Bishop Fox

Bishop Fox is the leading authority in offensive security, providing solutions ranging from continuous penetration testing, red teaming, and attack surface management to product, cloud, and application security assessments. We’ve worked with more than a quarter of the Fortune 100, half of the Fortune 10, eight of the top 10 global technology companies, and all of the top global media companies. Our Cosmos platform was named Best Emerging Technology in the 2021 SC Media Awards and our offerings are consistently ranked as “world class” in customer experience surveys. For more than 16 years, we've been contributing and giving back to the security community. We’ve published more than 16 open source tools and 50 security advisories in the last five years alone. Learn more at bishopfox.com or follow us on Twitter.
We’re looking for talented, experienced professional hackers to help us secure some of the world’s most complex software and sophisticated technologies. You’ll be working alongside our US and other internationally-based teams supporting clients across multiple industries. 
Who You Are and What You’ll Do
You fancy yourself a Pentester. You know your way around source code. You’ve plundered apps and pillaged networks (legally, of course). You have a passion for hacking and information security. If you’re not already doing it professionally, you’re pen testing in your free time. You may also have written a few blog posts about your favorite hacks or have presented at a handful of conferences – with an eye to doing more.
With Bishop Fox, your responsibilities would include testing web applications, hacking networks, and reversing software. Some days, you’ll be red teaming wireless networks and physically breaking into buildings. Other days, you’ll be analyzing source code and building threat models. Every day at Bishop Fox, you’ll be learning.
As a consultant, you’ll work on a variety of projects which include short-term engagements and extended program work with well-established clients, you'll solve challenging technical problems and build creative solutions. As a trusted advisor, you’ll provide your expert opinion to help our clients navigate difficult business decisions.                                                       
Your Education and Experience
You just have to be good at and, most importantly, love what you do. Don’t worry about a piece of paper; we won’t. Here’s a list of qualities we’re looking for:
<ul>
<li>Penetration testing and code review skills</li>
<li>Vulnerability assessment experience</li>
<li>Understanding security fundamentals and common vulnerabilities (e.g. OWASP Top Ten)</li>
<li>2+ years of application security experience</li>
<li>Additional experience in Cloud security; background in system and network security, authentication and security protocols, and applied cryptography are helpful</li>
<li>Scripting/programming skills (e.g., Python, Ruby, Java, JavaScript, etc.)</li>
<li>Network and web-related protocol knowledge (e.g., TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols)</li>
<li>Advanced relevant academic training is a definite bonus</li>
</ul>
Bishop Fox has always offered its employees the ability to work remotely, and for this role you could work remotely in the United States or Mexico. Equity is offered to all employees and vesting starts on the first day.  You also have the opportunity to earn additional equity.  Our comprehensive benefits program is tailored to meet your needs at an affordable price. We embrace diversity and an inclusive culture.  We value our employees and who they are, which fosters a powerful and collective talent base to successfully serve our clients and the security community with unparalleled expertise.  
Bishop Fox is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex including sexual orientation and gender identity, national origin, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law.  All new hires must pass a background check as a condition of employment.

United States

Penetration Tester

Trace3

Who is Trace3?
Trace3 is a leading Transformative IT Authority, providing unique technology solutions and consulting services to our clients. Equipped with elite engineering and dynamic innovation, we empower IT executives and their organizations to achieve competitive advantage through a process of Integrate, Automate, Innovate.
Our culture at Trace3 embodies the spirit of a startup with the advantage of a scalable business. Employees can grow their career and have fun while doing it!
Trace3 is headquartered in Irvine, California. We employ more than 1000 people all over the United States. Our major field office locations include Atlanta, Denver, Detroit, Indianapolis, Grand Rapids, Lexington, Los Angeles, Louisville, San Diego, San Francisco, and Scottsdale.  
Ready to discover the possibilities that live in technology?

Come Join Us!
Street-Smart - Thriving in Dynamic Times
We are flexible and resilient in a fast-changing environment. We continuously innovate and drive constructive change while keeping a focus on the “big picture.” We exercise sound business judgment in making high-quality decisions in a timely and cost-effective manner. We are highly creative and can dig deep within ourselves to find positive solutions to different problems.
Juice - The “Stuff” it takes to be a Needle Mover 
We get things done and drive results. We lead without a title, empowering others through a can-do attitude. We look forward to the goal, mentally mapping out every checkpoint on the pathway to success, and visualizing what the final destination looks and feels like.
Teamwork - Humble, Hungry and Smart
We are humble individuals who understand how our job impacts the company's mission. We treat others with respect, admit mistakes, give credit where it’s due and demonstrate transparency. We “bring the weather” by exhibiting positive leadership and solution-focused thinking. We hug people in their trials, struggles, and failures – not just their success. We appreciate the individuality of the people around us.

About the Role:
Trace3 is looking for an experienced Application Security Professional to join our fast-growing DevSecOps consulting practice to help our customers in evaluating and implementing application security solutions.  This is a hybrid role where you will be spending some of your time in a presales capacity as the hands on solutions expert to support our sales teams to prospect, influence, architect, and scope application security solutions to our customers.  You will help develop application security sales and technical training collaterals for customers and our internal sales teams.  You will conduct research and market analysis of leading application security solution platforms as well as lab testing them to validate coverage and evaluate efficacy.  You will also assist our sales teams to understand client’s business goals and technical requirements to rationalize the appropriate application security solutions for their use cases. 

You will also spend time being responsible for delivering application security services and advise our customers on secure software development.  This includes planning and leading the implementation and adoption of application security platform solutions, reviewing customer software architecture and source code, provide training for developers and management, and drive solutions adoption across multiple development teams. 
What You’ll Do:
<ul>
<li>Lead presales engagements as the Application Security subject matter expert to Trace3 customers and sales teams nationally</li>
<li>Work closely with our sales teams throughout the sales process to ensure all the client’s technical needs are understood and met with the best possible solution options</li>
<li>Drive technical relationships with all stakeholders and support sales opportunities</li>
<li>Present at client facing and industry events as the SME in application security</li>
<li>Conduct research analysis and lab testing of application security solutions to evaluate efficacy, use cases coverage, and fit-for-purpose</li>
<li>Build and maintain application security vendor partner relationships</li>
<li>Contribute to the development of both customer facing and internal facing presales collaterals</li>
<li>Contribute to the development of service offering collaterals and service delivery documentations that we can take to market with selected application security solutions</li>
<li>Champion Agile and DevOps leading-practices, processes, design patterns, and tools in support of DevSecOps transformation</li>
<li>Assist in services opportunity generation, technical scoping, and Statements of Work (SOW) writing</li>
<li>Assist in the delivery of application security services</li>
<li>Promote DevSecOps culture to our customers</li>
<li>Drive adoption of application security tools and DevSecOps practices as part of customer’s transformation</li>
</ul>
Qualifications &amp; Interests:
<ul>
<li>At least 5 years of Development Experience in any programming language</li>
<li>Minimum of 8 years of combined hands-on experience as a software engineer, DevOps engineer, and/or Application Security engineer</li>
<li>Previous experience working as a Sales Engineer or Solutions Architect working with application security software products or services</li>
<li>Ability to assess customer requirements, identify business problems, and demonstrate proposed solutions</li>
<li>Programming and scripting proficiency – minimum of two: C#, Java, Typescript, Javascript, Bash, Python, Go</li>
<li>Experience with various application security tools including SAST, SCA, IAST, DAST, API Security, WAF, and RASP</li>
<li>Experience integrating and operating commercial application security solutions (SAST/SCA/DAST/IAST) such as Veracode, Checkmarx, Synopsys, WhiteSource, Snyk, Invicti – Accunetix or Netsparker, Contrast Security</li>
<li>Prior experience working at an application security vendor – bonus points</li>
<li>Experience building secure software based on frameworks such as OWASP SAMM, ASVS, MASVS, CWE, SANS, BSIMM.</li>
<li>Experience in implementing and integrating security tools into CI/CD</li>
<li>Experience with Agile methodologies such as Scrum and Kanban</li>
<li>Knowledge of developer tools and environments, project management and bug tracking systems</li>
<li>Understanding of cloud native development patterns and microservices architecture</li>
</ul>
BONUS QUALIFICATIONS:

<ul>
<li>Experience with Mobile Application Security solutions and practices</li>
<li>Experience with cloud security posture management and cloud workload protection platform solutions such as (Aqua Security, Palo Alto Prisma Cloud, Sysdig, Lacework, Orca Security, Wiz)</li>
<li>Experience with Infrastructure as Code Security solutions such as Bridgecrew, Snyk, and Fugue</li>
<li>Understanding of service-oriented architecture (REST APIs, micro-services, etc) and security best practices</li>
<li>DevOps and Architecture experience and certifications with one of the major public cloud providers (AWS, Azure, Google Cloud)</li>
<li>Experience with securing containers, kubernetes, and AWS Lambda functions</li>
<li>Experience conducting secure coding training and implementing security champions program</li>
<li>Experience conducting threat modeling and application penetration testing</li>
<li>Prior consulting experience is a plus</li>
<li>Must have excellent interpersonal skills, a high degree of professionalism and the ability to design technology solutions for commercial and large enterprise companies</li>
<li>Excellent presentation, communication, and writing skills required</li>
</ul>
The Perks:
<ul>
<li>Comprehensive medical, dental and vision plans for you and your dependents</li>
<li>401(k) Retirement Plan with Employer Match, 529 College Savings Plan, Health Savings Account, Life Insurance, and Long-Term Disability</li>
<li>Competitive Compensation</li>
<li>Training and development programs</li>
<li>Stocked kitchen with snacks and beverages</li>
<li>Collaborative and cool office culture</li>
<li>Work-life balance and generous paid time off</li>
</ul>
***To all recruitment agencies: Trace3 does not accept unsolicited agency resumes/CVs. Please do not forward resumes/CVs to our careers email addresses, Trace3 employees or any other company location. Trace3 is not responsible for any fees related to unsolicited resumes/CVs.

New York

Application Security Solutions Architect | Solutioning/Research/Implementation (Remote)

Aperia

SUMMARY Join Aperia Solutions, a leader in SaaS solutions for the Payments and Compliance industries. Aperia has been developing and hosting complex, data intensive business applications for more than a decade. The company's management team has extensive experience in finance, data security, compliance, and business consulting which continues to fuel its rapid growth. Aperia offers a competitive salary package and a great work environment with excellent people. POSITIONS Sr. Cybersecurity Architect- Security/Remediation The SME should have extensive experience in reviewing cybersecurity reports and confirming validity of vulnerabilities. The SME will review reports, determine if criticality is appropriate for the application/environment and do a final QA to ensure consistency of criticality ratings and overall consistency of the reports. Deep knowledge of common application security vulnerabilities, OWASP Top 10, and their remediation is a must. The SME will interface with application developers, DevOps, Application Security, and other stakeholders to confirm that only true findings are entered and tracked in Archer. The SME should have 7 to 10 years’ experience.RequirementsELIGIBILITY REQUIREMENTS <li> Must be willing to submit to a background investigation and drug test as part of the selection </li> process This job description is not intended to be all-inclusive. An employee may also perform other reasonable related business duties as assigned by their immediate supervisor or management. Principals only. Recruiters please don't contact this job poster. DO NOT contact us with unsolicited services or offers.Benefits

Dallas

Sr. Cybersecurity Architect- Security/Remediation

Zopa

Our Story Hello there. We’re Zopa. We began our journey in 2005 with the drive to deliver customer-first financial products. Fast forward to 2020, we shifted gears and became a digital bank, leveraging our customer knowledge, money expertise and technical agility to forge ahead. Our diverse team is united by a mission to create simple, fair and honest financial products that have the customers’ needs at their heart.  We’re regularly recognised at industry awards for our game-changing products and are proud to be one of the market leaders in consumer lending in the UK. But our work doesn’t stop there.   After securing £220 million in our 2021 funding round led by SoftBank, we’ve entered the next stage in our journey. So far, we’ve lent out over £6 billion and made money work better for over half a million people across the UK who were looking to borrow or save with us. In less than 2 years after becoming a bank, we hit £1 billion in customer deposits and we’re also a top 5 credit card issuer in the UK. And this is just the beginning. We’re set on achieving big things with ambitious growth targets to match. This means there's a range of opportunities for you to excel and develop through a career at Zopa, while building better banking products that truly matter to our customers.     If you embrace unconventional challenges, are unafraid to think differently and are driven to make an outsized impact, you’ll thrive here at Zopa. For a closer look at our culture, check out <a href="https://www.youtube.com/watch?v=e5ek2PQ-DhE" rel="noopener noreferrer nofollow ugc" target="_blank">our latest video here</a>. And if you want to join us, have a look at <a href="https://www.zopa.com/about/careers" rel="noopener noreferrer nofollow ugc" target="_blank">our current open roles</a>!What's the challenge? The ZRE Security team are part of Zopa Reliability Engineering (ZRE) and are responsible for ensuring our Platform &amp; Infrastructure is secure, and meets the controls required in a regulated environment. As a Cloud Security Engineer, you will be an owner for ZRE security work, whilst helping ZRE to maintain a strong security posture. This includes proactively aligning our platform/infrastructure with our InfoSec policies and standards, whilst defining work for remediation and improvement. You will be a champion for Security both within the ZRE team and in the wider business, helping to encourage a security mindset in everything we do. All the while automating consistently and helping to design and support the technology infrastructure to help Zopa grow.
<h3>Responsibilities:</h3>
<ul>
<li>Work with our Infosec team to triage and define security work coming into ZRE</li><li>Define remediation plans for security issues</li><li>Define our AWS Account security baseline, including management of common Security controls using Organisations</li><li>Contribute a security perspective to design discussions for new projects within ZRE, and the wider business</li><li>Automate to improve response to security issues and reduce toil</li><li>Use Threat Modelling to identify vulnerabilities and attack vectors across our infrastructure</li></ul>
<h3>About you:</h3>
<ul>
<li>In-depth knowledge of AWS (Organisations, IAM, VPC Networking, KMS, GuardDuty, CloudTrail, Config)</li><li>Experience using Infrastructure as Code (e.g., Terraform)</li><li>Strong knowledge of Containers and Orchestration (Kubernetes, Docker)</li><li>Experience with Linux administration, hardening and troubleshooting</li><li>Operational experience with HashiCorp Vault (ACL management, auth methods, secret engines)</li><li>A passion for Information Security, with experience applying this to Cloud Operations</li><li>A well-rounded understanding of foundational security concepts including best practices and how to apply them. Such as, Threat Modelling, OWASP Top 10 &amp; common vulnerabilities, PKI, TLS</li><li>Comfortable with scripting languages e.g. Bash, Python, PowerShell</li><li>Functional understanding of Networking &amp; common protocols</li></ul>
<h3>Nice to have:</h3>
<ul>
<li>Experience working in an FCA regulated organisation, ideally within the financial sector</li><li>Exposure to Active Directory</li><li>Hands-on experience with Networking e.g., CCNA or experience with physical networks</li></ul>#LI-MW1Flexible working? Yes please!Whether you want to come into our open-plan, riverside London Bridge office or work from the comfort of your own home (or both!), you’ll be able to decide on an approach with your manager, looking at what works best for you, your role and your team.Not only that – you'll also have the option of working from abroad for up to 90 days a year!* But no matter where you are, we’ll make sure you’ve got everything you need to thrive, both in your work and home life, from day one. *Subject to having the right to work in the country of choiceTo thrive here, you’ll need to: Champion our customers. Whatever your role, you’ll be close to our customers. We care passionately about doing the best for them.  Help us make fearless choices. Our environment is fast-paced, agile and open. You’ll solve interesting and challenging problems, and be trusted and empowered to bring your ideas to life. Walk the talk. Like us, you’ll be honest, stick to your promises and face the tough moments head-on. Win smarter. You’ll be always on the lookout for a better way of doing things, going beyond ‘good enough’ and welcoming different points of view. Be in it together. You’ll join an ambitious, diverse and all-round approachable team with a mix of ideas and talents who inspire each other to be better every day.  Zopa is proud to offer a workplace free from discrimination. Diversity of experience, perspectives, and backgrounds leads to great products and unique company culture. We simply can’t expect to empower our customers to better manage their money without challenging the current status quo. Creating the best place for money is no easy task, which is why we need talent from all walks of life.

London

Cloud Security Engineer

Arctic Wolf Networks

Ready to make an impact? Arctic Wolf is looking for an Application Security Architect to join our pack.
Arctic Wolf, with its unicorn valuation, is the leader in security operations in an exciting and fast-growing industry—cybersecurity.
How fast are we growing? Well, Arctic Wolf was highly ranked in the Deloitte Fast Technology 500 for NorthAmerica in both 2019 (#25) and 2020 (#104)! We have doubled headcount, customers, and revenue for five years running. We are also cultivating a collaborative and productive work environment that welcomes a diversity of backgrounds, cultures, and ideas to make our teams even stronger as we grow our teams globally.
In fact, we were named a 2021 Top Workplace USA (Energage) as the top technology firm to work in our size category, were recognized as one of the 2020 Best Places to Work (bizjournals.com), and most recently were certified as a 2021 Great Place to Work (Great Places to Work Institute, Canada). Arctic Wolf believes in corporate responsibility, and our worldwide offices proudly participate in volunteer programs throughout their communities. We’ve also earned distinction from TravelWise for our efforts in promoting sustainable transportation.
Position Overview and Objective
The Lead Application Security Architect role is responsible for the implementation of measures to ensure the security of Arctic Wolf software systems, applications, code, and related components. This role will work within our Information Security Engineering team to deploy and operationalize technical security capabilities with open collaboration with the Research and Development Team.
Primary Responsibilities and Duties
<ul>
<li>Develop secure coding &amp; secure design principles</li>
<li>Train developers, architects, code reviewers, and others on secure coding practices. Mentor team members.</li>
<li>Serve as the subject matter expert for Application Security, providing guidance to Engineering and Product teams</li>
<li>Develop standards and training for security testing tools focused on the application layer (e.g., SAST, DAST, IAST, SCA), threat modeling, penetration testing, red team, bug bounty and</li>
<li>Work with development teams throughout the entire SDLC to ensure code is secure by design, secure by default, secure in deployment and communication</li>
<li>Help software development teams to understand, and remediate security findings</li>
<li>Research any reported or suspected application vulnerabilities</li>
<li>Implement and configure off-the-shelf application security technologies in the Arctic Wolf internal environment.</li>
<li>Create technical approaches to implementing application security control technologies.</li>
<li>Contribute to a world-class security program that supports Arctic Wolf’s tremendous growth.</li>
<li>Mentors and coaches team members to further develop competencies</li>
<li>Assist in developing security related libraries used in our environment</li>
<li>Security metrics delivery and improvements.</li>
<li>The ability to effectively partner and communicate with Engineering and Product teams</li>
</ul>
Key Skills
Communication, Threat modeling, Code Review, Penetration Testing, Application Testing, Research
Key Competencies
Is able to write clearly and succinctly in a variety of communication settings and styles; can get messages across that have the desired effect.
Comes up with a lot of new and unique ideas; easily makes connections among previously unrelated notions; tends to be seen as original and value-added in brainstorming settings.
Can be counted on to exceed goals successfully; is constantly and consistently one of the top performers; very bottom-line oriented; steadfastly pushes self and others for results.
Minimum Qualifications
<ul>
<li>A Bachelor’s Degree in Computer Science, Information Systems, Engineering, cybersecurity or related technical field; or equivalent experience.</li>
<li>10+ years of experience in security or infrastructure engineering Including assessing and escalating to vendors for troubleshooting purposes.</li>
<li>Thorough Understanding of modern software development practices</li>
<li>Thorough understanding of OWASP Top 10 vulnerabilities and corresponding best practices for mitigation</li>
<li>Significant experience in deploying application security technologies such as SAST, DAST, IAST, SCA, etc.</li>
</ul>
Preferred Qualifications
<ul>
<li>Familiarity with cloud infrastructures, with Amazon Web Services (AWS) and/or Azure considered a strong plus.</li>
<li>Expert level analytical and quantitative skills with proven experience in developing strategic solutions</li>
<li>Significant prior experience securing large-scale web applications, including performing security code reviews, vulnerability assessments, and manual testing for logic flaws</li>
<li>Significant Experience in one or more highly regulated environments (FedRAMP, SOX, ISO 27001, etc) or frameworks</li>
<li>Presentation of a security topic and an industry conference</li>
<li>One a more Industry Certifications – (CISSP, CCSP, CSLP, OSCP, OSWE, GPEN, GWAPT, CEH, etc)</li>
</ul>
Travel Requirements
Typically 10% or less of business travel
Security Requirements:
<ul>
<li>Conducts duties and responsibilities in accordance with AWN’s Information Security policies, standards, processes and controls to protect the confidentiality, integrity and availability of AWN business information.</li>
<li>Background checks are required for this position</li>
</ul>
About us:
At Arctic Wolf, we recognize that success comes from delighting our customers. We believe in being lean – in constantly building, measuring, and learning in all aspects of our business. We truly value people. All wolves are welcome to join the Arctic Wolf pack, with compelling compensation packages, benefits, and equity for employees.
Arctic Wolf is focused on building a workforce that is diverse and inclusive. If you’re excited about this role, but do not meet all of the qualifications listed above, we encourage you to apply. We review all applications.  
Arctic Wolf is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetics, or any other basis forbidden under federal, provincial, or local law.
Arctic Wolf is committed to fostering a welcoming, accessible, respectful and inclusive environment ensuring equal access and participation for people with disabilities. As such, we strive to make our recruitment, assessment and selection processes as accessible as possible and provide accommodations as required for applicants with disabilities. Please let us know if you require any accommodations by emailing <a href="mailto:hr@arcticwolf.com" rel="noopener noreferrer nofollow ugc" target="_blank">recruiting@arcticwolf.com</a>.

Provo

Principal Application Security Architect

Apply to Owasp Cyber Security Jobs in companies remotely and near you. New Owasp Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Penetration Tester at Bishop Fox	Remote Full Time Pentester Consultant Javascript
Application Security Solutions Architect \| Solutioning/Research/Implementation (Remote) at Trace3	Remote Full Time Devsecops Consulting Javascript
Sr. Cybersecurity Architect- Security/Remediation at Aperia	Remote Full Time Consulting Application Security Compliance
Cloud Security Engineer at Zopa	Full Time Manager Active Directory Agile AWS
Principal Application Security Architect at Arctic Wolf Networks	Remote Full Time Red Team CCSP Application Security

Owasp Cyber Security Jobs

0 Owasp Cyber Security Jobs. Page 1 of 1

5 closed owasp cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Owasp Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Owasp Cyber Security Jobs

0 Owasp Cyber Security Jobs. Page 1 of 1

5 closed owasp cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Owasp Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter