience with secure IT development patterns.- Experience in the security domain- Understanding of risk assessments- Experience in penetration testing and ethical hacking (i.e.: usage of tools like Metasploit, Burpsuite or equivalent).- Experience with security test tools (i.e.: Fortify or equivalent) and web site vulnerability scans.- Good understanding of the 3rd party dependency security (libraries, container and VM images).- Knowledge of OWASP.- Proven experience in Information Systems Development and Information Systems Security, preferably for Java EE technology (at minimum understanding the code and architectural blueprints, however hands-on programming experience is a plus- Knowledge of Agile methodology- Autonomous and rapid self-starting capability.- Strong organisational and time-management skills. - Strong team spirit.- Ability to apply high quality standards.- Capability of integration in an international/multi-cultural environment.- Ability to participate in multi-lingual meetings.- Ability to understand, speak and write English (B2 level)- Proactive attitude, communicative (e.g., good listener) and customer-oriented.Specific expertise and technologies- at least 5 years of specific expertise in Owasp standard (min. competence level 4 to 5)- at least 5 years of specific expertise in IT development patterns IT development patterns and architecture (min. competence level 4 to 5)- at least 5 years of specific expertise in Experience with security test tools SAST , DAST (min. competence level 4 to 5)CERTIFICATIONS:At least one following certificates are required for the performance of tasks:- Certified Information Systems Security Professional (CISSP), - Certified Information Security Manager (CISM), - Certified Ethical Hacker (CEH), Offensive Security - Certified Professional (OSCP) - or equivalent - to be approved by the Commission
The following documents / procedures will be requested to successfully complete the hiring process :
<ul>
<li>A copy of your university degree(s)</li>
<li>A copy of your criminal record</li>
<li>Security Clearance Procedure</li>
</ul>
WHO WE ARE?
CRI company part of VASS Group, leads the digital transformation and cyber security in the European Union.
CRI operates serving the European Union Institutions, telecom operators, financial institutions and governmental bodies through a comprehensive offering of services and technologies.
Please visit our website and let's get in touch: <a href="https://cri-group.eu/" rel="noopener noreferrer nofollow ugc" target="_blank">www.cri-group.eu</a>

Brussel

Expert in Secure Development with application security Expertise

Ivanti

GRC (Governance, Risk &amp; Compliance) Lead – Software Compliance
Who We Are
Ivanti's platform makes it possible for employees to stay productive, secure and engaged wherever they are. That starts with us. With headquarters in Utah, offices in London and Paris and nearly 3,200 employees in 25 countries around the world, we are the Everywhere Workplace – it's a great time to work for Ivanti!
We anticipate our customers’ needs, we are highly responsive, and we deliver innovative solutions that exceed their expectations. Our mission is to be a global technology leader enabling organizations to thrive in the Everywhere Workplace – automating the tasks that discover, manage, secure and service all of their IT assets.
Our Culture
Teamwork is intrinsic to what we do and why we do it. We are accountable to each other – and support one another. We provide opportunities to grow, learn, add value and thrive – while also achieving new levels of performance. We treat all with appreciation, dignity, and respect. It is through diverse and inclusive hiring, decision-making, and commitment to our employees and partners that we will continue to build and deliver world-class solutions for our customers.
Why We Need you!
Governance, Risk &amp; Compliance (GRC) Leadwill assist the Global Product Security organization’s compliance and assurance function and is responsible for building, maintaining, and continuously improving compliance programs for Ivanti. The successful candidate will oversee and execute Compliance programs within the Information Security related initiatives or projects, including leading activities related to audits, vulnerability management, risk assessment, security awareness and application of necessary security controls and technologies. The individual will be a hands-on specialist who will be responsible for enhancing current programs as well as assisting in developing new programs aimed at improving the security and compliance posture of Ivanti.
This role is remote – must be located in the United States.
What you will be doing?
<ul>
<li>Review, audit, monitor, and analyze security risks and vulnerabilities against policies, standards, and frameworks in at least two of the following frameworks such as SOC2, NIST 800-53, FedRAMP, ISO 27001, IRAP, ISMAP or PCI.</li>
<li>Conduct internal audits to validate controls are in place and meeting relevant regulatory requirements and best practices.</li>
<li>Interface with external auditors in managing ongoing compliance and audits.</li>
<li>Review and help refinement of controls and compliance and identify opportunities to ensure proactive management and mitigation of risks.</li>
<li>Have expert knowledge of vulnerability scanning tools, like Qualys, WhiteHat and open-source solutions.</li>
<li>Lead and manage vulnerability management and remediations in ticketing systems, like JIRA, ADO.</li>
<li>Manage and assist engineering and product teams on all security and compliance related technical components within Ivanti products and services.</li>
<li>Interface closely with cross-functional teams including IT Operations, IT Engineering automation, Business Accounting, Finance, and Internal/External Audit.</li>
</ul>
To be successful, you will need to have
<ul>
<li>5 + years of managing the audit processes for SOC2, ISO 27001, NIST 800, FedRAMP or PCI compliance.</li>
<li>Experience in technical management of vulnerability assessment tools, Qualys, WhiteHat, BurpSuite.</li>
<li>Understanding of cloud security platforms, specifically AWS and Azure.</li>
<li>Experience in working with a Governance, Risk and Compliance (GRC) tool.</li>
<li>Strong analytical and organizational skills with demonstrated ability to plan and manage projects along with ensuring deliverables meet work plan specifications and deadlines.</li>
<li>Bachelor’s degree in business or technology related field.</li>
<li>Professional security management certification, such as a Certified Information Systems Auditor (CISA) or similar credentials.</li>
</ul>

At Ivanti, we are committed to providing an environment of mutual respect where equal employment opportunities are available to all applicants and teammates without regard to race, color, religion, sex, pregnancy (including childbirth, lactation and related medical conditions), national origin, age, physical and mental disability, marital status, sexual orientation, gender identity, gender expression, genetic information (including characteristics and testing), military and veteran status, and any other characteristic protected by applicable law. Ivanti believes that diversity and inclusion among our teammates is critical to our success as a global company, and we seek to recruit, develop and retain the most talented people from a diverse candidate pool.
External Recruiting Agencies/Vendors: Ivanti does not currently engage with external recruiting agencies and will not accept unsolicited resumes from any external agency. Unsolicited resumes submitted by agencies to Ivanti will become the property of Ivanti and may be contacted and engaged with directly. Ivanti maintains a preferred vendor list and only engages with these agencies from time to time. Ivanti has not agreed to pay placement or any other fee to companies who have not been specifically retained to conduct a candidate search.


#LI-EB1
#LI-REMOTE

United States

GRC Lead - Software Compliance

Coupa Software, Inc.

Coupa Software (NASDAQ: COUP), a leader in business spend management (BSM), has been certified as a “Great Place to Work” by the <a href="https://www.greatplacetowork.com/certified-company/7003229" rel="noopener noreferrer nofollow ugc" target="_blank">Great Place to Work</a> organization. We deliver “Value as a Service” by helping our customers maximize their spend under management, achieve significant cost savings and drive profitability. Coupa provides a unified, cloud-based spend management platform that connects hundreds of organizations representing the Americas, EMEA, and APAC with millions of suppliers globally. The Coupa platform provides greater visibility into and control over how companies spend money. Customers – small, medium and large – have used the Coupa platform to bring billions of dollars in cumulative spend under management. Learn more at <a href="http://cts.businesswire.com/ct/CT?id=smartlink&amp;url=http%3A%2F%2Fwww.coupa.com&amp;esheet=51114752&amp;newsitemid=20150601006470&amp;lan=en-US&amp;anchor=www.coupa.com&amp;index=2&amp;md5=a987f008a6f03bd98fccc16218fcd14a" rel="noopener noreferrer nofollow ugc" target="_blank">www.coupa.com</a>. Read more on the <a href="http://cts.businesswire.com/ct/CT?id=smartlink&amp;url=http%3A%2F%2Fwww.coupa.com%2Fblog%2F&amp;esheet=51114752&amp;newsitemid=20150601006470&amp;lan=en-US&amp;anchor=Coupa+Blog&amp;index=3&amp;md5=eb22c8026e1b468cb5d98c71dc16baf3" rel="noopener noreferrer nofollow ugc" target="_blank">Coupa Blog</a> or follow <a href="http://cts.businesswire.com/ct/CT?id=smartlink&amp;url=https%3A%2F%2Ftwitter.com%2Fcoupa&amp;esheet=51114752&amp;newsitemid=20150601006470&amp;lan=en-US&amp;anchor=%40Coupa+on+Twitter&amp;index=4&amp;md5=a8a25a82b02e70c890f812b09eb87a15" rel="noopener noreferrer nofollow ugc" target="_blank">@Coupa on Twitter</a>.Do you want to work for Coupa Software, the world's leading provider of cloud-based spend management solutions? We’re a company that had a successful IPO in October 2016 (NASDAQ: COUP) to fuel our innovation and growth. At Coupa, we’re building a great company that is laser focused on three core values:1. Ensure Customer Success – Obsessive and unwavering commitment to making customers successful.2. Focus On Results – Relentless focus on delivering results through innovation and a bias for action.3. Strive For Excellence – Commitment to a collaborative environment infused with professionalism, integrity, passion, and accountability.
<h3>Responsibilities:</h3>
<ul>
<li>Build models of threats based on data analysis, CVEs, vendor and discovered threats and exploits</li><li>* Actively seek out and develop action plans to resolve threats</li><li>Participate as a senior security engineer as an escalation point for security related events including: incidents, vulnerabilities, and compliance related controls within Coupa’s cloud based production services and platform</li><li>Collaborate with Engineering and Operations teams to address security related issues</li><li>Monitor and analyze security data to ensure we maintain and exceed key performance indicators</li><li>Troubleshoot and document security incidents, with an eye to increasing our threat modeling fidelity and to proactively find and eliminate threats</li><li>Conduct security risk assessments on behalf of internal and external customers providing consistent technical measurements of risk</li><li>Produce and present security reports for Coupa functional teams and leadership</li><li>Automation of security assessments and other security related SecOps tasks</li><li>Resolve security issues from assessments and other sources and deliver upon assigned security projects</li><li>Implement and maintain security solutions to detect and prevent security related risks including, but not limited to: firewalls, hids/fim, workload protection, antivirus, sast/dast, application security, single sign-on, and custom tools</li><li>Contribute to Coupa’s security strategy</li><li>Advocate Security best practices throughout Coupa</li><li>Define and iterate upon best security practices</li><li>Participate in Security Incident On-call rotation</li></ul>
<h3>Requirements:</h3>
<ul>
<li>5+ years of experience in an equivalent security related role</li><li>* At least 2 years' experience with threat modeling and threat hunting</li><li>Strong experience in web application security eg (XSS, CSRF, SQL injection)</li><li>Familiarity with Cloud Computing and Software as a Service</li><li>Hands-on operational experience with security tools such as Palo Alto Twistlock, Prisma Cloud, file integrity monitoring, firewalls, antivirus, Sonarqube, application security, Kibana, SSEC, Rapid7, BurpSuite, Nmap and SSO</li><li>2+ years of experience with automation using Java, Perl, PHP, Python, Ruby or equivalent</li><li>Strong communication skills; both written and oral</li><li>Ability to work in a team environment</li><li>Experience with designing and/or delivering tools</li><li>Software or systems development experience a plus</li><li>Infrastructure delivery experience a plus</li></ul>At Coupa, we have a strong and innovative team dedicated to improving the spend management processes of today’s dynamic businesses. It’s our people who make it happen, and we strive to attract and retain the best in every discipline.We take care of our employees every way we can, with competitive compensation packages, as well as restricted stock units, an Employee Stock Purchase Program (ESPP), comprehensive health benefits for employees and their families, retirement and savings plans with employer match, a flexible work environment, no limit vacations for exempt employees, non-exempt employees are on an accrual basis for PTO, catered lunches…And much more!As part of our dedication to the diversity of our workforce, Coupa is committed to Equal Employment Opportunity without regard for race, ethnicity, gender, protected veteran status, disability, sexual orientation, gender identity or religion.Please be advised, inquiries or resumes from recruiters will not be accepted.

Pune

Sr. Security Engineer - threat hunting

Homebase

About Us 








Our mission is to make hourly work easier for local businesses and hourly workers. Homebase currently serves more than 100,000 small (but mighty) businesses with everything they need to manage their hourly teams: employee scheduling, time clocks, payroll, team communication, hiring, onboarding, and compliance. Just don’t call us “Human Capital Management.” We have built tools for the busiest businesses, so owners and employees can spend less time on bullsh*t and more time on what matters. The Homebase team brings small business expertise from Intuit, Square, OpenTable, Yelp, Gusto, and First Data. Homebase is backed by leading venture investors Bain Capital Ventures, Baseline Ventures, Cowboy Ventures, Khosla Ventures, Plus Capital, and GGV Capital.








 

The Job
As a Security Engineer at Homebase, you will work in a Product Security/Application Security role to improve the security and privacy around Homebase customer data that enables thousands of small businesses to safely and reliably manage their operations. By reviewing upcoming releases, identifying security vulnerabilities, implementing systemic improvements, and working with all teams in the organization to remediate issues. You will play a leading role in protecting the data of our customers and in securing the integrity of our systems.

<ul>
<li>You’ll balance security with end-user efficiency and business needs</li>
<li>You’ll help other engineers design more secure systems via design input and code review.</li>
<li>You’ll manage our Bug Bounty program, triage incoming reports, and work with the rest of the engineering team to address vulnerabilities.</li>
<li>You’ll be a champion for security across the entire business.</li>
</ul>
Qualifications
<ul>
<li>3+ years of experience on an internal application security team or related discipline.</li>
<li>Experience working with web and mobile applications teams</li>
<li>Knowledge of common attacks and exploitation techniques</li>
<li>Knowledge of  threat modeling and architecture design review </li>
<li>Knowledge of network and related web protocols (e.g., TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols)</li>
<li>Strong communication skills.</li>
<li>Bachelor's degree in Computer Science or Engineering disciplines or equivalent required</li>
</ul>
Desired Qualifications
<ul>
<li>Knowledge of development best practices, both for mobile and web applications.</li>
<li>Scripting experience</li>
<li>Knowledge of Git, Github, and development using pull requests.</li>
<li>Knowledge of product incident response.</li>
<li>Development experience in ruby on rails applications.</li>
<li>Experience triaging and working in bug bounty programs</li>
<li>Experience in using standard Security Assessment and Penetration Testing tools such as BurpSuite, Metasploit, and OWASP Zap.</li>
<li>5+ years of experience working on an internal application security team</li>
</ul>

Homebase Team Attributes: If you resonate with these traits, you may be a Homie!
<ul>
<li>Gets shit done - Moves quickly and with urgency to deliver results. Strong bias to action.</li>
<li>Strong work ethic - Willing to work hard and put in the time to accomplish outsized goals.</li>
<li>Learning mindset - Proactive in personal development. Highly curious and driven to learn.</li>
<li>Sets a high bar - Expects personal and team performances to be world-class.</li>
<li>Humble - Delivers exceptional results without an ego. Shares credit broadly.</li>
<li>Team Player - Collaborative. Motivates and creates positive environments for colleagues and teams.</li>
</ul>
What We Offer You 
<ul>
<li>Stock Options - everyone is an owner</li>
<li>Comprehensive Insurance Plans</li>
<li>401(k) program +4% company match</li>
<li>Remote work with hybrid option in multiple locations</li>
<li>Top-of-the-line equipment and home office $$</li>
<li>Annual Holidays and Accrued PTO</li>
<li>A dynamic, well-connected, productive team</li>
<li>Fun company activities</li>
</ul>
At Homebase, we value our differences, and we encourage all to apply. We do not discriminate on the basis of race, religion, color, gender expression or identity, sexual orientation, national origin, citizenship, age, marital status, veteran status, disability status, or any other characteristic protected by law. Homebase is proud to be an equal opportunity employer and participant in the U.S. Federal E-Verify program.

Atlanta

Security Engineer

BreachLock

BreachLock is looking for New York based Penetration Testing talent with programming skills. We have multiple positions open for passionate bug bounty hunters or penetration testers that also like developing security tools using python or other technologies.Who are we? BreachLock is a remote first security startup that offers a unique SaaS platform delivering on-demand, continuous, and scalable security testing suitable for modern cloud and DevOps powered businesses. BreachLock is also World’s first full stack PTaaS powered by Certified Hackers and AI. We are a young and international startup with offices in Amsterdam, New York, London and New Delhi. Some of our achievements include: <ul> <li>Featured in Gartner HypeCycleas top 8 PTaaS Vendor Globally</li> <li>One of the fastest-growing SaaS companies in Cyber Security.</li> <li>HOT 150 Cybersecurity companies 2021 - Cybersecurity Ventures.</li> <li>Cyber Security Innovator for Analysis and Testing category 2019 – SC Magazine.</li> <li>Top 10 Vulnerability Management Solution for 2019 – Enterprise Security Magazine.</li> <li>Most promising Cyber Security startup 2019 – CIO Review.</li> <li>Cyber Security Innovator for the year 2019 – Mirror Review.</li> <li>Top 10 Vulnerability Assessment vendor in Gartner Peerinsight</li> </ul>ResponsibilitiesAs a Senior Penetration Tester, you will be on the front lines with our clients supporting them with their cloud and Offensive Security needs. You will work with our Offensive Security team to build attack-oriented professional services practice such as (but not limited to): Red/Purple Team Operations, Penetration Testing, Breach and Attack Simulations, Cloud Penetration Testing, Social Engineering, and a variety of ad-hoc custom assessments to address unique information security concerns for clients. In this role you will:<ul> <li> Drive Practice development, including improving existing offerings, creating new offerings, and mentoring team members</li> <li> Foster client relationships from Sales to Renewal Cycle by providing right solutioning, support, information, and guidance</li> <li> Support the teams on proposals, whitepapers, proof of concepts, technical eminence materials and firm initiatives.</li> <li> Perform Red Team Assessments, Purple Team Assessments, Network Penetration Tests, Wireless Security Assessments, Onsite and Remote Social Engineering, and a variety of custom assessments</li> <li> Create and review comprehensive assessment reports that are technical and managerial to describe the engagement, scope, risks, and remediation recommendations</li> </ul><ul> <li> Provide technical and administrative oversight and guidance to junior members of the team while performing technical operations</li> <li> Liasioning between technical teams and executive level professionals to relay relevant testing results and findings</li> <li> Develop marketing materials and participate in marketing activities such as creating research, speaking at conferences, authoring materials and presenting thought leadership</li> <li> Expertise on security testing frameworks and standards such as OSSTMM, OWASP, NIST SP 800-115, and MITRE ATT&amp;CK is required</li> <li> Use automation, orchestration, and scripting to reduce manual processes, improving overall efficiency while also enabling new capabilities to meet the rapidly changing needs of our clients</li> <li> Mastery of commercial and open source security tools including, but not limited to: Nmap, Nessus, BurpSuite, Cobalt Strike, Metasploit, Wireshark, and Aircrack-ng</li> <li> Serve as a subject matter expert on cloud cyber risk for at least one of the leading cloud platforms preferably AWS, Microsoft Azure/ Office 365.</li> <li> Support and enable junior team members across both technical and management leadership capacities.</li> <li> Provide internal cloud security technical training to Advisory personnel as needed.</li> </ul>RequirementsWhat we are looking for:<ul> <li> · 6+ years combined in IT and information security experience· 5+ years of experience performing offensive/attack-oriented security assessments including penteration testing· 2+ years of experience in an enterprise-level customer facing role· Experience with various public cloud components and architectures with Azure / AWS strongly preferred.· Experience in evading security detection controlsAdditional Requirements:· Ability to travel if needed, based on the work you do and the clients and industries/sectors you serve.· Must be legally authorized to work in the Netherlands without the need for employer sponsorship, now or at any time in the future. · Experience with leading multiple distributed teams across different geographies.· Excellent teamwork and interpersonal skills.Preferred:· Prior experience working with Big-4s in similar role· Experience in creating a vision and authoring the design of cyber programs and methodologies· Experience teaching and certifying personnel to achieve goal-oriented training objectives· Other lab-based certifications such as OSCP, OSCE, GIAC, and GSE are preferred· Other relevant industry certifications, such as GPEN and GCIH· InfoSec community involvement, such as conference speaking, blog/whitepaper authoring, and podcast speaking/producing· Experience building security tool APIs and/or services.· Experience building/automating Red Team Infrastructure.· Experience building/automating Attack Defense labs· Previous Consulting or Big 4 experience preferred.· Certifications such as: CISSP, AWS/Azure Security/DevOps/Professional Certifications, completion of Red Teaming Labs· Excellent writing and verbal communication skills.· Strong project management and organizational skills.· Knowledge of business process, user provisioning process, and security maintenance processes.</li> </ul>Benefits<ul> <li>Opportunity to join and grow in a passionate, rapidly expanding industry</li> <li>Competitive compensation</li> <li>Ability to work remotely</li> <li>Equity plan possibilities based on performance</li> <li>Flexible work hours</li> <li>You will be working alongside international experts</li> <li>Strong career prospects in an early-stage startup</li> </ul>

Amsterdam

Senior Penetration Tester / Pen Test Leader (Netherlands) - Amsterdam

Apply to Burpsuite Cyber Security Jobs in companies remotely and near you. New Burpsuite Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Expert in Secure Development with application security Expertise at CRI Group	Agile Application Security Burpsuite CEH CISM
GRC Lead - Software Compliance at Ivanti	Audits Automation AWS Azure Burpsuite
Sr. Security Engineer - threat hunting at Coupa Software, Inc.	Application Security Automation Burpsuite DAST Exploits
Security Engineer at Homebase	Application Security Burpsuite Incident Response Metasploit Owasp
Senior Penetration Tester / Pen Test Leader (Netherlands) - Amsterdam at BreachLock	Automation AWS Azure Burpsuite Cissp

Burpsuite Cyber Security Jobs

0 Burpsuite Cyber Security Jobs. Page 1 of 1

5 closed burpsuite cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Burpsuite Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Burpsuite Cyber Security Jobs

0 Burpsuite Cyber Security Jobs. Page 1 of 1

5 closed burpsuite cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Burpsuite Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter