Bishop Fox

Bishop Fox is the leading authority in offensive security, providing solutions ranging from continuous penetration testing, red teaming, and attack surface management to product, cloud, and application security assessments. We’ve worked with more than a quarter of the Fortune 100, half of the Fortune 10, eight of the top 10 global technology companies, and all of the top global media companies. Our Cosmos platform was named Best Emerging Technology in the 2021 SC Media Awards and our offerings are consistently ranked as “world class” in customer experience surveys. For more than 16 years, we've been contributing and giving back to the security community. We’ve published more than 16 open source tools and 50 security advisories in the last five years alone. Learn more at bishopfox.com or follow us on Twitter.
We’re looking for talented, experienced professional hackers to help us secure some of the world’s most complex software and sophisticated technologies. You’ll be working alongside our US and other internationally-based teams supporting clients across multiple industries. 
Who You Are and What You’ll Do
You fancy yourself a Pentester. You know your way around source code. You’ve plundered apps and pillaged networks (legally, of course). You have a passion for hacking and information security. If you’re not already doing it professionally, you’re pen testing in your free time. You may also have written a few blog posts about your favorite hacks or have presented at a handful of conferences – with an eye to doing more.
With Bishop Fox, your responsibilities would include testing web applications, hacking networks, and reversing software. Some days, you’ll be red teaming wireless networks and physically breaking into buildings. Other days, you’ll be analyzing source code and building threat models. Every day at Bishop Fox, you’ll be learning.
As a consultant, you’ll work on a variety of projects which include short-term engagements and extended program work with well-established clients, you'll solve challenging technical problems and build creative solutions. As a trusted advisor, you’ll provide your expert opinion to help our clients navigate difficult business decisions.                                                       
Your Education and Experience
You just have to be good at and, most importantly, love what you do. Don’t worry about a piece of paper; we won’t. Here’s a list of qualities we’re looking for:
<ul>
<li>Penetration testing and code review skills</li>
<li>Vulnerability assessment experience</li>
<li>Understanding security fundamentals and common vulnerabilities (e.g. OWASP Top Ten)</li>
<li>2+ years of application security experience</li>
<li>Additional experience in Cloud security; background in system and network security, authentication and security protocols, and applied cryptography are helpful</li>
<li>Scripting/programming skills (e.g., Python, Ruby, Java, JavaScript, etc.)</li>
<li>Network and web-related protocol knowledge (e.g., TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols)</li>
<li>Advanced relevant academic training is a definite bonus</li>
</ul>
Bishop Fox has always offered its employees the ability to work remotely, and for this role you could work remotely in the United States or Mexico. Equity is offered to all employees and vesting starts on the first day.  You also have the opportunity to earn additional equity.  Our comprehensive benefits program is tailored to meet your needs at an affordable price. We embrace diversity and an inclusive culture.  We value our employees and who they are, which fosters a powerful and collective talent base to successfully serve our clients and the security community with unparalleled expertise.  
Bishop Fox is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex including sexual orientation and gender identity, national origin, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law.  All new hires must pass a background check as a condition of employment.

United States

Penetration Tester

Fivesky

Are you combatting security threats in a global environment? Are you a visionary in the cyber security space, taking the lead on complex projects? Do you challenge, prototype, and present your findings to Stakeholders? If so then you might be Fivesky’s next Senior Application Security Architect.
 Who you are:
<ul>
<li>6+ years of application, data, or infrastructure and automation security with at least the last 5 years of architecting security solutions and leading a practice.</li>
<li>Worked with one, or more, of the major Cloud Platforms (AWS, Azure, GCP).</li>
<li>General oversight of security projects from initiation to closure.</li>
<li>Worked with Unix, AWS DB, and Appliances.</li>
<li>Ability to fully utilize Spring Boot (and/or) React developement stack.</li>
<li>Performed Pen Testing/Hardening.</li>
<li>Create processes, develop and design plans and manage security team execution.</li>
<li>Experience assessing if the current security protocols at an enterprise level are fit for purpose.</li>
<li>Work closely with stakeholders and present documentation and security solutions </li>
<li>Can speak to developers and poke holes in their rationale for their design, and develop frameworks and push automation</li>
<li>Bachelor’s in Information Technology, Computer Science, or a related discipline</li>
</ul>
What you’ve done:
<ul>
<li>Act as an SME when it involves AppSec, InfoSec, or Infrastructure security around Cloud, designing and architecting solutions for your organization</li>
<li>Collaborate with other teams involved in architecture design </li>
<li>Identify potential risks of projects, document and address those risks and work with other teams to resolve the issue</li>
</ul>
What you will do:
<ul>
<li>Work with design, testing, and integration of security controls within an Enterprise environment</li>
<li>Provide hands-on direction with application security assignments</li>
<li>Assessing current security processes and offering recommendations to all levels within the organization up to the C Suite</li>
<li>Performing thorough documentation of the development and implementation of processes</li>
<li>Utilize your broad knowledge within security disciplines such as: secure network design, entitlement design, database access, authentication methods, logging, input validation, security testing, encryption implementation, secure storage design, and data transfer</li>
</ul>
Do your interests include any of the following?
<ul>
<li>K8s and Cloud Foundry</li>
<li>Dependency / Package management using Spring Boot</li>
<li>Linux, Java, Python, React, Angular development skills</li>
<li>Strong Jenkins, Spinnaker, and/or Terraform</li>
<li>PKI</li>
<li>Network security technologies</li>
<li>Crypto</li>
<li>SDN</li>
<li>CloudFormation</li>
<li>Ansible</li>
<li>Data Analytics</li>
</ul>
At Fivesky, our employees are our greatest asset and the focal point around which we operate; therefore, we always want the best for our employees. In addition to offering competitive compensation plans and long-term career opportunities, we offer an attractive mix of benefit plans to our employees that include provisions for vacation, holiday pay, and sick days.
Fivesky is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, genetic information, or any other characteristic protected by law.
This is a full-time, direct employment opportunity in McLean, VA. Salary is open based on experience and qualifications.
FS-RID-0412

Mclean

Senior Application Security Architect

Information Security OfficerManchester / HybridNQC is a well established, successful and growing Manchester City Centre based software company specialising in supply chain risk management platforms.We’re in the ‘Tech for Good’ space, providing online web platforms which are in use by some of the largest organisations across a number of industries including the UK Government, the Automotive industry and the Defence &amp; Aerospace industry.Our purpose is to assess supply chains, accelerate their transformation and advance positive global change.We’re seeing lots of activity in this space with organisations becoming engaged in both understanding their suppliers and proactively working to build sustainable, ethical and responsible supply chains.We are looking to recruit an Information Security Officer to lead in all aspects of GRC across the organisation. As monitoring and assessing risk, you will make recommendations of the necessary corrective actions required, and ensure they are implemented effectively.As Information Security Officer you will take responsibility for:<ul><li>Ensuring our Information Security and Cyber security policies and processes are kept up to date and in line with business requirements.</li></ul><ul><li>Developing, managing and delivering Information Security projects from initiation to implementation with a continuous improvement and collaboration focus</li></ul><ul> <li>Building, managing and monitoring activity and routine reports, raising awareness and adherence across the IT directorate and wider business</li> <li>Managing audit processes to ensure adherence to ISO 27001, TISAX and Cyber Essentials standards</li> </ul><ul><li>Representation on Customer Information Security groups</li></ul><ul> <li>Managing third party web application PEN testing suppliers</li> <li>Maintain, analyse, and monitor cybersecurity threats</li> <li>Conducting security and data protection assessments with internal business units and external third parties to ensure ongoing security and data protection requirements are met</li> <li>Working with our commercial teams to complete Security and Data Protection assessments in a timely manner</li> <li>Managing security incident response and continuous monitoring of effectiveness of the mitigation actions and outcomes</li> <li>Provide regular reports and updates to the Board of Directors </li> </ul>Requirements<ul> <li>Strong working knowledge of data privacy laws, information security and industry best practices and how they might impact a software business like ours</li> <li>Ability to prioritise tasks, problem solve, work under pressure, and be a business partner to the company, ensuring that we balance our compliance and security goals against commercial needs, giving consultative information advice and guidance as necessary</li> <li>Experience working with one or more of the following compliance frameworks: ISO 27001, Cyber Essentials, TISAX</li> </ul>Benefits<ul> <li>Flexible hybrid working - 2/3 days working at our Manchester office each week</li> <li>25 days holiday (Increasing with length of service)</li> <li>Flexible use of bank holidays - use as them as you choose</li> </ul><ul><li>Health Cash Plan</li></ul><ul><li>24/7 Doctor</li></ul><ul><li>Life Assurance</li></ul><ul><li>Perkbox</li></ul><ul><li>Discount of retail and leisure</li></ul>

Ancoats

Information Security Officer

Cloudflare, Inc.

About Us

At Cloudflare, we have our eyes set on an ambitious goal: to help build a better Internet. Today the company runs one of the world’s largest networks that powers approximately 25 million Internet properties, for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company. 
We realize people do not fit into neat boxes. We are looking for curious and empathetic individuals who are committed to developing themselves and learning new skills, and we are ready to help you do that. We cannot complete our mission without building a diverse and inclusive team. We hire the best people based on an evaluation of their potential and support them throughout their time at Cloudflare. Come join us! 
To the attention of candidates (Mexico City): 
This role requires full time work over the Weekends. Candidates should be comfortable working with a “Wed-Sun” or “Sat-Wed” 5-day working week schedule. Candidates MUST have right-to-work in Mexico.  Visa sponsorship is NOT provided for this position.
About the Organization
Solutions Engineering organization is a global organization that leads the technical pre-sales for Cloudflare. Solution Engineers use their technology knowledge and experience to help customers achieve their business goals. Our Solutions Engineers come from a wide range of backgrounds. We're serious about building a diverse team. When hiring we look for diversity of experience combined with genuine curiosity for our technology and ambition to be as diligent and helpful as possible in supporting our Solutions Engineering team to achieve their goals.
Ultimately, as a Solutions Engineer, you are passionate about people, well organized, enjoy researching, have an appreciation of web performance/security technology and its importance in today's world. You are naturally curious, and an avid builder who is not afraid to get your hands dirty. You appreciate the diversity of challenges in working with your peers, and look forward to the prospect of enabling the team to help our customers realize the full promise of Cloudflare. 
About the Role
Threat Advisory Engineer (TAE) is a highly technical, hands-on role that requires deep understanding of Cloudflare’s Security portfolio of products and services. TAE is expected to lead the technology discussion with customers reaching out to Cloudflare while they are Under Attack, and confidently and calmly handles the efforts of attack mitigation using Cloudflare technology and tools. TAE works closely with Cloudflare Product and Engineering teams to analyze threat data and provide insights to Sales and Solutions Engineering teams to support the sales process. Role also requires creating threat intelligence reports and collateral for internal and external consumption. 
About the Candidate
We are looking for curious and ambitious individuals who want to combine their technical, organizational, data-driven research and communication skills with their desire to help customers achieve their goals. Connecting with stakeholders within Cloudflare and utilizing a variety of tools, your role will be to support the Sales and Solution Engineering teams throughout the sales process by focusing on security intelligence, anomaly hunting and incident response. Ideal candidates should be able to leverage intuition, security knowledge and a broad array of tools and advanced security techniques to uncover malicious activity, and assist customers.  
Experience should include a combination of the skills below:
<ul>
<li>Experience performing technical analysis involving threat event data and evaluating malicious activity.</li>
<li>Deep knowledge of TCP/IP and related network protocols: knowledge of standard network protocols like TCP, ARP, ICMP, DHCP, DNS, HTTP, SNMP etc., and accompanying protocol/packet analysis/manipulation tools</li>
<li>Working/in-depth knowledge of information security protection/detection and authentication systems (firewalls, IDS, IPS, anti-virus, etc.)</li>
<li>Knowledge of commonly-accepted information security principles and practices, as well as techniques attackers would use to identify vulnerabilities, gain unauthorized access, escalate privileges and access restricted information.</li>
<li>In-depth knowledge of current operating environments (Microsoft, Linux, &amp; Other operating systems, and cloud providers)</li>
<li>Understanding and use of scripting and third party security tools. </li>
<li>Working understanding of database systems, application system development and installation/implementation processes.</li>
<li>Exceptional analytical and critical thinking, willingness to challenge status quo. Excellent interpersonal skills.</li>
<li>Advanced written and oral communications, self-motivator. Team player and independent worker, highly adaptive.</li>
</ul>
Experience and skills below are not required but highly preferred:
<ul>
<li>Previous experience in a SOC or NOC, or PEN testing.</li>
<li>Knowledge of specific security products such as Bot Management, DDoS mitigation and Web Application Firewalls (WAF).</li>
<li>Awareness of the Zero Trust security model architecture.</li>
<li>Worked with JIRA or other support desk tools in the past.</li>
</ul>What Makes Cloudflare Special?
We’re not just a highly ambitious, large-scale technology company. We’re a highly ambitious, large-scale technology company with a soul. Fundamental to our mission to help build a better Internet is protecting the free and open Internet.
<a href="https://blog.cloudflare.com/protecting-free-expression-online/" rel="noopener noreferrer nofollow ugc" target="_blank">Project Galileo</a>: We equip politically and artistically important organizations and journalists with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already used by Cloudflare’s enterprise customers--at no cost.
<a href="https://www.cloudflare.com/athenian/" rel="noopener noreferrer nofollow ugc" target="_blank">Athenian Project</a>: We created Athenian Project to ensure that state and local governments have the highest level of protection and reliability for free, so that their constituents have access to election information and voter registration.
<a href="https://blog.cloudflare.com/tag/path-forward/" rel="noopener noreferrer nofollow ugc" target="_blank">Path Forward Partnership</a>: Since 2016, we have partnered with Path Forward, a nonprofit organization, to create 16-week positions for mid-career professionals who want to get back to the workplace after taking time off to care for a child, parent, or loved one.
<a href="https://1.1.1.1/" rel="noopener noreferrer nofollow ugc" target="_blank">1.1.1.1</a>: We released<a href="https://1.1.1.1/" rel="noopener noreferrer nofollow ugc" target="_blank"> 1.1.1.1</a> to help fix the foundation of the Internet by building a faster, more secure and privacy-centric public DNS resolver. This is available publicly for everyone to use - it is the first consumer-focused service Cloudflare has ever released. Here’s the deal - we don’t store client IP addresses never, ever. We will continue to abide by our<a href="https://developers.cloudflare.com/1.1.1.1/privacy/public-dns-resolver" rel="noopener noreferrer nofollow ugc" target="_blank"> privacy commitment</a> and ensure that no user data is sold to advertisers or used to target consumers.
Sound like something you’d like to be a part of? We’d love to hear from you!
This position may require access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations. Please note that any offer of employment may be conditioned on your authorization to receive software or technology controlled under these U.S. export laws without sponsorship for an export license.
Cloudflare is proud to be an equal opportunity employer.  We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness.  All qualified applicants will be considered for employment without regard to their, or any other person's, perceived or actual race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law. We are an AA/Veterans/Disabled Employer.
Cloudflare provides reasonable accommodations to qualified individuals with disabilities.  Please tell us if you require a reasonable accommodation to apply for a job. Examples of reasonable accommodations include, but are not limited to, changing the application process, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.  If you require a reasonable accommodation to apply for a job, please contact us via e-mail at hr@cloudflare.com or via mail at 101 Townsend St. San Francisco, CA 94107.

Mexico City

Threat Advisory Engineer, Solutions Engineering

Bishop Fox is the leading authority in offensive security, providing solutions ranging from continuous penetration testing, red teaming, and attack surface management to product, cloud, and application security assessments. We’ve worked with more than a quarter of the Fortune 100, half of the Fortune 10, eight of the top 10 global technology companies, and all of the top global media companies. Our Cosmos platform was named Best Emerging Technology in the 2021 SC Media Awards and our offerings are consistently ranked as “world class” in customer experience surveys. For more than 16 years, we've been contributing and giving back to the security community. We’ve published more than 16 open source tools and 50 security advisories in the last five years alone. Learn more at <a href="https://bishopfox.com/" rel="noopener noreferrer nofollow ugc" target="_blank">bishopfox.com</a> or follow us on <a href="https://twitter.com/bishopfox" rel="noopener noreferrer nofollow ugc" target="_blank">Twitter</a>.  
Given our exceptional growth we are expanding and hiring Penetration Test Interns to join us on this exciting journey. You fancy yourself a pentester. You know your way around source code. You’ve plundered apps and pillaged networks (legally, of course). You have a passion for hacking and information security. Ideally, you’ve attended a few security conferences and competed in some CTFs. In your spare time, you work on your home lab, update your personal security blog and participate in Reddit netsec threads.  

Responsibilities  
As a pen testing intern, you’ll have the chance to train individually with some of the industry’s VIPs. You’ll gain priceless firsthand experience with consulting and participate in cutting-edge research and thought leadership projects. No two days are the same here, but what we can guarantee is that every day at Bishop Fox, you’ll be learning. Plus, you’ll work in a casual environment filled with plenty of laidback and friendly folks. If you haven’t realized it yet, this is no ordinary internship. 

Requirements 
We believe that what we do makes an impact, and our culture reflects it in the best possible way. Every one of us plays a role in our success. We value our time and our well-being, we love what we do, and we look out for one another. Bishop Fox offers competitive salaries, travel opportunities, flexible schedules, and a one-of-a-kind environment. For the right candidate, it will feel like a second home. 
In addition to the above, the following is a list of skills and traits that describe you. If you have most of these, we’d like to speak with you.  
<ul>
<li>A passion for technology, particularly information security</li>
<li>Previous system administrator and/or programming experience</li>
<li>Demonstrated web development knowledge</li>
<li>Problem-solving expertise</li>
<li>Strong work ethic</li>
<li>An enthusiasm to learn all the things</li>
<li>An amicable and easygoing personality</li>
<li>Strong communication skills (i.e. written and verbal)</li>
<li>You must need to be on your last year of university or graduate.  </li>
</ul>
Candidates must be available to intern in 2022 for 6 months starting in September. 

¿Estás interesado? Drop us a line today! 

Bishop Fox has always allowed its employees to work remotely, and this role could work anywhere in Mexico. Our comprehensive benefits program is tailored to meet your needs at an affordable price. We embrace diversity and an inclusive culture. We value our employees and who they are, which fosters a powerful and collective talent base to successfully serve our clients and the security community with unparalleled expertise.   
Bishop Fox is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex including sexual orientation and gender identity, national origin, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law.  All new hires must pass a background check as a condition of employment.

Penetration Test Intern

Apply to Pen Testing Cyber Security Jobs in companies remotely and near you. New Pen Testing Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Penetration Tester at Bishop Fox	Remote Full Time Pentester Consultant Javascript
Senior Application Security Architect at Fivesky	Full Time Application Security Analytics Ansible Automation
Information Security Officer at NQC	Full Time Audit Incident Response Compliance Iso 27001
Threat Advisory Engineer, Solutions Engineering at Cloudflare, Inc.	Full Time Incident Response Cloud Cloudflare DNS
Penetration Test Intern at Bishop Fox	Remote Internship Pentester Administrator Consulting

Pen Testing Cyber Security Jobs

0 Pen Testing Cyber Security Jobs. Page 1 of 1

5 closed pen testing cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Pen Testing Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Pen Testing Cyber Security Jobs

0 Pen Testing Cyber Security Jobs. Page 1 of 1

5 closed pen testing cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Pen Testing Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter