Ninja Van

Ninja Van is a late-stage logtech startup that is disrupting a massive industry with innovation and cutting edge technology. Launched 2014 in Singapore, we have grown rapidly to become one of Southeast Asia's largest and fastest-growing express logistics companies. Since our inception, we’ve delivered to 100 million different customers across the region with added predictability, flexibility and convenience. Join us in our mission to connect shippers and shoppers across Southeast Asia to a world of new possibilities. More about us: - We process 250 million API requests and 3TB of data every day.- We deliver more than 1.5 million parcels every day.- 100% network coverage with 1000+ hubs and stations in 6 SEA markets (Singapore, Malaysia, Indonesia, Thailand, Vietnam and Philippines), reaching 500 million consumers.- 600,000 active shippers in all e-commerce segments, from the largest marketplaces to the individual social commerce sellers.- Raised more than US$500 million over five rounds.We are looking for world-class talent to join our crack team of engineers, product managers and designers. We want people who are passionate about creating software that makes a difference to the world. We like people who are brimming with ideas and who take initiative rather than wait to be told what to do. We prize team-first mentality, personal responsibility and tenacity to solve hard problems and meet deadlines. As part of a small and lean team, you will have a very direct impact on the success of the company. You need to have knowledge in securing inhouse developed products by performing Web Application, Mobile and API security testing with knowledge of OWASP Top 10 vulnerabilities.As a team member, you will work with engineering teams to build secure products. Being part of our team, you will manage a portfolio of Web Application’s, Mobile Application Security and API’s Security. There would also be knowledge sharing sessions by attending various security conferences, trainings and internal hackathons.
<h3>Role and Responsibilities </h3>
<ul>
<li> Work individually or as a part of team conducting manual code reviews, static vulnerability scanning, vulnerability validations and false positive analysis                                                                         </li><li> Enhance existing application security tools and introduce new tools where applicable                                                                                 </li><li> Perform Application Security assessment and sometimes manual code reviews of web applications, web services, mobile, front-end &amp; back-end services                     </li><li>Work closely with software engineers from the various development teams to build a secure architecture and coding standard across the organization                             </li><li>Communicate technical and business risk of the vulnerabilities discovered including remediation recommendations      </li><li>Work with internal teams to support them in remediation efforts</li><li>Keep abreast with latest technology risks and utilize them in work                                                                            </li><li>Contribute to the information security strategy and rollout of the strategy</li></ul>
<h3>Requirements</h3>
<ul>
<li>Degree in Computer Science and Engineering </li><li>Experience in Application Security and Code Reviews with sufficient security background (5+ years in Security and 2+ years in software development)</li><li>Experience with penetration testing tools and tool suites such as Burp Suite Pro, OWASP Zap, Postman, Kali Linux, SQLMap, Nessus, etc.</li><li>Experience in web application security, mobile security, API security with knowledge of application vulnerabilities and business logic flaws and threats</li><li>Programming language skills such as Java, ReactJs,NodeJs Javascript (nice to have).</li><li>Experience in security risk assessment and threat modeling of applications</li><li>Familiarity with Google, Kubernetes, Docker, and Terraform</li><li>Excellent language skills and ability communicate complex vulnerabilities to internal teams</li><li>Well versed with OWASP Code Review Guide</li><li>Ability to triage results from automated code scanning tools for false positives and false negatives</li><li>Certifications such as GPEN, GXPN, GMOB, GWAPT, OSWE, OSCP, OSCE, OSWP,CNCF, AWS (Preferred) </li></ul>Submit a job applicationBy applying to the job, you acknowledge that you have read, understood and agreed to our Privacy Policy Notice (the “Notice”) and consent to the collection, use and/or disclosure of your personal data by Ninja Logistics Pte Ltd (the “Company”) for the purposes set out in the Notice. In the event that your job application or personal data was received from any third party pursuant to the purposes set out in the Notice, you warrant that such third party has been duly authorised by you to disclose your personal data to us for the purposes set out in the the Notice.

Singapore

Application Security Analyst

Maveris

Maveris is an IT and cybersecurity services company committed to helping organizations create secure digital solutions to accelerate their mission. We are Veteran-owned and proud to serve customers across the Federal Government and private sector. We have an opening for a full-time, permanent Systems Security Engineer to join a talented, dynamic team in support of a large Federal Government customer.Veterans are encouraged to apply.You will work with a team of security professionals to support a government customer performing an exciting real-world cyber mission. Hands-on, candidates should be comfortable with learning new technologies and highly motivated to develop and deploy cutting edge technologies. You must be security focused and driven to perform in a fast-paced environment.RequirementsEducation:<ul> <li>Bachelor’s Degree in one of the following areas: Computer Science, Computer Engineering, Software Engineering, Electrical Engineering, Computer and Information Security, Computer Security, and/or Network Administration from an accredited university/college. </li> <li>Will consider relevant work experience in lieu of a degree.</li> </ul>Security Clearance:<ul><li>Must have a minimum Top Secret with ability to obtain a TS/SCI</li></ul>Skills / Capabilities: <ul> <li>Must have recent work experience as a senior-level or technical lead in a related position on a major program, project, or activity.</li> <li>Must have a minimum of five (5) years recent experience in the direct performance of a major program, project, or activity relating to systems or network exploitation, Penetration Testing, Security Engineering, Exploit Development, or related fields.</li> </ul>Desired Experience:<ul> <li>Prior experience working as part of a security team is highly desirable. Relevant computer, networking and security certifications are also highly desirable. Ideal candidate would have significant experience working as a penetration tester or functioning in a Red Team or CNO/CNE environment.</li> <li>Strong exploitation background, including prior work in hardware engineering, construction, testing, or installation</li> <li>Relevant experience working with Windows, Linux, OSX, Android, and iOS, especially related to exploitation or systems security.</li> <li>Experience with cellular, Wi-Fi, Bluetooth or other wireless technologies</li> <li>Prior experience in networking, to include network engineering, network architectures, traffic analysis or troubleshooting</li> <li>Theoretical or working knowledge of security exploit techniques</li> <li>Development skills, including Java Script, Python, PHP, or C</li> <li>Security Certifications, such as OSCP, OSCE, OSWE, OSWP, OSEE, CISSP, GSEC, GCIA, GCIH, GWAPT, GPEN, GAWN, GXPN </li> </ul>BenefitsMaveris attracts and retains talent of the highest caliber by offering opportunities to work in exciting and challenging environments surrounded by bright minds. Our employees are our most prized asset and are rewarded with highly competitive compensation and a top-tier benefits package, including:<ul> <li>401(k) with company contribution</li> <li>Dental Insurance</li> <li>Health Insurance</li> <li>Vision Insurance</li> <li>Life Insurance</li> <li>Paid Time Off</li> </ul><h3>About Maveris</h3>Maveris offers exceptional, mission-focused solutions to organizations facing highly complex IT, digital, and cyber security challenges. Our success is achieved by maintaining an environment of trust where people are encouraged to reach their fullest potential. Every candidate that applies to Maveris brings something unique to the table, and because our team is diverse, we consistently meet our goals and exceed client expectations. If you are a highly-motivated person with a willingness to learn, we invite you to apply today to join our team!To learn more about employee benefits visit <a href="http://www.maveris.com/" rel="noopener noreferrer nofollow ugc" target="_blank">www.maveris.com</a>.For company updates and the latest job postings check us out on <a href="https://www.linkedin.com/company/maveris" rel="noopener noreferrer nofollow ugc" target="_blank">LinkedIn</a>.If you'd like to read about some of our research and projects head over to <a href="https://medium.com/maverislabs" rel="noopener noreferrer nofollow ugc" target="_blank">Maveris Labs</a>.Want a more behind the scenes view? Check out our blog <a href="https://maveris.com/insights/" rel="noopener noreferrer nofollow ugc" target="_blank">Maveris Insights</a> to learn more about the team behind the solutions.We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, disability status, genetic information, protected veteran status, or any other characteristic protected by law.

Woodridge

Systems Security Engineer

Bishop Fox

Bishop Fox is the leading authority in offensive security, providing solutions ranging from continuous penetration testing, red teaming, and attack surface management to product, cloud, and application security assessments. We’ve worked with more than 25% of the Fortune 100, half of the Fortune 10, eight of the top 10 global technology companies, and all of the top global media companies to improve their security. Our Cosmos platform was named Best Emerging Technology in the 2021 SC Media Awards and our offerings are consistently ranked as “world class” in customer experience surveys. We're an active participant in the security community and have published more than 16 open source tools and 50 security advisories in the last five years. Learn more at bishopfox.com or follow us on Twitter.
Given our exceptional growth we are expanding and hiring an Attack Surface Intelligence Lead ­­­­­­­to join us on this exciting journey. 
<h3>Who You Are and What You’ll Do </h3>
Cosmos (formerly CAST) proactively defends dynamic attack surfaces by combining advanced technology, automation and expert-driven testing by a team of talented offensive security analysts, operators, and developers from a variety of diverse backgrounds.  We are looking for an Attack Surface Intelligence Lead who will be responsible for leading a team conducting attack surface discovery and reconnaissance activities leveraging Cosmos on named accounts with the goal of filling the funnel with intelligence and qualified leads.
In this role you will: 
<ul>
<li>Provide mentorship, coaching, and management of a team with diverse skills and expand the vision and mission for the Attack Surface Intelligence team.</li>
<li>Conduct attack surface discovery and reconnaissance activities on a continuous basis for named accounts.
<ul>
<li>Add new scope using various OSINT and network discovery tools.</li>
</ul>
</li>
<li>Develop meaningful insights into customer attack surface utilizing relevant data analytics tools and techniques.</li>
<li>Gather and analyze OSINT data relative to customer.</li>
<li>Identify and communicate anomalies in customer's attack surface and field technical questions.</li>
<li>Triage leads by validating scope, false positives and/or other initial playbook execution.</li>
<li>Maintain situational awareness of named account testing life-cycle activities and add insights where possible using intelligence gathering activities.</li>
<li>Maintain awareness of Cosmos platform performance, functionality, and data integrity.</li>
<li>Build and maintain customer intelligence knowledge base including aggregation of data gleaned via exploits, loot, and rules of engagement.</li>
<li>Strive to develop inside-out awareness of the customer’s environment.</li>
<li>Maintain up-to-date knowledge of threats, countermeasures, security tools, testing techniques, network and application security research, and Federal and industry regulations.</li>
<li>Engage in thought leadership activities by developing tools, conducting research, giving presentations, and authoring whitepapers and blogs.</li>
</ul>
<h3>Why Bishop Fox</h3>
Bishop Fox has always allowed its employees to work remotely, and this role could work anywhere in the United States (Or Mexico if the role is preferred there). Equity is offered to all employees and starts vesting on the first day.  You also have the opportunity to earn additional equity.  Our comprehensive benefits program is tailored to meet your needs at an affordable price. We embrace diversity and an inclusive culture.  We value our employees and who they are, which fosters a powerful and collective talent base to successfully serve our clients and the security community with unparalleled expertise. 
Your Education and Experience
You just have to be good at and, most importantly, love what you do. Don’t worry about a piece of paper; we won’t. Here’s a list of qualities we’re looking for:
<ul>
<li>Bachelor’s Degree in Software Engineering or related field preferred.</li>
<li>OSINT Certification (SANS OSINT or McAfee C|OSINT) desired.</li>
<li>High level offensive security certifications preferred, such as OSCP, OSWE, OSCE, OSEE, OSWP, GPEN, GWAPT and GXPN.</li>
<li>5+ years cybersecurity industry experience required.</li>
<li>Demonstrated commitment to continuous education.</li>
<li>Vulnerability management and analysis skills.</li>
<li>Sufficient scripting skills to automate small tasks.</li>
<li>Experience with conducting open-source and/ or academic research.</li>
<li>Understanding of how to leverage OSINT data and information to ensure whole client attack surface is understood.</li>
<li>Subject matter expert on multiple customers and their unique security needs.</li>
<li>Leadership abilities and mentorship skills that support the management and development of more junior members of the team.</li>
<li>Strong analytical skills with the ability to apply previously collected client information to support/enhance current testing activities.</li>
<li>Navigates unusual hours and last-minute requests with flexibility and calm.</li>
<li>Understanding of client needs and current business acquisitions.</li>
<li>Strong written and verbal communication skills.</li>
<li>Excellent problem-solving skills- tackles problems with a logical and systematic approach.</li>
<li>Excels at building professional trust and maintaining confidentiality.</li>
<li>Team player mentality with the ability to work as a self-motivated individual contributor.</li>
<li>Detail-oriented with the ability to prioritize and multi-task.</li>
<li>Excellent time management skills and focus.</li>
<li>Strong creative thinking skills.</li>
</ul>
Bishop Fox is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex including sexual orientation and gender identity, national origin, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law.  All new hires must pass a background check as a condition of employment.
Interested? Apply today!

United States

Attack Surface Intelligence Lead

Leviathan Security Group

About Us: 
Leviathan Security Group is a Risk Management and Information Security firm based in Seattle, WA. Over the last 15 years, we have built a strong team of cybersecurity professionals who have developed a reputation for in-depth penetration testing and deep technical assessments up-and-down the stack, from hardware to web applications. With clients ranging from startups to Fortune 50, our teams are retained to work on the most exciting, complex, and critical security projects with some of the top tech companies in the world. 

We exist to prevent the bad actors from doing bad things to good people by helping our clients identify and remediate security vulnerabilities within their environments.  

We are a consulting firm built by industry veterans who wanted to build a better consultancy for consultants. As a result, we have tried to build a team of people that you look forward to working with every day and try to provide you with the best work-life balance and benefits in the industry. While our HQ is based in Seattle, WA, our consultants enjoy the benefits of working remotely anywhere in the U.S. while doing meaningful and impactful work. We also pay the full insurance premium for your medical, dental, and vision coverage for you and your dependents and we do not claim ownership of non-client-owned intellectual property that you develop while at Leviathan.  

About the Job 
We are searching for experienced web application penetration testers who could go beyond the tools to find security vulnerabilities and bugs. We focus on an informed testing methodology; we look at a lot of source code, business logic, configurations, software designs &amp; architecture to identify vulnerabilities. Most of our work right now is web app-centric for services hosted in cloud environments; but we don’t silo our teams so you may have the opportunity to flex into assessments of on-premises networks, IoT devices, and hardware if desired. If you also have this experience or are open to being coached &amp; mentored in these areas, then this position might be for you. If you get excited about performing deep technical assessments, are naturally curious, and have a desire to learn new things then we want to talk with you! 
<h3>What You Will Do:</h3>
<ul>
<li>Discover &amp; catalog vulnerabilities in customer environments in a timely manner</li>
<li>Ability to handle the most difficult applications and engagements </li>
<li>Ability to work in project teams by communicating with internal and external PMs and completing engagement within a given deadline.  </li>
<li>Recognizing a customer's fundamental organizational issues and tailoring suggested improvements accordingly </li>
<li>Clearly explain security vulnerabilities, highlighting remediation solutions and prioritizing the vulnerabilities and bugs we find to both technical and non-technical audiences.  </li>
<li>Coach/mentor our associate-level consultants by helping them to develop their skills and being available to support their growth and any questions they have </li>
</ul>
<h3>Technical Knowledge Needed:</h3>
<ul>
<li>Knowledge of web application vulnerabilities (OWASP Top 10 &amp; Common Weakness Enumeration (CWE) lists) </li>
<li>Knowledge of API technologies, how to fuzz inputs, and industry-standard practices for securing API technologies </li>
<li>Knowledge of common web security testing tools (e.g., Burp, OWASP Zap) </li>
<li>Have a high-level understanding of web protocols, such as HTTP/HTTPS </li>
<li>General understanding of web application security concepts </li>
<li>Understanding of industry-standard practices for cloud environments </li>
<li>Explaining overall business impact to a non-technical audience </li>
<li>Eagerness to learn new things, and expand your knowledge of cybersecurity topics </li>
</ul>
<h3>Technical Experience Needed:</h3>
<ul>
<li>Previous security experience in more than one organization. Ideally, if you've conducted offensive security exercises, or as a consultant at another organization </li>
<li>Experience doing security in a previous role, whether that be as a software engineer, system administrator, SOC analyst, worked as an internal offensive security team member, or a security consultant at another organization </li>
<li>Experience scoping test environments and understanding the level of work required to complete testing </li>
<li>Experience with using or testing of web technology frameworks </li>
<li>Experience with threat modeling systems to diagnose potential security concerns in web application architectures </li>
<li>Experience creating custom test harnesses for APIs or other custom technologies </li>
<li>Demonstrable experience mentoring and leading teams on projects or engagements; unafraid to share your knowledge with others </li>
<li>Understand and able to test for more complex vulnerabilities, such as business logic flaws, errors in processes, and race conditions </li>
</ul>
<h3>Bonus Points (not required) if you have:</h3>
<ul>
<li>A college education  </li>
<li>Industry-leading certifications (OSWP, GWAPT, eWPT) </li>
<li>Experience writing tools to enhance testing </li>
<li>Experience with testing IoT and hardware devices </li>
<li>Mobile device and application testing experience </li>
<li>Familiarity with scripting or programming languages </li>
<li>Reverse engineering or assembly language knowledge </li>
<li>Familiarity with fuzzing </li>
<li>Bug bounty or Capture-The-Flag (CTF) experience and rankings/reputation (if you have a DefCon CTF black badge, we want to know!) </li>
<li>Fluency in languages other than English (e.g., French, Spanish, Mandarin) </li>
</ul>
<h3>What’s In It for You?</h3>
<ul>
<li>We are a people-first organization  </li>
<li>We respect work-life balance. We do our best to prevent unnecessary overtime and burnout. We care about your well-being  </li>
<li>We pay for 100% of your medical insurance premiums for you and your dependents </li>
<li>We also include short/long-term disability, accidental death coverage, 401k &amp; stock options </li>
<li>We provide an annual budget for your ongoing training, education, and professional development </li>
<li>We allocate dedicated time away from client work for your own professional growth and development (ask about our PDT plan) </li>
<li>We have ongoing unique and engaging training opportunities (ask about our SOS Lightning and Brown Bag Talks) </li>
<li>You will report to a technical manager and leadership team that understands the work you do and can provide technical guidance when needed </li>
<li>Our friendly culture is built on trust, integrity, collaboration, and the desire to learn from and support each other </li>
</ul>

Senior Penetration Tester

WHO WE ARE HIRING:
We are actively seeking out senior-level security consultants with a focus on advanced penetration testing experience. We would love to talk with you about taking on penetration testing projects for some of the biggest and most important companies in the world. While our primary need right now is Web Application Penetration Testing, as a Senior Level Security Consultant, you will also be called upon to perform advanced penetration tests in other areas we specialize in like Hardware Security, Mobile Security, Network Security, and Wireless Security &amp; Cloud Security.

We want to speak with you if you have advanced level experience with Web Application Penetration Testing with some experience in one or more of the following areas:
<ul>
<li>Hardware (Embedded/IoT/Mobile)</li>
<li>Network (Internal/External/Wireless)</li>
<li>Mobile (Applications/Android/iOS)</li>
<li>Cloud (AWS/Azure/GCP/Private)</li>
</ul>

As a Senior Member of our team, you are passionate and driven by being a mentor/leader to our Associate &amp; Mid Level Consultants by working with them to develop skills, being available for potential questions, and reverse shadow them to help develop their skills. If you have an eagerness to learn new things and expand your own knowledge of cybersecurity topics and share what you've learned, then we want to speak with you!

WHAT YOU WILL BE DOING:
<ul>
<li>We are looking for a Sr. Penetration Tester who will primarily focus on Web Application Testing but would also be open to exploring other areas like Network Security, Mobile Security, Cloud Security, IoT Security, and Hardware Security.</li>
<li>In this role, you will be working on the most complex applications and client engagements by discovering potential vulnerabilities in customer environments, cataloging vulnerabilities, and highlighting solutions and steps to remediate those findings.</li>
<li>You will lead the way in clearly explaining security vulnerabilities to our client's technical staff, business stakeholders as well as our own team members.</li>
<li>You will communicate the risks and their business impact to both technical and non-technical audiences.</li>
<li>You will partner with our Account Manager or Project Managers in completing engagement work within a deadline, delivering constructive feedback to the project team, documenting lessons learned artifacts for future engagements, and handling customer-facing meetings in lieu of the project manager.</li>
<li>You will also lead us in managing the deliverable process, recognizing areas of improvement, and working with the PMO and Senior Leadership Team to implement changes and drive new security initiatives.</li>
</ul>

WHY JOIN US:
<ul>
<li>We have a  progressive work environment with paid time off and budgets for training and improvement, which we encourage consultants to utilize.</li>
<li>We offer professional development time for our people to work on skills between projects.</li>
<li>We encouraged you to attend and speak at conferences whenever possible. Many of our team members have spoken at BlackHat, DefCon, Hushcon, and other security conferences.</li>
<li>We encourage participation as a volunteer in events or working on open source and security research.</li>
<li>We encourage you in your own growth and development. Leviathan will never claim ownership of your IP, research, or side projects.</li>
<li>WE PAY 100% of your medical insurance premiums for you and your dependants.</li>
<li>We contribute to your 401k plan automatically, even if you don't contribute on your own.</li>
<li>We have a referral bonus system for qualified applicants, as well as yearly bonuses and the ability to work on projects outside of regular working hours for additional incentive pay.</li>
</ul>

Senior Security Consultant Keywords:
Penetration Tester, Penetration Testing, Ethical Hacker, Hacking, Web Application Security, AppSec, Information Security, Cybersecurity, OWASP Top 10, Burp, OWASP Zap, API Security, Fuzzing, Scripting, Programing, Coding, Code Review, Offensive Security, Red Team, Purple Team, Vulnerabilities, Bug Finding, Network Security, Mobile Security, Cloud Security, IoT Security,  Hardware Security, OSWP, GWAPT, eWPT, Bug Bounty, Capture The Flag, CTF, Hack  The Box, Try Hack Me, Application Testing, web application architecture,

Leviathan Security Group is an equal opportunity employer. We value diversity of thought, culture, background, and perspective at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

Senior Security Consultant

Apply to OSWP Cyber Security Jobs in companies remotely and near you. New OSWP Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Application Security Analyst at Ninja Van	Application Security AWS Burp Suite Docker GPEN
Systems Security Engineer at Maveris	Android C Cissp Clearance Exploit
Attack Surface Intelligence Lead at Bishop Fox	Analytics Application Security Automation C Exploits
Senior Penetration Tester at Leviathan Security Group	Application Security CTF EWPT Golang Gwapt
Senior Security Consultant at Leviathan Security Group	Android Application Security AWS Azure Cloud

OSWP Cyber Security Jobs

0 OSWP Cyber Security Jobs. Page 1 of 1

5 closed oswp cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

OSWP Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

OSWP Cyber Security Jobs

0 OSWP Cyber Security Jobs. Page 1 of 1

5 closed oswp cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

OSWP Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter