Bishop Fox

Bishop Fox is the leading authority in offensive security, providing solutions ranging from continuous penetration testing, red teaming, and attack surface management to product, cloud, and application security assessments. We’ve worked with more than a quarter of the Fortune 100, half of the Fortune 10, eight of the top 10 global technology companies, and all of the top global media companies. Our Cosmos platform was named Best Emerging Technology in the 2021 SC Media Awards and our offerings are consistently ranked as “world class” in customer experience surveys. For more than 16 years, we've been contributing and giving back to the security community. We’ve published more than 16 open source tools and 50 security advisories in the last five years alone. Learn more at bishopfox.com or follow us on Twitter.
We’re looking for talented, experienced professional hackers to help us secure some of the world’s most complex software and sophisticated technologies. You’ll be working alongside our US and other internationally-based teams supporting clients across multiple industries. 
Who You Are and What You’ll Do
You fancy yourself a Pentester. You know your way around source code. You’ve plundered apps and pillaged networks (legally, of course). You have a passion for hacking and information security. If you’re not already doing it professionally, you’re pen testing in your free time. You may also have written a few blog posts about your favorite hacks or have presented at a handful of conferences – with an eye to doing more.
With Bishop Fox, your responsibilities would include testing web applications, hacking networks, and reversing software. Some days, you’ll be red teaming wireless networks and physically breaking into buildings. Other days, you’ll be analyzing source code and building threat models. Every day at Bishop Fox, you’ll be learning.
As a consultant, you’ll work on a variety of projects which include short-term engagements and extended program work with well-established clients, you'll solve challenging technical problems and build creative solutions. As a trusted advisor, you’ll provide your expert opinion to help our clients navigate difficult business decisions.                                                       
Your Education and Experience
You just have to be good at and, most importantly, love what you do. Don’t worry about a piece of paper; we won’t. Here’s a list of qualities we’re looking for:
<ul>
<li>Penetration testing and code review skills</li>
<li>Vulnerability assessment experience</li>
<li>Understanding security fundamentals and common vulnerabilities (e.g. OWASP Top Ten)</li>
<li>2+ years of application security experience</li>
<li>Additional experience in Cloud security; background in system and network security, authentication and security protocols, and applied cryptography are helpful</li>
<li>Scripting/programming skills (e.g., Python, Ruby, Java, JavaScript, etc.)</li>
<li>Network and web-related protocol knowledge (e.g., TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols)</li>
<li>Advanced relevant academic training is a definite bonus</li>
</ul>
Bishop Fox has always offered its employees the ability to work remotely, and for this role you could work remotely in the United States or Mexico. Equity is offered to all employees and vesting starts on the first day.  You also have the opportunity to earn additional equity.  Our comprehensive benefits program is tailored to meet your needs at an affordable price. We embrace diversity and an inclusive culture.  We value our employees and who they are, which fosters a powerful and collective talent base to successfully serve our clients and the security community with unparalleled expertise.  
Bishop Fox is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex including sexual orientation and gender identity, national origin, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law.  All new hires must pass a background check as a condition of employment.

United States

Penetration Tester

Amazon.com

Job summaryThe Amazon Information Security team is looking for a Senior Security Engineer to help ensure our services, applications, and websites are designed and implemented to the highest security standards. You have breadth and depth of security knowledge and can identify and advise on risks across multiple areas of an organization. You will join a team working on Software Supply Chain Security (SSC-S) initiatives and drive transformative changes on how thousands of Amazon dev teams consumes, build, operate and ship secure software. You will work with limited guidance in the face of ambiguity. You will take a long-term view of Amazon's software development security processes and tools. *The preferred location for this position is in Seattle, Austin or Arlington locations, however other locations may be considered as well.Key job responsibilities<ul><li>Evaluating and recommending new and emerging security products and technologies</li><li>Identifying security issues and risks, and developing mitigation plans</li><li>Through security risk assessments, identify repeatable work streams and influence automation of such streams to reduce cycle times and drive efficiency.</li><li>Participate in the design discussions and development of user stories for automation</li><li>Positively influence Security Governance initiatives; partner with engineering teams to develop a Security dashboard that provides ongoing Leadership visibility of the security posture, threats and risks.</li><li>Establish credibility and maintain strong working relationships with technical groups involved with security including but not limited to Security Teams, AWS (Amazon Web Services), Legal, Compliance, and Developer Community</li><li>Build and influence supply chain software security as a core competency throughout InfoSec’s relationships with internal Amazon teams, partners, and vendors.</li></ul>About the teamAt Amazon, we're working to be the most customer-centric company on earth. To get there, we need exceptionally talented, bright, and driven people. Join us!Inclusive Team Culture Here at Amazon, we embrace our differences. We are committed to furthering our culture of inclusion. We have ten employee-led affinity groups, reaching 40,000 employees in over 190 chapters globally. We have innovative benefit offerings, and host annual and ongoing learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences. Amazon’s culture of inclusion is reinforced within our 16 Leadership Principles, which remind team members to seek diverse perspectives, learn and be curious, and earn trust. Work/Life Balance Our team puts a high value on work-life balance. It isn’t about how many hours you spend at home or at work; it’s about the flow you establish that brings energy to both parts of your life. We believe striking the right balance between your personal and professional life is critical to life-long happiness and fulfillment. We offer flexibility in working hours and encourage you to find your own balance between your work and personal lives. Mentorship &amp; Career Growth Our team is dedicated to supporting new members. We have a broad mix of experience levels and tenures, and we’re building an environment that celebrates knowledge sharing and mentorship. We care about your career growth and strive to assign projects based on what will help each team member develop into a better-rounded professional and enable them to take on more complex tasks in the future.<h3>Basic Qualifications</h3><ul><li>BS in Computer Science or related field, or equivalent work experience</li><li>At least 5 years of experience in application security, threat modeling, secure coding, software development, secure software or system design</li><li>At least 3 years of experience in a development or security role working with development team(s) that delivered commercial software or software-based services</li><li>Advanced knowledge and understanding of any combination of the following: security engineering, system and network security, authentication and security protocols, cryptography, or application security</li><li>An understanding of network and web related protocols (such as, TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols)</li><li>Experience with multiple programming languages (such as, Java, C++, Ruby, Python, Perl, etc.)</li></ul><h3>Preferred Qualifications</h3><ul><li>Experience managing and delivering security solutions at scale.</li><li>Experience with DevOps, Software Build and Deployment systems, Software Composition Analysis</li><li>Experience with service-oriented architecture and web services security</li><li>Experience with AWS or similar enterprise cloud computing platforms</li><li>Experience with the application of threat modeling or other risk identification techniques</li><li>Demonstrated experience collaborating with other security engineers and developers to deliver complex projects</li><li>Excellent written and verbal communication skills with the ability to convey technical information to a wide variety of audiences</li><li>Strong and creative problem-solving abilities</li><li>Meets/exceeds Amazon’s leadership principles requirements for this role</li><li>Meets/exceeds Amazon’s functional/technical depth and complexity for this role</li></ul>Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.

Seattle

Sr. Security Engineer

Job summaryThe Amazon Information Security team is looking for a Senior Security Engineer to help ensure our services, applications, and websites are designed and implemented to the highest security standards. You have breadth and depth of security knowledge and can identify and advise on risks across multiple areas of an organization. You will join a team focused on Software Supply Chain Security (SSC-S) improvement initiatives and help drive transformative changes on how thousands of Amazon developer teams consume, build, operate and ship secure software. You will take a long-term view of Amazon's software development security processes and tools and work with limited guidance in the face of ambiguity.*The preferred location for this position is in Seattle, Austin or Arlington locations, however other locations may be considered as well.Key job responsibilities<ul><li>Evaluating and recommending new and emerging security products and technologies</li><li>Identifying security issues and risks, and developing mitigation plans</li><li>Through security risk assessments, identify repeatable work streams and influence automation of such streams to reduce cycle times and drive efficiency.</li><li>Participate in the design discussions and development of user stories for automation</li><li>Positively influence Supply Chain Security initiatives</li><li>Partner with engineering teams to develop Security tooling</li><li>Develop mechanisms that provides ongoing Leadership visibility of the security posture, threats and risks.</li><li>Establish credibility and maintain strong working relationships with technical groups involved with software supply chain security including but not limited to Security Teams, AWS (Amazon Web Services), Legal, Compliance, and Developer Community</li></ul>About the teamAt Amazon, we're working to be the most customer-centric company on earth. To get there, we need exceptionally talented, bright, and driven people. Join us!Inclusive Team Culture Here at Amazon, we embrace our differences. We are committed to furthering our culture of inclusion. We have ten employee-led affinity groups, reaching 40,000 employees in over 190 chapters globally. We have innovative benefit offerings, and host annual and ongoing learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences. Amazon’s culture of inclusion is reinforced within our 16 Leadership Principles, which remind team members to seek diverse perspectives, learn and be curious, and earn trust. Work/Life Balance Our team puts a high value on work-life balance. It isn’t about how many hours you spend at home or at work; it’s about the flow you establish that brings energy to both parts of your life. We believe striking the right balance between your personal and professional life is critical to life-long happiness and fulfillment. We offer flexibility in working hours and encourage you to find your own balance between your work and personal lives. Mentorship &amp; Career Growth Our team is dedicated to supporting new members. We have a broad mix of experience levels and tenures, and we’re building an environment that celebrates knowledge sharing and mentoring. We care about your career growth and strive to assign projects based on what will help each team member develop into a better-rounded professional and enable them to take on more complex tasks in the future.<h3>Basic Qualifications</h3><ul><li>BS in Computer Science or related field, or equivalent work experience</li><li>At least 5 years of experience in application security, threat modeling, secure coding, software development, secure software or system design</li><li>At least 3 years of experience in a development or security role working with development team(s) that delivered commercial software or software-based services</li><li>Advanced knowledge and understanding of any combination of the following: security engineering, system and network security, authentication and security protocols, cryptography, or application security</li><li>An understanding of network and web related protocols (such as, TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols)</li><li>Experience with multiple programming languages (such as, Java, C++, Ruby, Python, Perl, etc.)</li></ul><h3>Preferred Qualifications</h3><ul><li>Experience with DevOps, Software Build and Deployment systems, Software Composition Analysis</li><li>Experience with service-oriented architecture and web services security</li><li>Knowledge of, and experience with Software Supply Chain Security, NIST SSDF, SBOMs, Code Signing, and Verification</li><li>Experience with AWS or similar enterprise cloud computing platforms</li><li>Experience with the application of threat modeling or other risk identification techniques</li><li>Demonstrated experience collaborating with other security engineers and developers to deliver complex projects</li><li>Excellent written and verbal communication skills with the ability to convey technical information to a wide variety of audiences</li><li>Strong and creative problem-solving abilities</li><li>Meets/exceeds Amazon’s leadership principles requirements for this role</li><li>Meets/exceeds Amazon’s functional/technical depth and complexity for this role</li></ul>Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.

Security Engineer

Job summaryThe Devices and Services (D&amp;S) Trust &amp; Security team works to ensure that our devices and services are designed and implemented to the high standards required to maintain and enhance customer trust. Security and Privacy are paramount to maintaining trust and we need to continue to build trusted products, maintain and operate trusted environments, and advocate trust to customers and stakeholders. The team develops security automation for devices &amp; services, performs penetration testing, and handles and tracks incident responses to resolution. The Trust team is responsible for enabling business growth and innovation while honoring data policies and controls that help protect customer trust. We are responsible for defining and executing on the security and privacy requirements across the entire organization.Are you interested in being part of a top-notch security team covering all Amazon consumer devices (including hardware and low-level functionality) as well as key Amazon services supporting our consumer devices (such as Computer Vision, AppStore, Device Registration, Kindle, etc.)? Amazon Lab126 is looking for skilled and exceptional security researchers to find security issues in our products to better protect our customers. Your work directly impacts the way our customers, teams, and business across the globe get things done. If you care deeply about keeping customers safe, then we have a job for you! You can learn more about security at Lab 126 here: https://www.youtube.com/watch?v=k0UTTxzeGogKey job responsibilitiesIn this role, you will be part of a dedicated team of passionate security engineers performing vulnerability research to detect high impact issues in Amazon consumer products. You will work on identifying vulnerabilities in diverse product stacks spanning multiple architectures, SoCs to identify vulnerabilities in low level embedded software, operating systems, applications, peripherals or web client, web sites, and cloud services as well as introduce defenses to raise the effort for attackers. You will identify detective and preventative technology and automation to reduce the impact of security threats in advance and be directly involved in our response to critical security issues. You will work with security stakeholders within the company, security research community and partner organizations across the ecosystem to address security issues collaboration with product teams and to do the right thing for our organization. You will lead gap analysis efforts to identify learnings to improve product security. You're well-known for your excellent prioritization skills as well as your ability to communicate at all levels of an organization. If you're passionate about finding security bugs, analyzing security exploits, and enjoy seeing your work's impact across Amazon consumer products and services, then this position is for you. A day in the life• Perform vulnerability detection using variety of automated static, dynamic analysis as well as custom tooling (e.g. static analyzers, fuzzers, scanners, analyzers, etc.) to identify device or web services, vulnerabilities and develop proof of concept exploits.• Conduct campaigns to identify vulnerabilities in various platforms, technology stacks across devices (Android based, real time operating systems, protocols - Wi-Fi, BT, RF) and services (web services, cloud infrastructure and mobile applications)• Advocate for raising security bar for product teams by recommending security fixes, technical solutions and designs to enable product teams to mitigate classes of security vulnerabilities.• Perform analysis of publicly reported vulnerabilities and attacks to synthesize areas of proactive focus spanning product stacks.• Develop detailed technical documentation describing identified vulnerabilities, associated impact as well as recommendations for communication with internal engineering stakeholders as well as leadership• Perform analysis of reported issues and work with product, partner and vendor teams to remediate vulnerabilities. <h3>Basic Qualifications</h3>• Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, Cyber Security or a related field• 7+ years relevant work experience• 2+ year of development experience in C, C++, assembly (x86, x86-64, ARM) and/or Java• Experience with at least one scripting language (e.g. python, ruby, bash, JavaScript, Go)<h3>Preferred Qualifications</h3>Master’s degree in Computer Science, Computer Engineering, Electrical Engineering or equivalent. Candidates with experience in at least one of the areas is preferred. • Experience in performing vulnerability research and reporting vulnerabilities in widely used software or sharing contributions via public research, blogging, and presentations with the security community. • Experience in embedded/IoT device security or web services security specifically, with experience of performing software security audits, vulnerability discovery and analysis. • Experience with common software security vulnerabilities and methods of exploitation, such as memory corruption, privilege escalation, web application exploitation, file format vulnerabilities, protocol-based weaknesses, etc.• Experience with static and dynamic tools for vulnerability detection and exploit mitigation techniques• Experience with extracting firmware, reverse engineering a variety of hardware and software, including firmware, operating systems, and applications, binary analysis and proof of concept exploit development. • Knowledge of common wireless connectivity protocols with focus on protocol or implementation security vulnerabilities (e.g. Bluetooth, Wi-Fi, 802.15.4, Zigbee) or hardware security mechanisms, including secure boot, trusted execution environments or operating system internals and associated security issues with emphasis on Linux, Android and common RTOS environments• Experience with analysis tools such as IDA, Ghidra, Radare, Burp Suite, and network traffic dissectors such as Wireshark.o Experience with service-oriented architecture, web services security, AWS/cloud infrastructure securityo Foundation in, and in-depth technical knowledge of, security engineering, computer and network security, authentication, security protocols and applied cryptography.o Knowledge of network and web related protocols (e.g., TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols)keyword:digitalsecurityAmazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.Pursuant to the Los Angeles Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

California

Senior Security Vulnerability Researcher

EMW, Inc.

Deadline Date: Tuesday 16 August 2022 Requirement: Penetration Testing Services Location: Mons, BE Full time on-site: Yes NATO Grade: A3/115 Total Scope of the request (hours): 570 Required Start Date: 19 September 2022 End Contract Date: 31 December 2022 Required Security Clearance: NATO SECRET Duties and Role: The duties of the individual mainly focus on: <ul> <li>Provide Web and application level penetration testing;</li> <li>Provide security design reviews to ensure compliance with NATO policies and directives;</li> <li>Provide security consultancy and advice to projects, plans, and other entities;</li> <li>Brief at technical levels on security reports and testing outcome.</li> </ul>RequirementsSkill, Knowledge &amp; Experience: <ul><li>The candidate must have a currently active NATO SECRET security clearance.</li></ul>The required skillset for the contracted individual is extensive knowledge and experience (more than 5 years) in the following areas:<ul> <li>Web application and thick-client penetration testing;</li> <li>Assessing security vulnerabilities within OS, software, protocols &amp; networks;</li> <li>Researching and evaluating security products &amp; technologies;</li> <li>Knowledge in system and network administration of UNIX and Windows systems;</li> <li>Use of penetration testing tools, techniques, and recognized testing methodologies;</li> <li>Scripting skills in at least one of the following: Perl, Python, Ruby, shell (bash, ksh, csh);</li> <li>Technical knowledge in system and network security, authentication and security protocols, cryptography, application security, as well as, malware infection techniques and protection technologies;</li> <li>Ability to evaluate risks and formulate mitigation plans;</li> <li>Proven ability to write clear and structured technical reports including executive summary, technical findings and remediation plan.</li> </ul>

Mons

SC2022-002328 Penetration Testing Services (NS) - TUE 16 Aug

Apply to Cryptography Cyber Security Jobs in companies remotely and near you. New Cryptography Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Penetration Tester at Bishop Fox	Remote Full Time Pentester Consultant Javascript
Sr. Security Engineer at Amazon.com	Full Time Application Security Automation AWS C
Security Engineer at Amazon.com	Full Time Application Security Automation AWS C
Senior Security Vulnerability Researcher at Amazon.com	Remote Full Time Javascript Android Audits
SC2022-002328 Penetration Testing Services (NS) - TUE 16 Aug at EMW, Inc.	Full Time Contract Application Security Windows BASH

Cryptography Cyber Security Jobs

0 Cryptography Cyber Security Jobs. Page 1 of 1

5 closed cryptography cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Cryptography Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Cryptography Cyber Security Jobs

0 Cryptography Cyber Security Jobs. Page 1 of 1

5 closed cryptography cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Cryptography Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter