Bishop Fox

Bishop Fox is the leading authority in offensive security, providing solutions ranging from continuous penetration testing, red teaming, and attack surface management to product, cloud, and application security assessments. We’ve worked with more than a quarter of the Fortune 100, half of the Fortune 10, eight of the top 10 global technology companies, and all of the top global media companies. Our Cosmos platform was named Best Emerging Technology in the 2021 SC Media Awards and our offerings are consistently ranked as “world class” in customer experience surveys. For more than 16 years, we've been contributing and giving back to the security community. We’ve published more than 16 open source tools and 50 security advisories in the last five years alone. Learn more at bishopfox.com or follow us on Twitter.
We’re looking for talented, experienced professional hackers to help us secure some of the world’s most complex software and sophisticated technologies. You’ll be working alongside our US and other internationally-based teams supporting clients across multiple industries. 
Who You Are and What You’ll Do
You fancy yourself a Pentester. You know your way around source code. You’ve plundered apps and pillaged networks (legally, of course). You have a passion for hacking and information security. If you’re not already doing it professionally, you’re pen testing in your free time. You may also have written a few blog posts about your favorite hacks or have presented at a handful of conferences – with an eye to doing more.
With Bishop Fox, your responsibilities would include testing web applications, hacking networks, and reversing software. Some days, you’ll be red teaming wireless networks and physically breaking into buildings. Other days, you’ll be analyzing source code and building threat models. Every day at Bishop Fox, you’ll be learning.
As a consultant, you’ll work on a variety of projects which include short-term engagements and extended program work with well-established clients, you'll solve challenging technical problems and build creative solutions. As a trusted advisor, you’ll provide your expert opinion to help our clients navigate difficult business decisions.                                                       
Your Education and Experience
You just have to be good at and, most importantly, love what you do. Don’t worry about a piece of paper; we won’t. Here’s a list of qualities we’re looking for:
<ul>
<li>Penetration testing and code review skills</li>
<li>Vulnerability assessment experience</li>
<li>Understanding security fundamentals and common vulnerabilities (e.g. OWASP Top Ten)</li>
<li>2+ years of application security experience</li>
<li>Additional experience in Cloud security; background in system and network security, authentication and security protocols, and applied cryptography are helpful</li>
<li>Scripting/programming skills (e.g., Python, Ruby, Java, JavaScript, etc.)</li>
<li>Network and web-related protocol knowledge (e.g., TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols)</li>
<li>Advanced relevant academic training is a definite bonus</li>
</ul>
Bishop Fox has always offered its employees the ability to work remotely, and for this role you could work remotely in the United States or Mexico. Equity is offered to all employees and vesting starts on the first day.  You also have the opportunity to earn additional equity.  Our comprehensive benefits program is tailored to meet your needs at an affordable price. We embrace diversity and an inclusive culture.  We value our employees and who they are, which fosters a powerful and collective talent base to successfully serve our clients and the security community with unparalleled expertise.  
Bishop Fox is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex including sexual orientation and gender identity, national origin, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law.  All new hires must pass a background check as a condition of employment.

United States

Penetration Tester

Amazon.com

Job summary**This role is also open to alternative locations including: Austin, TX | New York, NY | Seattle, WA and othersAmazon’s Offensive Security organization is growing and is seeking Software Development Engineers to join a new team to provide software development solutions for our Offensive Security teams (Penetration Test, Red Team, Bug Bounty). In this role, you will help build, own, maintain, and improve software platforms and solutions that will enable our offensive security teams to focus on finding security vulnerabilities across Amazon. You will work with other members of our growing offensive security teams to investigate design approaches, prototype new technology, and evaluate technical feasibility of ideas. You will write high quality distributed software solutions, operating at a scale that’s not available anywhere else. Come help us drive software development best practices, operational and engineering excellence across the organization, and impact how other teams operate.Key job responsibilities* Lead and participate in the design, development, testing, deployment, and operation of software platforms across the Offensive Security organization* Apply development best practices and operational and engineering excellence across the Offensive Security organization* Support effective teamwork, communication, collaboration and commitment across multiple disparate groups with competing priorities* Implement improvements to internal program and processes* Write and deliver high-quality documents for technical and non-technical audiences<h3>Basic Qualifications</h3><ul><li>4+ years of professional software development experience</li><li>3+ years of programming experience with at least one software programming language</li><li>2+ years of experience contributing to the system design or architecture (architecture, design patterns, reliability and scaling) of new and current systems</li><li>Experience as a mentor, tech lead OR leading an engineering team</li></ul><h3>Preferred Qualifications</h3>* Bachelor’s degree in Computer Science, Computer Engineering, or related technical discipline* Knowledge of Offensive Security fundamentals (e.g. Red Teaming, Penetration Testing)* Practical experience with software engineering best practices and developing software solutions in a cloud environment* Experience with Linux, security, and/or networking protocols* Familiarity with Machine Learning* Experience with cloud service providers and their offerings, preferably AWS, and its various technologies and servicesAmazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.

San Diego

Sr Software Dev Engineer, Offensive Security Development and Engineering

Gympass

GET TO KNOW US
We simplify wellness so you can find everything in one place. Gympass is a corporate wellness platform that connects you to thousands of fitness &amp; wellness partners, all with one simple monthly membership. Founded in 2012 and headquartered in NYC, we have a growing global team in 11 offices around the world. At Gympass, you not only have the opportunity to build a career in a fast-paced global environment - but you'll make wellbeing universal, so everyone can be happy and healthy.
WHAT MAKES A GYMPASSER?
We are passionate about our mission! Whatever your job title is, here you can make a global impact and change people’s lives. At Gympass, we collaborate, set high achievable goal expectations, and focus on the end result.  It's a challenging, evolving environment that allows you to learn and grow. You will face a disruptive and emerging business model that will push you in several areas, with no boundaries for creation and collaboration.
THE OPPORTUNITY
We are hiring a SENIOR ENGINEER in OFFENSIVE SECURITY for our INFOSEC TEAM in PORTUGAL!
YOUR IMPACT
We are looking for a team member to help us focus on Secure Application Engineering, challenge our status quo, create missions that improve our engineers and company security and find how to improve the way we work to deliver an amazing product that our customers can trust. We are all-in the cloud and use software engineering principles to solve large scale production challenges.
Within this domain you will work with infosec offensive missions, crafting scenarios and running tests, automation, metric gathering, log scavenging and incident management.
<ul>
<li>You have ran physical and virtual missions as a red team member to understand how products work</li>
<li>You understand how cloud providers structure their offering and the often overlooked places that actors may abuse</li>
<li>You understand observability and metrics</li>
<li>You can write great documentation</li>
<li>You helped teams get identify gaps on mobile and web applications</li>
<li>You make the offensive security landscape accessible for engineers and product managers</li>
</ul>
 WHO YOU ARE
<ul>
<li>3+ years of professional experience in cyber security or related field.</li>
<li>Strong knowledge of offensive security, focused on the Red Team.</li>
<li>Knowledge in Public Cloud infrastructre (preferably AWS).</li>
<li>Experience in reporting on the Red Team engagements providing an in-depth analysis of the security issues identified.</li>
<li>Understanding of cybersecurity frameworks such as OWASP and  Mitre’s ATT&amp;CK.</li>
<li>Awareness of common software security flaws and web application security best practices.</li>
<li>Ability to create tools and scripts for automating security tasks.</li>
<li>Familiarity with the different techniques for exploitations, such as recognition, enumeration, scanning, post-scanning, lateral movement, etc...</li>
<li>Experience with threat modeling.</li>
<li>Knowledge in CI/CD pipelines.</li>
</ul>
The knowledge below is considered a plus:
<ul>
<li>
<ul>
<li>Programming skills in any modern language (.NET, Java, Go, Kotlin, Python, NodeJS, Rust, etc...)</li>
<li>Familiarity with Bug Bounty programs.</li>
<li>Familiarity with CTF challenges.</li>
<li>Knowledge in Burp Suite, Tenable, Shodan, Security ScoreCard, or related tools. </li>
</ul>
</li>
</ul>
WHAT WE OFFER YOU 
We're a wellness company that is committed to the health and well-being of our employees. Our flexible program allows you to customize your benefits, according to your needs! Our benefits include:
WELLNESS: Health, dental, and life insurance.
FLEXIBLE WORK: Choose when and where you work. For most, this will be a hybrid office/remote structure but can vary depending on the needs of the role and employee preferences. We offer all employees a home office stipend and a monthly flexible work allowance to help cover the costs of working from home.
GYMPASS DISCOUNT: We believe in our mission and encourage our employees and their families to find their passion too. Access onsite gyms and fitness studios, digital fitness programs, and online wellness resources for meditation, nutrition, mental health support, and more.
PAID TIME OFF: We know how important it is that our employees take time away from work to recharge. 
BR: Vacations after 6 months and 3 days off per year + 1 day off for each year of tenure (up to 5 additional days) + extra day off for your birthday.
PAID PARENTAL LEAVE: Welcoming a new child is one of the most special moments in your life and we want our employees to take the time to be present and enjoy their growing family.
BR: 100% paid parental leave of 6 weeks to all new parents, of both biological and adopted children, regardless of gender and parent's relationship with the co-parent, Also extended maternity leave under local legislation 
CAREER GROWTH: Outstanding opportunities for personal and career growth. That means we maintain a growth mindset in everything we do and invest deeply in employee development.  
CULTURE: An exciting and supportive atmosphere with ambitious people from around the world! 
FLEXIBLE WORK: We give our employees some flexibility to adjust their working hours, letting them adjust their starting time within a range of 3 hours. 
And to get a glimpse of Life at Gympass...follow us on<a href="https://www.instagram.com/gympasscareers/" rel="noopener noreferrer nofollow ugc" target="_blank"> Instagram</a> @gympasscareers and<a href="https://www.linkedin.com/company/gympass/?viewAsMember=true" rel="noopener noreferrer nofollow ugc" target="_blank"> LinkedIn</a>! 
Belonging @ Gympass
Gympass is committed to creating a diverse work environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, sex, gender identity, sexual orientation, age, non-disqualifying physical or mental disability, national origin, veteran status, or any other basis covered by appropriate law. 
Questions on how we treat your personal data? See our <a href="https://lifeatgympass.wpengine.com/?p=105" rel="noopener noreferrer nofollow ugc" target="_blank">Job Applicant Privacy Notice</a>.

São Paulo

Security Engineer | Offensive Security

Ledger

We're making the world of digital assets accessible and secure for everyone. Join the mission. Founded in 2014, Ledger is the global platform for digital assets and Web3. Over 15% of the world’s crypto assets are secured through our Ledger Nanos. Headquartered in Paris and Vierzon, with offices in the UK, US, Switzerland and Singapore, Ledger has a team of more than 700 professionals developing a variety of products and services to enable individuals and companies to securely buy, store, swap, grow and manage crypto assets – including the Ledger hardware wallets line with more than 5 millions units already sold in 180 countries. At Ledger, we embody the values that make us unique: Pragmatism, Audacity, Commitment, Trust and Transparency. Have a look at our Origins video <a href="https://www.youtube.com/watch?v=Etqa_ECbz3M" rel="noopener noreferrer nofollow ugc" target="_blank">here</a>. ​The Donjon is the team in charge of the security of all the products built at Ledger. As a B2C security engineer, your daily job will be to attack our hardware wallets and the whole ecosystem they interact with, in order to maintain and improve our leadership in the industry.
<h3>Your mission:</h3>
<ul>
<li>Research cutting-edge offensive security techniques,</li><li>Develop tools and exploits for our products, and provide fixes for them,</li><li>Perform security reviews of new products or new features launched by Ledger,</li><li>Perform security research on other products used in the cryptocurrency industry (hardware and software wallets, smart contracts, secure hardware...),</li><li>Promote writing secure code to engineering teams,</li><li>Present your work in academic and hacking conferences all over the world.</li></ul>
<h3>You have at least 2 of the following skills:</h3>
<ul>
<li>Fluency in C and Python, including secure programming in these languages.</li><li>Knowledge in reverse engineering and binary analysis.</li><li>Good knowledge of exploitation techniques, and of mitigations against such techniques.</li><li>Experience with static analysis tools.</li><li>Development of fuzzers, or tools that automate security analysis.</li><li>Design of secure architectures.</li><li>Ability to develop and document methods, standards, and guidelines.</li></ul>
<h3>Following skills are a plus:</h3>
<ul>
<li>Experience in embedded security,</li><li>Good knowledge of applied cryptography,</li><li>Experience in smart contracts security,</li><li>Rust programming,</li><li>Scala programming.</li></ul>
<h3>What we’re looking for:</h3>
<ul>
<li>Self-motivated with a strong ability to work and maintain security knowledge in a changing landscape.</li></ul>
<h3>What’s in it for you?</h3>
<ul>
<li>Equity: Employees are the foundation of our success, and we award stock options so you can share in that success as we grow. </li><li>Flexibility: A hybrid work policy.</li><li>Social: Annual company outing for Ledgerdary Days, plus frequent social events, snacks and drinks</li><li>Medical: Comprehensive health insurance policy offering extensive medical, dental and vision care coverage. </li><li>Well-being: Personal development, coaching &amp; fitness with our dedicated partners.</li><li>Vacation: Five weeks of paid leave per year, in addition to national holidays and rest &amp; relaxation (RTT) days.</li><li>High tech: Access to high performance office equipment and gadgets, including Apple products. </li><li>Transport: Ledger reimburses part of your preferred means of transportation. </li><li>Discounts: Employee discount on all our products.</li></ul>We are an equal opportunity employer for all without any distinction of gender, ethnicity, religion, sexual orientation, social status, disability or age.

Montpellier

Senior Security Engineer - Donjon

Bishop Fox is the leading authority in offensive security, providing solutions ranging from continuous penetration testing, red teaming, and attack surface management to product, cloud, and application security assessments. We’ve worked with more than a quarter of the Fortune 100, half of the Fortune 10, eight of the top 10 global technology companies, and all of the top global media companies. Our Cosmos platform was named Best Emerging Technology in the 2021 SC Media Awards and our offerings are consistently ranked as “world class” in customer experience surveys. For more than 16 years, we've been contributing and giving back to the security community. We’ve published more than 16 open source tools and 50 security advisories in the last five years alone. Learn more at <a href="https://bishopfox.com/" rel="noopener noreferrer nofollow ugc" target="_blank">bishopfox.com</a> or follow us on <a href="https://twitter.com/bishopfox" rel="noopener noreferrer nofollow ugc" target="_blank">Twitter</a>.  
Given our exceptional growth we are expanding and hiring Penetration Test Interns to join us on this exciting journey. You fancy yourself a pentester. You know your way around source code. You’ve plundered apps and pillaged networks (legally, of course). You have a passion for hacking and information security. Ideally, you’ve attended a few security conferences and competed in some CTFs. In your spare time, you work on your home lab, update your personal security blog and participate in Reddit netsec threads.  

Responsibilities  
As a pen testing intern, you’ll have the chance to train individually with some of the industry’s VIPs. You’ll gain priceless firsthand experience with consulting and participate in cutting-edge research and thought leadership projects. No two days are the same here, but what we can guarantee is that every day at Bishop Fox, you’ll be learning. Plus, you’ll work in a casual environment filled with plenty of laidback and friendly folks. If you haven’t realized it yet, this is no ordinary internship. 

Requirements 
We believe that what we do makes an impact, and our culture reflects it in the best possible way. Every one of us plays a role in our success. We value our time and our well-being, we love what we do, and we look out for one another. Bishop Fox offers competitive salaries, travel opportunities, flexible schedules, and a one-of-a-kind environment. For the right candidate, it will feel like a second home. 
In addition to the above, the following is a list of skills and traits that describe you. If you have most of these, we’d like to speak with you.  
<ul>
<li>A passion for technology, particularly information security</li>
<li>Previous system administrator and/or programming experience</li>
<li>Demonstrated web development knowledge</li>
<li>Problem-solving expertise</li>
<li>Strong work ethic</li>
<li>An enthusiasm to learn all the things</li>
<li>An amicable and easygoing personality</li>
<li>Strong communication skills (i.e. written and verbal)</li>
<li>You must need to be on your last year of university or graduate.  </li>
</ul>
Candidates must be available to intern in 2022 for 6 months starting in September. 

¿Estás interesado? Drop us a line today! 

Bishop Fox has always allowed its employees to work remotely, and this role could work anywhere in Mexico. Our comprehensive benefits program is tailored to meet your needs at an affordable price. We embrace diversity and an inclusive culture. We value our employees and who they are, which fosters a powerful and collective talent base to successfully serve our clients and the security community with unparalleled expertise.   
Bishop Fox is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex including sexual orientation and gender identity, national origin, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law.  All new hires must pass a background check as a condition of employment.

Mexico City

Penetration Test Intern

Apply to Offensive Security Cyber Security Jobs in companies remotely and near you. New Offensive Security Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Penetration Tester at Bishop Fox	Remote Full Time Pentester Consultant Javascript
Sr Software Dev Engineer, Offensive Security Development and Engineering at Amazon.com	Remote Full Time Red Team AWS Cloud
Security Engineer \| Offensive Security at Gympass	Remote Full Time Red Team Application Security Automation
Senior Security Engineer - Donjon at Ledger	C Crypto Cryptography Exploits Offensive Security
Penetration Test Intern at Bishop Fox	Remote Internship Pentester Administrator Consulting

Offensive Security Cyber Security Jobs

0 Offensive Security Cyber Security Jobs. Page 1 of 1

5 closed offensive security cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Offensive Security Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Offensive Security Cyber Security Jobs

0 Offensive Security Cyber Security Jobs. Page 1 of 1

5 closed offensive security cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Offensive Security Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter