Bishop Fox

<p>Bishop Fox is the leading authority in offensive security, providing solutions ranging from continuous penetration testing, red teaming, and attack surface management to product, cloud, and application security assessments. We’ve worked with more than a quarter of the Fortune 100, half of the Fortune 10, eight of the top 10 global technology companies, and all of the top global media companies. Our Cosmos platform was named Best Emerging Technology in the 2021 SC Media Awards and our offerings are consistently ranked as “world class” in customer experience surveys. For more than 16 years, we've been contributing and giving back to the security community. We’ve published more than 16 open source tools and 50 security advisories in the last five years alone. Learn more at bishopfox.com or follow us on Twitter.</p>
<p>We’re looking for talented, experienced professional hackers to help us secure some of the world’s most complex software and sophisticated technologies. You’ll be working alongside our US and other internationally-based teams supporting clients across multiple industries. </p>
<p><strong>Who You Are and What You’ll Do</strong></p>
<p>You fancy yourself a Pentester. You know your way around source code. You’ve plundered apps and pillaged networks (legally, of course). You have a passion for hacking and information security. If you’re not already doing it professionally, you’re pen testing in your free time. You may also have written a few blog posts about your favorite hacks or have presented at a handful of conferences – with an eye to doing more.</p>
<p>With Bishop Fox, your responsibilities would include testing web applications, hacking networks, and reversing software. Some days, you’ll be red teaming wireless networks and physically breaking into buildings. Other days, you’ll be analyzing source code and building threat models. Every day at Bishop Fox, you’ll be learning.</p>
<p>As a consultant, you’ll work on a variety of projects which include short-term engagements and extended program work with well-established clients, you'll solve challenging technical problems and build creative solutions. As a trusted advisor, you’ll provide your expert opinion to help our clients navigate difficult business decisions.                                                       </p>
<p><strong>Your Education and Experience</strong></p>
<p>You just have to be good at and, most importantly, love what you do. Don’t worry about a piece of paper; we won’t. Here’s a list of qualities we’re looking for:</p>
<ul>
<li>Penetration testing and code review skills</li>
<li>Vulnerability assessment experience</li>
<li>Understanding security fundamentals and common vulnerabilities (e.g. OWASP Top Ten)</li>
<li>2+ years of application security experience</li>
<li>Additional experience in Cloud security; background in system and network security, authentication and security protocols, and applied cryptography are helpful</li>
<li>Scripting/programming skills (e.g., Python, Ruby, Java, JavaScript, etc.)</li>
<li>Network and web-related protocol knowledge (e.g., TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols)</li>
<li>Advanced relevant academic training is a definite bonus</li>
</ul>
<p>Bishop Fox has always offered its employees the ability to work remotely, and for this role you could work remotely in the United States or Mexico. Equity is offered to all employees and vesting starts on the first day.  You also have the opportunity to earn additional equity.  Our comprehensive benefits program is tailored to meet your needs at an affordable price. We embrace diversity and an inclusive culture.  We value our employees and who they are, which fosters a powerful and collective talent base to successfully serve our clients and the security community with unparalleled expertise.  </p>
<p>Bishop Fox is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex including sexual orientation and gender identity, national origin, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law.  All new hires must pass a background check as a condition of employment. </p>

United States

Penetration Tester

Amazon.com

Job summaryThe Amazon Information Security team is looking for a Senior Security Engineer to help ensure our services, applications, and websites are designed and implemented to the highest security standards. You have breadth and depth of security knowledge and can identify and advise on risks across multiple areas of an organization. You will join a team working on Software Supply Chain Security (SSC-S) initiatives and drive transformative changes on how thousands of Amazon dev teams consumes, build, operate and ship secure software. You will work with limited guidance in the face of ambiguity. You will take a long-term view of Amazon's software development security processes and tools. *The preferred location for this position is in Seattle, Austin or Arlington locations, however other locations may be considered as well.Key job responsibilities<ul><li>Evaluating and recommending new and emerging security products and technologies</li><li>Identifying security issues and risks, and developing mitigation plans</li><li>Through security risk assessments, identify repeatable work streams and influence automation of such streams to reduce cycle times and drive efficiency.</li><li>Participate in the design discussions and development of user stories for automation</li><li>Positively influence Security Governance initiatives; partner with engineering teams to develop a Security dashboard that provides ongoing Leadership visibility of the security posture, threats and risks.</li><li>Establish credibility and maintain strong working relationships with technical groups involved with security including but not limited to Security Teams, AWS (Amazon Web Services), Legal, Compliance, and Developer Community</li><li>Build and influence supply chain software security as a core competency throughout InfoSec’s relationships with internal Amazon teams, partners, and vendors.</li></ul>About the teamAt Amazon, we're working to be the most customer-centric company on earth. To get there, we need exceptionally talented, bright, and driven people. Join us!Inclusive Team Culture Here at Amazon, we embrace our differences. We are committed to furthering our culture of inclusion. We have ten employee-led affinity groups, reaching 40,000 employees in over 190 chapters globally. We have innovative benefit offerings, and host annual and ongoing learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences. Amazon’s culture of inclusion is reinforced within our 16 Leadership Principles, which remind team members to seek diverse perspectives, learn and be curious, and earn trust.  Work/Life Balance Our team puts a high value on work-life balance. It isn’t about how many hours you spend at home or at work; it’s about the flow you establish that brings energy to both parts of your life. We believe striking the right balance between your personal and professional life is critical to life-long happiness and fulfillment. We offer flexibility in working hours and encourage you to find your own balance between your work and personal lives. Mentorship &amp; Career Growth Our team is dedicated to supporting new members. We have a broad mix of experience levels and tenures, and we’re building an environment that celebrates knowledge sharing and mentorship. We care about your career growth and strive to assign projects based on what will help each team member develop into a better-rounded professional and enable them to take on more complex tasks in the future.<h3>Basic Qualifications</h3><ul><li>BS in Computer Science or related field, or equivalent work experience</li><li>At least 5 years of experience in application security, threat modeling, secure coding, software development, secure software or system design</li><li>At least 3 years of experience in a development or security role working with development team(s) that delivered commercial software or software-based services</li><li>Advanced knowledge and understanding of any combination of the following: security engineering, system and network security, authentication and security protocols, cryptography, or application security</li><li>An understanding of network and web related protocols (such as, TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols)</li><li>Experience with multiple programming languages (such as, Java, C++, Ruby, Python, Perl, etc.)</li></ul><h3>Preferred Qualifications</h3><ul><li>Experience managing and delivering security solutions at scale.</li><li>Experience with DevOps, Software Build and Deployment systems, Software Composition Analysis</li><li>Experience with service-oriented architecture and web services security</li><li>Experience with AWS or similar enterprise cloud computing platforms</li><li>Experience with the application of threat modeling or other risk identification techniques</li><li>Demonstrated experience collaborating with other security engineers and developers to deliver complex projects</li><li>Excellent written and verbal communication skills with the ability to convey technical information to a wide variety of audiences</li><li>Strong and creative problem-solving abilities</li><li>Meets/exceeds Amazon’s leadership principles requirements for this role</li><li>Meets/exceeds Amazon’s functional/technical depth and complexity for this role</li></ul>Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.

Seattle

Sr. Security Engineer

Job summaryThe Amazon Information Security team is looking for a Senior Security Engineer to help ensure our services, applications, and websites are designed and implemented to the highest security standards. You have breadth and depth of security knowledge and can identify and advise on risks across multiple areas of an organization. You will join a team focused on Software Supply Chain Security (SSC-S) improvement initiatives and help drive transformative changes on how thousands of Amazon developer teams consume, build, operate and ship secure software. You will take a long-term view of Amazon's software development security processes and tools and work with limited guidance in the face of ambiguity.*The preferred location for this position is in Seattle, Austin or Arlington locations, however other locations may be considered as well.Key job responsibilities<ul><li>Evaluating and recommending new and emerging security products and technologies</li><li>Identifying security issues and risks, and developing mitigation plans</li><li>Through security risk assessments, identify repeatable work streams and influence automation of such streams to reduce cycle times and drive efficiency.</li><li>Participate in the design discussions and development of user stories for automation</li><li>Positively influence Supply Chain Security initiatives</li><li>Partner with engineering teams to develop Security tooling</li><li>Develop mechanisms that provides ongoing Leadership visibility of the security posture, threats and risks.</li><li>Establish credibility and maintain strong working relationships with technical groups involved with software supply chain security including but not limited to Security Teams, AWS (Amazon Web Services), Legal, Compliance, and Developer Community</li></ul>About the teamAt Amazon, we're working to be the most customer-centric company on earth. To get there, we need exceptionally talented, bright, and driven people. Join us!Inclusive Team Culture Here at Amazon, we embrace our differences. We are committed to furthering our culture of inclusion. We have ten employee-led affinity groups, reaching 40,000 employees in over 190 chapters globally. We have innovative benefit offerings, and host annual and ongoing learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences. Amazon’s culture of inclusion is reinforced within our 16 Leadership Principles, which remind team members to seek diverse perspectives, learn and be curious, and earn trust.  Work/Life Balance Our team puts a high value on work-life balance. It isn’t about how many hours you spend at home or at work; it’s about the flow you establish that brings energy to both parts of your life. We believe striking the right balance between your personal and professional life is critical to life-long happiness and fulfillment. We offer flexibility in working hours and encourage you to find your own balance between your work and personal lives. Mentorship &amp; Career Growth Our team is dedicated to supporting new members. We have a broad mix of experience levels and tenures, and we’re building an environment that celebrates knowledge sharing and mentoring. We care about your career growth and strive to assign projects based on what will help each team member develop into a better-rounded professional and enable them to take on more complex tasks in the future.<h3>Basic Qualifications</h3><ul><li>BS in Computer Science or related field, or equivalent work experience</li><li>At least 5 years of experience in application security, threat modeling, secure coding, software development, secure software or system design</li><li>At least 3 years of experience in a development or security role working with development team(s) that delivered commercial software or software-based services</li><li>Advanced knowledge and understanding of any combination of the following: security engineering, system and network security, authentication and security protocols, cryptography, or application security</li><li>An understanding of network and web related protocols (such as, TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols)</li><li>Experience with multiple programming languages (such as, Java, C++, Ruby, Python, Perl, etc.)</li></ul><h3>Preferred Qualifications</h3><ul><li>Experience with DevOps, Software Build and Deployment systems, Software Composition Analysis</li><li>Experience with service-oriented architecture and web services security</li><li>Knowledge of, and experience with Software Supply Chain Security, NIST SSDF, SBOMs, Code Signing, and Verification</li><li>Experience with AWS or similar enterprise cloud computing platforms</li><li>Experience with the application of threat modeling or other risk identification techniques</li><li>Demonstrated experience collaborating with other security engineers and developers to deliver complex projects</li><li>Excellent written and verbal communication skills with the ability to convey technical information to a wide variety of audiences</li><li>Strong and creative problem-solving abilities</li><li>Meets/exceeds Amazon’s leadership principles requirements for this role</li><li>Meets/exceeds Amazon’s functional/technical depth and complexity for this role</li></ul>Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.

Security Engineer

Job summaryThe Devices and Services (D&amp;S) Trust &amp; Security team works to ensure that our devices and services are designed and implemented to the high standards required to maintain and enhance customer trust. Security and Privacy are paramount to maintaining trust and we need to continue to build trusted products, maintain and operate trusted environments, and advocate trust to customers and stakeholders. The team develops security automation for devices &amp; services, performs penetration testing, and handles and tracks incident responses to resolution. The Trust team is responsible for enabling business growth and innovation while honoring data policies and controls that help protect customer trust. We are responsible for defining and executing on the security and privacy requirements across the entire organization.Are you interested in being part of a top-notch security team covering all Amazon consumer devices (including hardware and low-level functionality) as well as key Amazon services supporting our consumer devices (such as Computer Vision, AppStore, Device Registration, Kindle, etc.)? Amazon Lab126 is looking for skilled and exceptional security researchers to find security issues in our products to better protect our customers. Your work directly impacts the way our customers, teams, and business across the globe get things done. If you care deeply about keeping customers safe, then we have a job for you! You can learn more about security at Lab 126 here: https://www.youtube.com/watch?v=k0UTTxzeGogKey job responsibilitiesIn this role, you will be part of a dedicated team of passionate security engineers performing vulnerability research to detect high impact issues in Amazon consumer products. You will work on identifying vulnerabilities in diverse product stacks spanning multiple architectures, SoCs to identify vulnerabilities in low level embedded software, operating systems, applications, peripherals or web client, web sites, and cloud services as well as introduce defenses to raise the effort for attackers. You will identify detective and preventative technology and automation to reduce the impact of security threats in advance and be directly involved in our response to critical security issues. You will work with security stakeholders within the company, security research community and partner organizations across the ecosystem to address security issues collaboration with product teams and to do the right thing for our organization. You will lead gap analysis efforts to identify learnings to improve product security. You're well-known for your excellent prioritization skills as well as your ability to communicate at all levels of an organization. If you're passionate about finding security bugs, analyzing security exploits, and enjoy seeing your work's impact across Amazon consumer products and services, then this position is for you. A day in the life• Perform vulnerability detection using variety of automated static, dynamic analysis as well as custom tooling (e.g. static analyzers, fuzzers, scanners, analyzers, etc.) to identify device or web services, vulnerabilities and develop proof of concept exploits.• Conduct campaigns to identify vulnerabilities in various platforms, technology stacks across devices (Android based, real time operating systems, protocols - Wi-Fi, BT, RF) and services (web services, cloud infrastructure and mobile applications)• Advocate for raising security bar for product teams by recommending security fixes, technical solutions and designs to enable product teams to mitigate classes of security vulnerabilities.• Perform analysis of publicly reported vulnerabilities and attacks to synthesize areas of proactive focus spanning product stacks.• Develop detailed technical documentation describing identified vulnerabilities, associated impact as well as recommendations for communication with internal engineering stakeholders as well as leadership• Perform analysis of reported issues and work with product, partner and vendor teams to remediate vulnerabilities. <h3>Basic Qualifications</h3>• Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, Cyber Security or a related field• 7+ years relevant work experience• 2+ year of development experience in C, C++, assembly (x86, x86-64, ARM) and/or Java• Experience with at least one scripting language (e.g. python, ruby, bash, JavaScript, Go)<h3>Preferred Qualifications</h3>Master’s degree in Computer Science, Computer Engineering, Electrical Engineering or equivalent. Candidates with experience in at least one of the areas is preferred. • Experience in performing vulnerability research and reporting vulnerabilities in widely used software or sharing contributions via public research, blogging, and presentations with the security community. • Experience in embedded/IoT device security or web services security specifically, with experience of performing software security audits, vulnerability discovery and analysis. • Experience with common software security vulnerabilities and methods of exploitation, such as memory corruption, privilege escalation, web application exploitation, file format vulnerabilities, protocol-based weaknesses, etc.• Experience with static and dynamic tools for vulnerability detection and exploit mitigation techniques• Experience with extracting firmware, reverse engineering a variety of hardware and software, including firmware, operating systems, and applications, binary analysis and proof of concept exploit development. • Knowledge of common wireless connectivity protocols with focus on protocol or implementation security vulnerabilities (e.g. Bluetooth, Wi-Fi, 802.15.4, Zigbee) or hardware security mechanisms, including secure boot, trusted execution environments or operating system internals and associated security issues with emphasis on Linux, Android and common RTOS environments• Experience with analysis tools such as IDA, Ghidra, Radare, Burp Suite, and network traffic dissectors such as Wireshark.o Experience with service-oriented architecture, web services security, AWS/cloud infrastructure securityo Foundation in, and in-depth technical knowledge of, security engineering, computer and network security, authentication, security protocols and applied cryptography.o Knowledge of network and web related protocols (e.g., TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols)keyword:digitalsecurityAmazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.Pursuant to the Los Angeles Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

California

Senior Security Vulnerability Researcher

Avertium

Avertium is the security partner that companies turn to for end-to-end Cybersecurity solutions that attack the chaos of the cybersecurity landscape with context. By fusing together human expertise and a business-first mindset with the right combination of technology and threat intelligence, Avertium delivers a more comprehensive, more programmatic approach to cybersecurity - one that drives action on the ground and influence in the boardroom. That's why over 1,200 mid-market and enterprise-level organizations across 15 industries turn to Avertium when they want to be more efficient, more effective, and more resilient when waging today's cyber war. Show no weakness.®The DFIR Consultant will contribute to Avertium’s DFIR practice, implement and execute best practices for incident handling, investigation and reporting, continuously develop the skills and expertise required to achieve customer objectives, and work with customers and other partners to respond to incidents, identify root causes, recommend solutions, and recover compromised environments.
<h3>Responsibilities:</h3>
<ul>
<li>Lead incident response engagements. Understand client requirements, coordinate the incident response team and liaising with client’s business stakeholders and technical teams.</li><li>Liaise with client third parties including legal, insurance and service providers, and provide guidance and subject matter expert advice to customer</li><li>Advise clients on business, technical, regulatory and reputation risk.</li><li>Advise clients on strategies to contain incidents and limit business impact of cyber incidents</li><li>Advise other incident response team members on strategies and techniques to accomplish client objective</li><li>Collect technical evidence from clients’ environments to prepare for forensic investigations</li><li>Conduct forensic investigations to determine the scope and impact of cyber incidents</li><li>Determine root cause of incidents using available evidence and analytical tools</li><li>Determine scope of data access and exfiltration</li><li>Provide recommendations and guidance to successfully evict threat actors from customer environments</li><li>Gather intelligence on threat actors to inform recommended containment, remediation and recovery actions</li><li>Develop threat intelligence reports and briefings in support of Avertium’s CTI and MSS groups</li><li>Manage the recovery of clients’ IT infrastructure during and after cyber attacks</li><li>Brief clients’ management, IT teams and third parties during and after cyber attacks</li><li>Prepare and deliver post-incident reports to client teams</li><li>Conduct threat hunts within EDR and SIEM tools for managed detection and response customers</li><li>Support team members in deeply technical investigations, provides guidance, and practical advice</li><li>Provides thought leadership on the design, and implementation of new detection strategies</li><li>Stays relevant with cyber security threats, counter measures and associated technologies</li><li>Participate in an on-call rotation to provide 24X7X365 client incident coverage</li><li>Identify opportunities to position additive professional and managed services to clients</li></ul>
<h3>Qualifications for Success:</h3>
<ul>
<li>Minimum of Bachelor's Degree in computer science, telecommunications management, electrical engineering, or a related field or have 5+ years of experience with broad background in Cyber Security specifically relating to digital forensics and response.</li><li>Minimum of 3 years of direct experience in digital forensics and incident response</li><li>Dynamic team member able to manage multiple projects simultaneously</li><li>Highly capable communicator able to relate technical concepts to business stakeholders</li><li>Advanced cyber certifications including GCIH, CISSP, CISA, CEH, ECIH and/or technology-specific certifications such as MCSE, CCNA are preferred</li><li>Skills:</li><li>Conversant in many areas of cyber security and learns new concepts quickly</li><li>Proven subject matter ability in relevant areas, such as incident response, intrusion analysis, incident handling, malware analysis (including network attack vectors and YARA RegEx), web security or security engineering</li><li>Strong working knowledge of common security tools, such as a SIEM, AV, scanners, proxies, WAF (policies rules, process and workflow), netflow, IDS or forensics tools</li><li>Strong interpersonal and leadership skills when building credibility as a peer as well as in presenting analytical data effectively to varied (including executive) audiences</li><li>Strong understanding of the cyber kill chain, attacker tactics, techniques, and procedures, and the MITRE ATT&amp;CK Framework</li><li>Strong understanding of cloud technologies and related security best practices. Experience handling security incidents in the cloud.</li><li>Firm understanding of endpoint and network-based security solutions, including EDR, firewalls, proxies and email security gateways</li><li>A solid grasp of networking and core Internet protocols (e.g. TCP/IP, DNS, SMTP, HTTP, SMB, and distributed networks)</li><li>Proficient in network forensics including PCAP analysis, network security, and IDS/IPS analysis</li><li>Able to recognize common attack vectors such as recon scans, botnet, malware, command and control activity (C2), worms, trojans, and viruses</li><li>Experience with common operating systems, such as Linux, both from a forensic and threat hunting point of view.</li><li>Strong understanding of relevant laws and regulations (e.g. HIPAA, CCPA, GDPR, PCI, etc) as related to cyber incident handling and remediation</li><li>#LI-CS1</li></ul>In addition to a career in the challenging world of cyber security, Avertium offers competitive salaries, full benefits, unlimited paid time off, participation in 401(k), and opportunities for professional growth and development. We offer the opportunity to work with cutting-edge security technologies in a stimulating work environment.Avertium provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

Digital Forensics &amp; Incident Response Consultant | Remote, USA

Apply to Tcpip Cyber Security Jobs in companies remotely and near you. New Tcpip Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Penetration Tester at Bishop Fox	Remote Full Time Pentester Consultant Javascript
Sr. Security Engineer at Amazon.com	Full Time Application Security Automation AWS C
Security Engineer at Amazon.com	Full Time Application Security Automation AWS C
Senior Security Vulnerability Researcher at Amazon.com	Remote Full Time Javascript Android Audits
Digital Forensics & Incident Response Consultant \| Remote, USA at Avertium	Remote Full Time Forensic Consultant Incident Response

Tcpip Cyber Security Jobs

0 Tcpip Cyber Security Jobs. Page 1 of 1

5 closed tcpip cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Tcpip Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Tcpip Cyber Security Jobs

0 Tcpip Cyber Security Jobs. Page 1 of 1

5 closed tcpip cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Tcpip Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter