Veeva Systems

Veeva [NYSE: VEEV] is the leader in cloud-based software for the global life sciences industry. Committed to innovation, product excellence, and customer success, our customers range from the world’s largest pharmaceutical companies to emerging biotechs. Veeva’s software helps our customers bring medicines and therapies to patients faster.We are the first public company to become a <a href="https://www.veeva.com/pbc/" rel="noopener noreferrer nofollow ugc" target="_blank">Public Benefit Corporation</a>. As a PBC, we are committed to making the industries we serve more productive, and we are committed to creating high-quality employment opportunities.Veeva is a <a href="https://www.veeva.com/work-anywhere/" rel="noopener noreferrer nofollow ugc" target="_blank">Work Anywhere</a> company which means that you can choose to work in the environment that works best for you - on any given day. Whether you choose to work remotely from home or work in an office - it’s up to you.The RoleVeeva’s Security Engineering Team is seeking Red Teamers to help keep Veeva secure and safe from attackers. Our team in Columbus is growing, and we want you to join us! This role has a broad scope, ranging from attacking Veeva’s AWS services, infrastructure and processes, and products. Discovering weaknesses in Veeva’s architecture. Working with product and platform teams performing penetration tests on new products. Working with third-party testers and researchers to sharpen our detective and preventative capabilities. This role presents an ultimate test of one’s security knowledge and ability, along with the support of a team of highly skilled individuals.
<h3>What You'll Do </h3>
<ul>
<li>A Red Team Security Engineer at Veeva is expected to be strong in offensive security domains, testing, techniques, and practices.  Engineers in this role work closely with application product teams throughout Veeva. Security engineers will provide technical leadership and advice to developers, engineers, and third-party consultants.</li><li>As a Red Team Engineer, you must show exemplary judgment in making informed technical trade-offs of testing, short-term fixes, long-term security gains, and product team development. You must also demonstrate resilience and navigate difficult situations with composure and tact. Above all else, a strong sense of customer obsession is necessary to focus on the ultimate goal of keeping Veeva and its customers secure.</li><li>Participate in Red Team engagements throughout Veeva with few limits and restrictions</li><li>Conduct full-cycle engagements with development teams independently, or as part of a team</li><li>Perform manual examination of Veeva systems, websites, and networks to discover weaknesses</li><li>Thoroughly document exploits, attack chains, and proof of concept scenarios for technical reviews</li><li>Communicate findings and discoveries to prioritize and execute remediation plans</li><li>Coordinate findings and remediation from third-party penetration testers</li><li>Maintain AWS VPC and related testing systems for our internal and third-party testing programs</li><li>Conduct red team, and purple team exercises and coordinate tabletop exercises</li><li>Penetration tests of new products, concepts, and pilot products</li><li>Review Veeva product release notes and select new features to test throughout the year</li></ul>
<h3>Requirements </h3>
<ul>
<li>BS in Computer Science or related field, or equivalent work experience</li><li>2+ years in an Information Security role, preferably in red teaming, offensive security, penetration testing, reverse engineering, incident response, or vulnerability management</li><li>Advanced knowledge and understanding in various disciplines such as security engineering, system and network security, authentication and security protocols, cryptography, and application security</li><li>Experience with interpreted or compiled languages: Python, Ruby, Perl, PHP, C/C++, Java, C#</li><li>Experience with cloud service providers and their offerings, preferably AWS and its various technologies and APIs</li><li>Mobile testing on Windows, iOS, and Android</li><li>Experience with various testing tools, such as Netspaker, Kali Linux, Metasploit, Nmap, Nessus, Burp Suite, etc.</li><li>Familiar with offensive TTPs (Tactics, Techniques, and Procedures) including post-exploitation and lateral movement</li><li>Experience with Redhat, AWS Linux, AWS Linux 2, Windows Server 2012, 2016 and 2019</li><li>Understanding of one or more standards: OSWAP Top 10, SANS Top 20, NIST 800-53, CIS, CSC, or other security standards</li></ul>
<h3>Nice to Have </h3>
<ul>
<li>Industry penetration certifications such as OSCP, GPEN, GXPN, GWAPT, etc.</li><li>Industry security certifications such as CISSP, CEH, or others</li><li>Experience in conducting social engineering-focused assessments</li><li>Experience in CTF competitions, CVE research, and/or Bug Bounty recognition</li><li>Knowledge of the MITRE ATT&amp;CK Framework</li><li>Experience in Web and Mobile (Android/iOS) based application/service assessment</li><li>Experience in Wireless and Network assessment in enterprise infrastructure</li><li>Experience in reverse engineering and associated tooling such as IDA</li><li>Experience in Advanced Persistent Threat exploits</li><li>Experience with Web Application Firewalls (WAF), IDS/IPS, or other security platforms</li><li>Knowledge of fuzzing, memory corruption, and exploit development</li><li>Knowledge about hardware hacking</li></ul>#LI-RemoteUS#BI-RemoteVeeva’s headquarters is located in the San Francisco Bay Area with offices in more than 15 countries around the world. Veeva is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity or expression, religion, national origin or ancestry, age, disability, marital status, pregnancy, protected veteran status, protected genetic information, political affiliation, or any other characteristics protected by local laws, regulations, or ordinances. If you need assistance or accommodation due to a disability or special need when applying for a role or in our recruitment process, please contact us at talent_accommodations@veeva.com.

New York

Security Engineer - Red Team Penetration Testing

Sinch

Are you ready to put your mark on one of Sweden’s most leading tech brand? We are one of the most successful CPAAS companies in the world, according to Forbes Magazine. We're not just experts in messaging...we’re #1. Our cloud communications platform reaches every mobile phone on the planet - in seconds or less. It is the Systems &amp; Operations team’s role to put us into the spotlight. Are you up for the challenge?The essence of the roleAs an Information Security Analyst / Sr. Analyst, you will design and implement IT security systems to protect the organization's computer networks from cyber-attacks. You will also help develop organization wide best practices for cyber security. You will monitor computer networks for security incidents and document all security issues or breaches you find. An ideal candidate will have a bachelor's degree / masters degree in computer science with a minimum of 3-5 years of experience in information &amp; Cyber security. You need to be proficient in vulnerability assessment, penetration testing and techniques and helping to mitigate the issues and documenting the same. In addition, you will have excellent written and oral communication skill and understand patch management and firewalls, antivirus and IDS/IPS, Anti-malware tools, DLP, Proxy and cloud security concepts.Requirements<ul> <li>Candidate should have good knowledge and Hands-On Experience of Defensive cyber security; Threat Intelligence &amp; Forensics</li> <li>Perform Vulnerability Assessment &amp; Penetration Testing using Black-Box / Grey Box External Network VA/PT assessments following structured phases.</li> <li>Intimate knowledge and hands-on experience using various vulnerability testing tools like Nessus, Web Inspect, nmap, Burp Suite, Nikto, ZAP, etc.</li> <li>Strong knowledge of CVE (Common Vulnerabilities and Exposures) vectors.</li> <li>Strong knowledge of the OWASP Top 10, SANS top 25, WASC security Standards, and detailed knowledge of conventional web application attack vectors such as SQL injection, CSRF, XSS, Session Management issues, Insecure Direct Object Reference, Clickjacking, buffer overflows, etc. Experience in manual application penetration testing of web-based applications, thick-client applications, mobile applications, web services, API etc. </li> <li>Should have knowledge of Risk Rating Standards</li> <li>Should understand web application architecture and Secure development life cycle.</li> <li>Understanding of secure code review and applicable tools</li> <li>Ability to act upon identified vulnerabilities</li> <li>Should have Prepared audit reports and findings tracker sheets for Infra &amp; applications.</li> <li>Analyze IT requirements and provide objective advice on the use of IT security requirements</li> <li>Gather feedback from end users to continue to improve systems</li> <li>Design, analyze and implement efficient IT security systems</li> <li>Good working experience in security testing &amp; monitoring</li> <li>Has intermediate to advanced knowledge on Windows server and Linux OS.</li> </ul>As our new ROLE you will:<ul> <li>3 to 5 years of experience in information security </li> <li>Excellent written and oral communication skills</li> <li>Experienced with penetration testing and techniques</li> <li>Ability to identify and mitigate network vulnerabilities</li> <li>Understand patch management; Risk management &amp; Incident Management</li> <li>Knowledge of firewalls, antivirus, IDPS, WAF technologies, Microsoft Security technologies and cloud security concepts</li> <li>Experienced in installing security software and documenting security issues.</li> </ul>Education: <ul> <li>Bachelor's B.E / B. Tech. / MCA</li> <li>CEH, OSCP etc.</li> <li>Basic knowledge of CCNA; ISO27001:2013 framework, Risk framework; Understanding of CCSK or equivalent.</li> </ul>Benefits<ul> <li>Private Health Insurance</li> <li>Training &amp; Development</li> </ul>

Noida

Sr. Analyst - Information Security

Mindera

Here at Mindera, we are building a world class team and would love it for you to join us. As an Information Security Officer, you’ll be able to research, develop, implement, test and review Mindera’s Security policies in order to protect information and prevent unauthorised access to all of our projects, all while making sure you have fun learning, interacting with all the intervenients and building things.Expected travelling time (UK and USA):: 0%-15%, varies according to project/client.Requirements<h3>You are good at</h3><ul> <li>Informing users about Mindera security scope (internal and externally)</li> <li>Performing security testing, reviews, and risk and vulnerability assessments</li> <li>Knowledge of security tools like metasploit, nmap, nessus/openvas, etc.</li> <li>Implementing security measures and tests</li> <li>Working with networking technologies, firewalls, IDS and SIEM</li> <li>Working with auditor partners on security matters</li> <li>Communication skills and teamwork </li> </ul> <h3>You rock at</h3> <ul> <li>Applying the standards in the ISO/IEC 27000-series, GDPR and a bit of PCI/DSS </li> <li>Creating security analysis reports and other relevant customer-faced documentation</li> <li>Automating tasks on managing, assessing and configuring security-related services</li> <li>Providing direct support to each team regarding implementation of security best practices</li> <li>Providing full technical feedback to teams based on deficiencies identified during audits</li> <li>Feeling humble and motivated by being able to learn with and teach others</li> <li>Being self-driven and working with little supervision towards a common team or company purpose</li> </ul>BenefitsThe Things We Really Care About:<ul> <li>Health Insurance, because health comes first</li> <li>Flexible working hours</li> <li>Open holidays, take the time you need for yourself</li> <li>Profit distribution for everyone</li> <li>Mindera Annual Trip, Sports, and sharing groups to connect and have fun!</li> <li>Training &amp; conferences, create your own training plan</li> <li>Child Care vouchers </li> </ul>Other Good Things:<ul> <li>Choose Laptop &amp; Peripherals that best suit your needs</li> <li>Hotspot with unlimited usage (PT), for work or Netflix ;)</li> <li>We have amazing offices in Porto, Aveiro, and Coimbra if you want to physically connect with minders. Remote is also an option.</li> <li>At the offices, we have a wide range of snacks to keep you fed and healthy</li> <li>Partnerships with local businesses</li> </ul>

Porto

Information Security Officer

Fivesky

Do you consider yourself an expert in application, data, and infrastructure architecture? Are you a strategic thinker? Do you have a passion for business strategy and processes? Then you could be Fivesky’s next Cybersecurity Architect.
What you'll do:
<ul>
<li>Provide simplified, secure, and automated control patterns.</li>
<li>You will be involved all the way through, ensuring the right threats are identified with corporate threat intelligence teams</li>
<li>Co-working with the architects to design effective control solutions and testing them to destruction in lab and dev environments to ensure the control patterns actually deliver against expected outcomes.</li>
<li>Collaborate with internal teams and business leaders alike, creating strategically sound and validated Target State Architectures. Your work will have a tremendous and positive impact, whether it’s in-house, in collaboration with technologists global technology community, or in partnership with some of the most important tech firms in the world.</li>
</ul>
What we are looking for from you:
<ul>
<li>Fluent in architecture and design across all systems</li>
<li>Knowledge in at least one area of technical architecture</li>
<li>Strategic thinking and passion for business strategy and business processes</li>
<li>Experience in risk and risk control compliance</li>
<li>Ability to work collaboratively in teams and develop meaningful relationships to achieve common goals6+ year background of technical excellence across 2 of the following: Red Team exercises, Penetration testing, Exploit identification &amp; mitigation</li>
<li>Expertise in objective oriented penetration exercises</li>
<li>Detailed ability to work through technical system designs &amp; implementations to identify weaknesses</li>
<li>Experience reporting business relevance and the likelihood of attack scenario impacts</li>
</ul>
 It'll be good if you have:
<ul>
<li>Experience with Networking fundamentals (all OSI layers, protocols), Windows/Linux/Unix or Mac operating systems</li>
<li>Cloud-based systems (IaaS and PaaS in private or public environments), their configuration, and interactions, OS and software vulnerability and exploitation techniques, commercial or open-source offensive security tools for reconnaissance, scanning, exploitation and post-exploitation (e.g. Cobalt Strike, Metasploit, Nmap, Nessus, Burp Suite)</li>
</ul>
At Fivesky, our employees are our greatest asset and the focal point around which we operate; therefore, we always want the best for our employees. In addition to offering competitive compensation plans and long-term career opportunities, we offer an attractive mix of benefit plans to our employees that include provisions for vacation, holiday pay, and sick days.
Fivesky is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, genetic information, or any other characteristic protected by law.
This is a full-time, direct employment opportunity in Houston, TX. The salary is open based on experience and qualifications.
FS-RID-0547

Cybersecurity Architect (Pen Testing)

Coupa Software, Inc.

Coupa Software (NASDAQ: COUP), a leader in business spend management (BSM), has been certified as a “Great Place to Work” by the <a href="https://www.greatplacetowork.com/certified-company/7003229" rel="noopener noreferrer nofollow ugc" target="_blank">Great Place to Work</a> organization. We deliver “Value as a Service” by helping our customers maximize their spend under management, achieve significant cost savings and drive profitability. Coupa provides a unified, cloud-based spend management platform that connects hundreds of organizations representing the Americas, EMEA, and APAC with millions of suppliers globally. The Coupa platform provides greater visibility into and control over how companies spend money. Customers – small, medium and large – have used the Coupa platform to bring billions of dollars in cumulative spend under management. Learn more at <a href="http://cts.businesswire.com/ct/CT?id=smartlink&amp;url=http%3A%2F%2Fwww.coupa.com&amp;esheet=51114752&amp;newsitemid=20150601006470&amp;lan=en-US&amp;anchor=www.coupa.com&amp;index=2&amp;md5=a987f008a6f03bd98fccc16218fcd14a" rel="noopener noreferrer nofollow ugc" target="_blank">www.coupa.com</a>. Read more on the <a href="http://cts.businesswire.com/ct/CT?id=smartlink&amp;url=http%3A%2F%2Fwww.coupa.com%2Fblog%2F&amp;esheet=51114752&amp;newsitemid=20150601006470&amp;lan=en-US&amp;anchor=Coupa+Blog&amp;index=3&amp;md5=eb22c8026e1b468cb5d98c71dc16baf3" rel="noopener noreferrer nofollow ugc" target="_blank">Coupa Blog</a> or follow <a href="http://cts.businesswire.com/ct/CT?id=smartlink&amp;url=https%3A%2F%2Ftwitter.com%2Fcoupa&amp;esheet=51114752&amp;newsitemid=20150601006470&amp;lan=en-US&amp;anchor=%40Coupa+on+Twitter&amp;index=4&amp;md5=a8a25a82b02e70c890f812b09eb87a15" rel="noopener noreferrer nofollow ugc" target="_blank">@Coupa on Twitter</a>.Do you want to work for Coupa Software, the world's leading provider of cloud-based spend management solutions? We’re a company that had a successful IPO in October 2016 (NASDAQ: COUP) to fuel our innovation and growth. At Coupa, we’re building a great company that is laser focused on three core values:1. Ensure Customer Success – Obsessive and unwavering commitment to making customers successful.2. Focus On Results – Relentless focus on delivering results through innovation and a bias for action.3. Strive For Excellence – Commitment to a collaborative environment infused with professionalism, integrity, passion, and accountability.
<h3>Responsibilities:</h3>
<ul>
<li>Build models of threats based on data analysis, CVEs, vendor and discovered threats and exploits</li><li>* Actively seek out and develop action plans to resolve threats</li><li>Participate as a senior security engineer as an escalation point for security related events including: incidents, vulnerabilities, and compliance related controls within Coupa’s cloud based production services and platform</li><li>Collaborate with Engineering and Operations teams to address security related issues</li><li>Monitor and analyze security data to ensure we maintain and exceed key performance indicators</li><li>Troubleshoot and document security incidents, with an eye to increasing our threat modeling fidelity and to proactively find and eliminate threats</li><li>Conduct security risk assessments on behalf of internal and external customers providing consistent technical measurements of risk</li><li>Produce and present security reports for Coupa functional teams and leadership</li><li>Automation of security assessments and other security related SecOps tasks</li><li>Resolve security issues from assessments and other sources and deliver upon assigned security projects</li><li>Implement and maintain security solutions to detect and prevent security related risks including, but not limited to: firewalls, hids/fim, workload protection, antivirus, sast/dast, application security, single sign-on, and custom tools</li><li>Contribute to Coupa’s security strategy</li><li>Advocate Security best practices throughout Coupa</li><li>Define and iterate upon best security practices</li><li>Participate in Security Incident On-call rotation</li></ul>
<h3>Requirements:</h3>
<ul>
<li>5+ years of experience in an equivalent security related role</li><li>* At least 2 years' experience with threat modeling and threat hunting</li><li>Strong experience in web application security eg (XSS, CSRF, SQL injection)</li><li>Familiarity with Cloud Computing and Software as a Service</li><li>Hands-on operational experience with security tools such as Palo Alto Twistlock, Prisma Cloud, file integrity monitoring, firewalls, antivirus, Sonarqube, application security, Kibana, SSEC, Rapid7, BurpSuite, Nmap and SSO</li><li>2+ years of experience with automation using Java, Perl, PHP, Python, Ruby or equivalent</li><li>Strong communication skills; both written and oral</li><li>Ability to work in a team environment</li><li>Experience with designing and/or delivering tools</li><li>Software or systems development experience a plus</li><li>Infrastructure delivery experience a plus</li></ul>At Coupa, we have a strong and innovative team dedicated to improving the spend management processes of today’s dynamic businesses. It’s our people who make it happen, and we strive to attract and retain the best in every discipline.We take care of our employees every way we can, with competitive compensation packages, as well as restricted stock units, an Employee Stock Purchase Program (ESPP), comprehensive health benefits for employees and their families, retirement and savings plans with employer match, a flexible work environment, no limit vacations for exempt employees, non-exempt employees are on an accrual basis for PTO, catered lunches…And much more!As part of our dedication to the diversity of our workforce, Coupa is committed to Equal Employment Opportunity without regard for race, ethnicity, gender, protected veteran status, disability, sexual orientation, gender identity or religion.Please be advised, inquiries or resumes from recruiters will not be accepted.

Pune

Sr. Security Engineer - threat hunting

Apply to NMAP Cyber Security Jobs in companies remotely and near you. New NMAP Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Security Engineer - Red Team Penetration Testing at Veeva Systems	Android Application Security AWS Burp Suite C
Sr. Analyst - Information Security at Sinch	Burp Suite CEH Cloud Forensics IDS
Information Security Officer at Mindera	Audits GDPR IDS Metasploit Nessus
Cybersecurity Architect (Pen Testing) at Fivesky	Burp Suite Cloud Cobalt Strike Compliance Exploit
Sr. Security Engineer - threat hunting at Coupa Software, Inc.	Application Security Automation Burpsuite DAST Exploits

NMAP Cyber Security Jobs

0 NMAP Cyber Security Jobs. Page 1 of 1

5 closed nmap cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

NMAP Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

NMAP Cyber Security Jobs

0 NMAP Cyber Security Jobs. Page 1 of 1

5 closed nmap cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

NMAP Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter