Bishop Fox

Bishop Fox is the leading authority in offensive security, providing solutions ranging from continuous penetration testing, red teaming, and attack surface management to product, cloud, and application security assessments. We’ve worked with more than a quarter of the Fortune 100, half of the Fortune 10, eight of the top 10 global technology companies, and all of the top global media companies. Our Cosmos platform was named Best Emerging Technology in the 2021 SC Media Awards and our offerings are consistently ranked as “world class” in customer experience surveys. For more than 16 years, we've been contributing and giving back to the security community. We’ve published more than 16 open source tools and 50 security advisories in the last five years alone. Learn more at bishopfox.com or follow us on Twitter.
We’re looking for talented, experienced professional hackers to help us secure some of the world’s most complex software and sophisticated technologies. You’ll be working alongside our US and other internationally-based teams supporting clients across multiple industries. 
Who You Are and What You’ll Do
You fancy yourself a Pentester. You know your way around source code. You’ve plundered apps and pillaged networks (legally, of course). You have a passion for hacking and information security. If you’re not already doing it professionally, you’re pen testing in your free time. You may also have written a few blog posts about your favorite hacks or have presented at a handful of conferences – with an eye to doing more.
With Bishop Fox, your responsibilities would include testing web applications, hacking networks, and reversing software. Some days, you’ll be red teaming wireless networks and physically breaking into buildings. Other days, you’ll be analyzing source code and building threat models. Every day at Bishop Fox, you’ll be learning.
As a consultant, you’ll work on a variety of projects which include short-term engagements and extended program work with well-established clients, you'll solve challenging technical problems and build creative solutions. As a trusted advisor, you’ll provide your expert opinion to help our clients navigate difficult business decisions.                                                       
Your Education and Experience
You just have to be good at and, most importantly, love what you do. Don’t worry about a piece of paper; we won’t. Here’s a list of qualities we’re looking for:
<ul>
<li>Penetration testing and code review skills</li>
<li>Vulnerability assessment experience</li>
<li>Understanding security fundamentals and common vulnerabilities (e.g. OWASP Top Ten)</li>
<li>2+ years of application security experience</li>
<li>Additional experience in Cloud security; background in system and network security, authentication and security protocols, and applied cryptography are helpful</li>
<li>Scripting/programming skills (e.g., Python, Ruby, Java, JavaScript, etc.)</li>
<li>Network and web-related protocol knowledge (e.g., TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols)</li>
<li>Advanced relevant academic training is a definite bonus</li>
</ul>
Bishop Fox has always offered its employees the ability to work remotely, and for this role you could work remotely in the United States or Mexico. Equity is offered to all employees and vesting starts on the first day.  You also have the opportunity to earn additional equity.  Our comprehensive benefits program is tailored to meet your needs at an affordable price. We embrace diversity and an inclusive culture.  We value our employees and who they are, which fosters a powerful and collective talent base to successfully serve our clients and the security community with unparalleled expertise.  
Bishop Fox is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex including sexual orientation and gender identity, national origin, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law.  All new hires must pass a background check as a condition of employment.

United States

Penetration Tester

Lob was built by technical co-founders with a vision to make the world programmable.
We offer two flagship APIs (print &amp; mail and address verification) that enable companies to send postal mail as effortlessly as sending emails. Lob is venture-backed by the most reputable investors in tech, and we are rapidly growing our team to shape the future of our company and meet the demands of a quickly growing customer base and dynamic product offerings.
As a proud Pledge 1% company, we’re committed to leveraging our product, partnerships, and people to drive positive social impact through <a href="http://www.lob.org" rel="noopener noreferrer nofollow ugc" target="_blank">Lob.org</a>, and are on a mission to make direct mail more sustainable.
We offer remote working opportunities, unless otherwise described in the job description, in AZ, CA, CO, DC, GA, IL, MA, MD, MI, MN, NC, NV, NY, OR, PA, TX, UT, and WA. You can also work onsite at our San Francisco headquarters.
If you are looking for a progressive, fun-spirited, and mentally stimulating environment, come join us at Lob!The Legal, Compliance and Security (LCS) team works across Lob to organize risk governance organizational structures, methodologies, and processes that are commensurate with industry best practice but tailored to Lob’s niche risk sensitivities. LCS capabilities allow Lob to manage security risk &amp; control programs that enable us to achieve company goals and better protect its customers and data in a responsible and proactive manner. We work with internal and external stakeholders to build and operate programs that last - including IT, Engineering, Product, Sales and Operations. 
We are growing our LCS team to further mature our compliance and security programs and ensure that the technical implementation of our internal controls is strong and well-managed. You will be responsible for maintaining and improving our common risk &amp; controls framework and building sustainable control assurance programs that keep the company aligned with our regulatory &amp; compliance obligations, policy requirements, and customer expectations. Your focus will be to ensure we have adequate internal controls in place, drive control adoption and maintenance, support control owner education and awareness, and manage roadmaps to resolve control gaps in a timely fashion.
<h3>As the Senior GRC and Security Analyst, you’ll…</h3>
<ul>
<li>Mature the company’s unified security risk and control framework and ensure its alignment against applicable laws, regulations, industry standards such as GDPR, CCPA, SOC, ISO, NIST Cyber Security Framework (CSF), PCI Data Security Standard, etc. as well as internal Information Security and IT policies &amp; standards</li>
<li>Support the LCS team and other stakeholders in integrating the unified security risk and control framework as part of their service capabilities to drive programmatic consistency</li>
<li>Support oversight and governance by building control assurance programs to proactively assess and report on the design, operating effectiveness, and sustainability of key controls</li>
<li>Lead efforts to address control implementation, remedy control gaps that address the root cause of control failures, drive control ownership and accountability, and build process and control documentation as needed</li>
<li>Be responsible for configuration and support of a wide range of security and networking technologies such as: IPS/IDS, SIEM, vulnerability scanners, identity and access management, access control, DLP, firewalls, endpoint security, email filtering, routers, switches, etc.</li>
<li>Working closely with various teams, to evaluate the current architecture and security related processes such as vulnerability management, patch management, endpoint security, cloud environment, etc. looking for ways to design and implement improvements</li>
<li>Assist in leading security incident response efforts to gather required evidence and remediate incidents</li>
<li>Manage Lob’s vulnerability management and patch management programs to include our bug bounty program, annual penetration tests, etc.</li>
<li>Be responsible for planning and managing security related projects</li>
</ul>

<h3>What will you bring to this role…</h3>
<ul>
<li>Minimum 8+ years of related work experience building or operating internal control programs to mitigate risks around security, confidentiality, integrity, availability, and privacy. </li>
<li>Prior technical security experience highly preferred</li>
<li>Strong experience with common industry audits and frameworks (SOC 2, ISO, HITRUST, etc) </li>
<li>Ability to work efficiently with minimal oversight/direction and collaborate effectively in cross functional projects</li>
<li>Have technical security-related knowledge of common risks, vulnerabilities, and threats and solid experience in escorting these issues through risk analysis / treatment / mitigation processes</li>
</ul>
&lt;#LI-REMOTE #LI-RW1We’re not just building a platform to make the world programmable. <a href="https://www.lob.com/blog/lobs-culture-values" rel="noopener noreferrer nofollow ugc" target="_blank">We’re also designing a great place to work</a>, and ​​a ground floor opportunity as an early member of the Lob team; you’ll directly shape the direction of our company.
Perks
<ul>
<li>Health benefits for you and your dependent(s)</li>
<li>Medical Flexible Spending Accounts (FSA)</li>
<li>Flexible vacation policy</li>
<li>Wellness program</li>
<li>Paid parental leave</li>
<li>401K</li>
<li>Paid volunteer time off to support the organizations you care most about</li>
<li>Commuter &amp; Parking benefits (includes monthly stipend) for those based out of our San Francisco office</li>
<li>Free lunch, snacks and dinner when working at our San Francisco office</li>
<li>Dog-friendly San Francisco office</li>
<li>Allowance for in-person team meetings (all flights and accommodations covered) for those not based out of our San Francisco office</li>
<li>Home-office setup and phone/internet stipend for those not based out of our San Francisco office</li>
</ul>
Our Commitment to Diversity
Lob is an equal opportunity employer and <a href="https://www.lob.com/blog/power-diversity-starts-data" rel="noopener noreferrer nofollow ugc" target="_blank">values diversity</a> of <a href="https://www.lob.com/blog/a-commitment-to-diversity" rel="noopener noreferrer nofollow ugc" target="_blank">backgrounds and perspectives</a> to cultivate an environment of understanding to have greater impact on our business and customers. We encourage under-represented groups to apply and do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability status, or criminal history in accordance with local, state, and/or federal laws, including the <a href="https://sfgov.org/olse/sites/default/files/Document/FCO%20Art.%2049%20Official%20Notice%20to%20print%202017.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">San Francisco’s Fair Chance Ordinance</a>.

Senior GRC and Security Analyst

Rubrik

The Information Security organization advances the overall state of security at Rubrik through critical initiatives and coordination of large security projects. Information Security builds technologies, tools, and processes to better enable teams at Rubrik to develop secure software and protect data and systems with appropriate security controls. Information Security also develops systems to monitor and respond to attacks against our assets, provides awareness education to teams on security best practices for data protection, and ensures data governance and data sharing relationships with third parties in order to securely protect Rubrik information. 
Where can you make an impact?
Rubrik is seeking an Enterprise Security Engineer.  In this role, you will be responsible for ensuring that Rubrik's Corporate IT services are designed and implemented to the highest possible security standards.  You will partner with a variety of stakeholders across the business to achieve successful security outcomes in customer experience and productivity deliverables.
What you'll be doing:
<ul>
<li>Partner with all teams across Rubrik to create secure corporate infrastructure design and deployment architectures utilizing threat models and risk analysis documentation</li>
<li>Define organization policies for secure cloud design models within enterprise, hybrid, and public cloud environments including VMware, AWS, Azure and GCP</li>
<li>Work with development teams, operations, governance, and other stakeholders to draft security standards and implement monitoring, alerting, and governance</li>
<li>Design and implement standards across Identity (Okta), Endpoint (Windows, MacOS, Linux), Secrets Management (Vault, Lastpass) and Business Applications (Salesforce)</li>
<li>Support incident responders in analyzing applicable threats, vulnerabilities, controls and residual risks</li>
<li>Analyze and harden existing applications, infrastructure, automation, and deployment processes including CircleCI and Github</li>
<li>Coordinate with security researcher community for submitted vulnerabilities with issues and remediation of threats in both hybrid and public cloud environments</li>
</ul>
Experience you'll need:
<ul>
<li>Bachelor’s degree required; BS or MS in Computer Science, Information Technology, or a related field</li>
<li>6+ years experience in enterprise security, with hands on experience in administration and design across Windows, Mac, Okta and public cloud infrastructure</li>
<li>2+ years experience in VMWare and/or Network security modeling</li>
<li>Broad knowledge of enterprise attack vectors and exploits in both end-user and IT Apps</li>
<li>Subject matter expertise in business applications, endpoint and Identity management</li>
<li>Deep understanding of endpoint systems, corporate networking including wi-fi and IT application systems (Salesforce, Mulesoft, Lastpass, etc)</li>
<li>Programming experience in Python, Go or Java</li>
<li>Security expertise in at least one major public cloud provider (AWS, GCP, Azure) </li>
<li>Experience with deploying and securing Enterprise applications and environments at scale</li>
<li>Knowledge of regulatory guidelines and standards such as SOC2, ISO 27001, FedRAMP, etc.</li>
<li>Understanding of corporate security maturity model frameworks and how to apply them</li>
<li>Strong written and verbal communication skills</li>
</ul>About Rubrik:
Rubrik, the Zero Trust Data Security Company™, delivers data security and operational resilience for enterprises. Rubrik’s big idea is to provide data security and data protection on a single platform, including Zero Trust Data Protection, Ransomware Investigation, Incident Containment, Sensitive Data Discovery, and Orchestrated Application Recovery. This means your data is ready so you can recover the data you need, and avoid paying a ransom. Because when you secure your data, you secure your applications, and you secure your business.
We are <a href="https://www.rubrik.com/lp/analyst-reports/gartner-mq" rel="noopener noreferrer nofollow ugc" target="_blank">a leader in data security</a>, have been recognized as as a Forbes Cloud 100 Company, named as a LinkedIn Top 10 Startup and are proud to have earned Great Place to Work® Certification™. There has never been a more exciting time to join Rubrik, and our future is even brighter. The work you do will help propel our next chapter of growth as you do the best work of your career.
<a href="https://www.linkedin.com/company/rubrik-inc/mycompany/verification/" rel="noopener noreferrer nofollow ugc" target="_blank">Linkedin</a> | <a href="https://twitter.com/rubrikinc" rel="noopener noreferrer nofollow ugc" target="_blank">Twitter</a> | <a href="https://www.instagram.com/lifeatrubrik/" rel="noopener noreferrer nofollow ugc" target="_blank">Instagram</a> | <a href="https://www.rubrik.com" rel="noopener noreferrer nofollow ugc" target="_blank">Rubrik.com </a>| 
Diversity, Equity &amp; Inclusion @ Rubrik: 
At Rubrik we are committed to building and sustaining a culture where people of all backgrounds are valued, know they belong, and believe they can succeed here.
Rubrik's goal is to hire and promote the best person for the job, no matter their background. In doing so, Rubrik is committed to correcting systemic processes and cultural norms that have prevented equal representation. This means we review our current efforts with the intent to offer fair hiring, promotion, and compensation opportunities to people from historically underrepresented communities, and strive to create a company culture where all employees feel they can bring their authentic selves to work and be successful.
Our DEI strategy focuses on three core areas of our business and culture:
<ul>
<li>Our Company: Build a diverse company that provides equitable access to growth and success for all employees globally. </li>
<li>Our Culture: Create an inclusive environment where authenticity thrives and people of all backgrounds feel like they belong.</li>
<li>Our Communities: Expand our commitment to diversity, equity, &amp; inclusion within and beyond our company walls to invest in future generations of underrepresented talent and bring innovation to our clients.</li>
</ul>
<h5>Equal Opportunity Employer/Veterans/Disabled: Rubrik is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.</h5>
<h5>Rubrik provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Rubrik complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training. </h5>
<h5>Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please contact us at hr@rubrik.com if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.</h5>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO IS THE LAW</a>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO IS THE LAW - POSTER SUPPLEMENT</a>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_English_unformattedESQA508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">PAY TRANSPARENCY NONDISCRIMINATION PROVISION</a>
<a href="https://www.dol.gov/sites/dolgov/files/olms/regs/compliance/eo_posters/employeerightsposter2page_19final.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">NOTIFICATION OF EMPLOYEE RIGHTS UNDER FEDERAL LABOR LAWS</a>

Palo Alto

Sr Enterprise Security Engineer II

Optiv

At Optiv, we’re on a mission to help our clients make their businesses more secure. We’re one of the fastest-growing companies in a truly essential industry. Join us.Who we are looking for:The Cyber Security Advisor (CSA) plays a critical role in serving as a trusted partner to Optiv’s clients. By combining business and security practitioner knowledge, the Cyber Security Advisor designs security solutions using some of the most advanced security services and technologies to achieve highly defensible and scalable security programs to align with the clients’ security initiatives. The Cyber Security Advisor has real-world experience and can design pragmatic security solutions tailored to each client’s unique environment. It is a challenging yet rewarding role that differentiates Optiv from the competition. This person may be expected to cover key accounts by traveling to Bentonville and Fayetteville. AR.
<h3>How you'll make an impact:</h3>
<ul>
<li>Effectively work with multiple client personas across the executive branch (CxO), as well as other relevant personas to develop security strategy and define roadmaps to execute on security strategy aligned business goals, budgetary spend, and metrics based on return of investment</li><li>Understand the Optiv security taxonomy and clearly articulate how the various elements of the applicable Optiv solution portfolio meet the specific needs of the client stakeholders</li><li>Design and solution complete security programs to meet client objectives, that includes technology and services</li><li>Interface and partner with the internal Optiv teams particularly service delivery liaisons to align client expectations with the entire Optiv solution portfolio to ensure service delivery excellence and client satisfaction</li><li>Meet quarterly and annual quota objectives working in partnership with the sales team using Optiv sales operating processes by adding value throughout the entire sales motion with such activities as:</li><li>Facilitating new discussions by leveraging peer and industry network contacts</li><li>Telling the Optiv story as the market leading security solutions integration provider</li><li>Performing requirements analysis and qualification of opportunities</li><li>Leading solution development efforts in security technology offerings using the applicable Optiv security taxonomy</li><li>Coordinating demonstrations and security technology evaluations</li><li>Seamlessly transitioning engagements for delivery to the services organization</li><li>Working with Optiv’s Focused Partners to drive strategic initiatives and Go To Market strategies</li><li>Maintain advisory relationships with key stakeholders at clients by providing thought leadership, support, information, and guidance in conjunction with sales partners</li><li>Stay abreast of industry trends and news in order to provide thought leadership, support, analysis and guidance to clients and internal Optiv groups.</li><li>Align with internal security and solutions communities for internal initiatives</li><li>Support marketing to build Optiv brand awareness through speaking at corporate sponsored events, writing industry articles and leveraging social media to properly represent Optiv.</li><li>Actively pursue personal development by maintaining and obtaining technical capabilities, soft skills and security specific knowledge through formal education, certification and other avenues.</li></ul>
<h3>Qualifications for success:</h3>
<ul>
<li>BS/BA or equivalent and applicable work experience</li><li>Progress towards an industry standard cert or relevant academic experience</li><li>Advisory experience across multiple information security domains</li><li>Three or more years of blue team or red team experiences</li><li>Ability to listen and communicate effectively with senior business executives and facilitate high-level business discussions</li><li>Qualify and prescribe implementation services for client need and review Statements of Work (SOWs) against those services</li><li>Thorough understanding of the current threat landscape, vulnerabilities, defensive controls and the ability to advise clients on security technology recommendations, including review of security technology quotes against those recommendations</li><li>Ability to work in a highly adaptable and nimble team environment with responsive communication</li><li>Strong presentation, written, and oral communication skills to clients, including whiteboard sessions and other presentation mechanisms</li><li>Highly motivated self-starter that does not require day-to-day management. </li><li>Ability to work remotely with distributed teams in a decentralized environment</li><li>Work with automated methods and tools to ensure client requests are fielded</li><li>Valid driver’s license or other valid government accepted identification</li><li>Ability to travel within assigned region or assigned accounts, as well as internationally as needed</li><li>Perform additional duties as directed or needed</li>#LI-MM1</ul>With Optiv you can expect:• A company committed to championing Diversity, Equality, and Inclusion through our Affinity groups including, Black Employee Network, Disabled Employee Network, Latino Employee Network, Optiv Pride (LGBTQIA+), Veterans Support Network, and Women's Network.• Work/life balance. We offer “Recharge” a flexible, time-off program that encourages eligible employees to take the time they need to recharge • Professional training resources, including tuition reimbursement• Creative problem-solving and the ability to tackle unique, complex projects• Volunteer Opportunities. “Optiv Chips In” encourages employees to volunteer and engage with their teams and communities. • The ability and technology necessary to productively work remote/from home (where applicable)If you are seeking a culture that supports growth, fosters success, and moves the industry forward, find your place at Optiv! As a market-leading provider of cyber security solutions, Optiv has the most comprehensive ecosystem of security products and partners to deliver unparalleled services. Our rich and successful history with our clients is based on trust, serving more than 12,000 clients of varying sizes and industries, including commercial, government, and education. We have the proven expertise to plan, build, and run successful security programs across Risk Management, Cyber Digital Transformation, Threat Management, Security Operations - Managed Services, and Identity and Data Management.Optiv is an equal opportunity employer. All qualified applicants for employment will be considered without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, status as an individual with a disability, veteran status, or any other basis protected by federal, state, or local law.

Fayetteville

Cyber Security Advisor

Amazon.com

Job summaryThe Devices and Services (D&amp;S) Trust &amp; Security team works to ensure that our devices and services are designed and implemented to the high standards required to maintain and enhance customer trust. Security and Privacy are paramount to maintaining trust and we need to continue to build trusted products, maintain and operate trusted environments, and advocate trust to customers and stakeholders. The team develops security automation for devices &amp; services, performs penetration testing, and handles and tracks incident responses to resolution. The Trust team is responsible for enabling business growth and innovation while honoring data policies and controls that help protect customer trust. We are responsible for defining and executing on the security and privacy requirements across the entire organization.Are you interested in being part of a top-notch security team covering all Amazon consumer devices (including hardware and low-level functionality) as well as key Amazon services supporting our consumer devices (such as Computer Vision, AppStore, Device Registration, Kindle, etc.)? Amazon Lab126 is looking for skilled and exceptional security researchers to find security issues in our products to better protect our customers. Your work directly impacts the way our customers, teams, and business across the globe get things done. If you care deeply about keeping customers safe, then we have a job for you! You can learn more about security at Lab 126 here: https://www.youtube.com/watch?v=k0UTTxzeGogKey job responsibilitiesIn this role, you will be part of a dedicated team of passionate security engineers performing vulnerability research to detect high impact issues in Amazon consumer products. You will work on identifying vulnerabilities in diverse product stacks spanning multiple architectures, SoCs to identify vulnerabilities in low level embedded software, operating systems, applications, peripherals or web client, web sites, and cloud services as well as introduce defenses to raise the effort for attackers. You will identify detective and preventative technology and automation to reduce the impact of security threats in advance and be directly involved in our response to critical security issues. You will work with security stakeholders within the company, security research community and partner organizations across the ecosystem to address security issues collaboration with product teams and to do the right thing for our organization. You will lead gap analysis efforts to identify learnings to improve product security. You're well-known for your excellent prioritization skills as well as your ability to communicate at all levels of an organization. If you're passionate about finding security bugs, analyzing security exploits, and enjoy seeing your work's impact across Amazon consumer products and services, then this position is for you. A day in the life• Perform vulnerability detection using variety of automated static, dynamic analysis as well as custom tooling (e.g. static analyzers, fuzzers, scanners, analyzers, etc.) to identify device or web services, vulnerabilities and develop proof of concept exploits.• Conduct campaigns to identify vulnerabilities in various platforms, technology stacks across devices (Android based, real time operating systems, protocols - Wi-Fi, BT, RF) and services (web services, cloud infrastructure and mobile applications)• Advocate for raising security bar for product teams by recommending security fixes, technical solutions and designs to enable product teams to mitigate classes of security vulnerabilities.• Perform analysis of publicly reported vulnerabilities and attacks to synthesize areas of proactive focus spanning product stacks.• Develop detailed technical documentation describing identified vulnerabilities, associated impact as well as recommendations for communication with internal engineering stakeholders as well as leadership• Perform analysis of reported issues and work with product, partner and vendor teams to remediate vulnerabilities. <h3>Basic Qualifications</h3>• Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, Cyber Security or a related field• 7+ years relevant work experience• 2+ year of development experience in C, C++, assembly (x86, x86-64, ARM) and/or Java• Experience with at least one scripting language (e.g. python, ruby, bash, JavaScript, Go)<h3>Preferred Qualifications</h3>Master’s degree in Computer Science, Computer Engineering, Electrical Engineering or equivalent. Candidates with experience in at least one of the areas is preferred. • Experience in performing vulnerability research and reporting vulnerabilities in widely used software or sharing contributions via public research, blogging, and presentations with the security community. • Experience in embedded/IoT device security or web services security specifically, with experience of performing software security audits, vulnerability discovery and analysis. • Experience with common software security vulnerabilities and methods of exploitation, such as memory corruption, privilege escalation, web application exploitation, file format vulnerabilities, protocol-based weaknesses, etc.• Experience with static and dynamic tools for vulnerability detection and exploit mitigation techniques• Experience with extracting firmware, reverse engineering a variety of hardware and software, including firmware, operating systems, and applications, binary analysis and proof of concept exploit development. • Knowledge of common wireless connectivity protocols with focus on protocol or implementation security vulnerabilities (e.g. Bluetooth, Wi-Fi, 802.15.4, Zigbee) or hardware security mechanisms, including secure boot, trusted execution environments or operating system internals and associated security issues with emphasis on Linux, Android and common RTOS environments• Experience with analysis tools such as IDA, Ghidra, Radare, Burp Suite, and network traffic dissectors such as Wireshark.o Experience with service-oriented architecture, web services security, AWS/cloud infrastructure securityo Foundation in, and in-depth technical knowledge of, security engineering, computer and network security, authentication, security protocols and applied cryptography.o Knowledge of network and web related protocols (e.g., TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols)keyword:digitalsecurityAmazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.Pursuant to the Los Angeles Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

California

Senior Security Vulnerability Researcher

Apply to Vulnerabilities Cyber Security Jobs in companies remotely and near you. New Vulnerabilities Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Penetration Tester at Bishop Fox	Remote Full Time Pentester Consultant Javascript
Senior GRC and Security Analyst at Lob	Remote Full Time Analyst Incident Response Audits
Sr Enterprise Security Engineer II at Rubrik	Full Time Analyst Windows Automation AWS
Cyber Security Advisor at Optiv	Remote Full Time Red Team Blue Team Golang
Senior Security Vulnerability Researcher at Amazon.com	Remote Full Time Javascript Android Audits

Vulnerabilities Cyber Security Jobs

0 Vulnerabilities Cyber Security Jobs. Page 1 of 1

5 closed vulnerabilities cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Vulnerabilities Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Vulnerabilities Cyber Security Jobs

0 Vulnerabilities Cyber Security Jobs. Page 1 of 1

5 closed vulnerabilities cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Vulnerabilities Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter