CRI Group

<p>Nature of the tasks- Contribute to the design of the overall application security.- Define security requirements and derive technical actions targeting the application components and the code base.- Analyse SAST and DAST findings (initial triage with the team), performing code review of implemented corrections.- Draft documentation such as architecture design descriptions, assessment reports and configuration descriptions.- Take an active part in developing and improving the application security, and have it understood and implemented by the team.- Analyse risks and security policy requirements and propose actions.- Vulnerability testing definition of corrective actions.- Categorize events, incidents and vulnerabilities based on relevance, exposure and impact.- Advance security enhancements in DevSecOps processes.- Provide security training and education.- Draft security programmes, security plans and propose implementation actions.- Animate the Security Champions communitySkills and knowledge- Experience with ISO 27000 family of standards or equivalent security standards implementation. - Knowledge of ITSRM2 is a plus.- Excellent knowledge of application security.- Experience in the security aspect of software development (i.e.: authentication with open id connect - SAML or CAS, secure rest or web services, encryption with PKI, authorisation, secrets management).- Experience with secure IT development patterns.- Experience in the security domain- Understanding of risk assessments- Experience in penetration testing and ethical hacking (i.e.: usage of tools like Metasploit, Burpsuite or equivalent).- Experience with security test tools (i.e.: Fortify or equivalent) and web site vulnerability scans.- Good understanding of the 3rd party dependency security (libraries, container and VM images).- Knowledge of OWASP.- Proven experience in Information Systems Development and Information Systems Security, preferably for Java EE technology (at minimum understanding the code and architectural blueprints, however hands-on programming experience is a plus- Knowledge of Agile methodology- Autonomous and rapid self-starting capability.- Strong organisational and time-management skills. - Strong team spirit.- Ability to apply high quality standards.- Capability of integration in an international/multi-cultural environment.- Ability to participate in multi-lingual meetings.- Ability to understand, speak and write English (B2 level)- Proactive attitude, communicative (e.g., good listener) and customer-oriented.Specific expertise and technologies- at least 5 years of specific expertise in Owasp standard (min. competence level 4 to 5)- at least 5 years of specific expertise in IT development patterns IT development patterns and architecture (min. competence level 4 to 5)- at least 5 years of specific expertise in Experience with security test tools SAST , DAST (min. competence level 4 to 5)CERTIFICATIONS:At least one following certificates are required for the performance of tasks:- Certified Information Systems Security Professional (CISSP), - Certified Information Security Manager (CISM), - Certified Ethical Hacker (CEH), Offensive Security - Certified Professional (OSCP) - or equivalent - to be approved by the Commission</p>
<p>The following documents / procedures will be requested to successfully complete the hiring process :</p>
<ul>
<li>A copy of your university degree(s)</li>
<li>A copy of your criminal record</li>
<li>Security Clearance Procedure</li>
</ul>
<p><strong>WHO WE ARE?</strong></p>
<p>CRI company part of VASS Group, leads the digital transformation and cyber security in the European Union.</p>
<p>CRI operates serving the European Union Institutions, telecom operators, financial institutions and governmental bodies through a comprehensive offering of services and technologies.</p>
<p>Please visit our website and let's get in touch: <a href="https://cri-group.eu/" rel="noopener noreferrer nofollow ugc" target="_blank">www.cri-group.eu</a></p>

Brussel

Expert in Secure Development with application security Expertise

Veeva Systems

Veeva [NYSE: VEEV] is the leader in cloud-based software for the global life sciences industry. Committed to innovation, product excellence, and customer success, our customers range from the world’s largest pharmaceutical companies to emerging biotechs. Veeva’s software helps our customers bring medicines and therapies to patients faster.We are the first public company to become a <a href="https://www.veeva.com/pbc/" rel="noopener noreferrer nofollow ugc" target="_blank">Public Benefit Corporation</a>. As a PBC, we are committed to making the industries we serve more productive, and we are committed to creating high-quality employment opportunities.Veeva is a <a href="https://www.veeva.com/work-anywhere/" rel="noopener noreferrer nofollow ugc" target="_blank">Work Anywhere</a> company which means that you can choose to work in the environment that works best for you - on any given day. Whether you choose to work remotely from home or work in an office - it’s up to you.The RoleVeeva’s Security Engineering Team is seeking Red Teamers to help keep Veeva secure and safe from attackers. Our team in Columbus is growing, and we want you to join us! This role has a broad scope, ranging from attacking Veeva’s AWS services, infrastructure and processes, and products. Discovering weaknesses in Veeva’s architecture. Working with product and platform teams performing penetration tests on new products. Working with third-party testers and researchers to sharpen our detective and preventative capabilities. This role presents an ultimate test of one’s security knowledge and ability, along with the support of a team of highly skilled individuals.
<h3>What You'll Do </h3>
<ul>
<li>A Red Team Security Engineer at Veeva is expected to be strong in offensive security domains, testing, techniques, and practices.  Engineers in this role work closely with application product teams throughout Veeva. Security engineers will provide technical leadership and advice to developers, engineers, and third-party consultants.</li><li>As a Red Team Engineer, you must show exemplary judgment in making informed technical trade-offs of testing, short-term fixes, long-term security gains, and product team development. You must also demonstrate resilience and navigate difficult situations with composure and tact. Above all else, a strong sense of customer obsession is necessary to focus on the ultimate goal of keeping Veeva and its customers secure.</li><li>Participate in Red Team engagements throughout Veeva with few limits and restrictions</li><li>Conduct full-cycle engagements with development teams independently, or as part of a team</li><li>Perform manual examination of Veeva systems, websites, and networks to discover weaknesses</li><li>Thoroughly document exploits, attack chains, and proof of concept scenarios for technical reviews</li><li>Communicate findings and discoveries to prioritize and execute remediation plans</li><li>Coordinate findings and remediation from third-party penetration testers</li><li>Maintain AWS VPC and related testing systems for our internal and third-party testing programs</li><li>Conduct red team, and purple team exercises and coordinate tabletop exercises</li><li>Penetration tests of new products, concepts, and pilot products</li><li>Review Veeva product release notes and select new features to test throughout the year</li></ul>
<h3>Requirements </h3>
<ul>
<li>BS in Computer Science or related field, or equivalent work experience</li><li>2+ years in an Information Security role, preferably in red teaming, offensive security, penetration testing, reverse engineering, incident response, or vulnerability management</li><li>Advanced knowledge and understanding in various disciplines such as security engineering, system and network security, authentication and security protocols, cryptography, and application security</li><li>Experience with interpreted or compiled languages: Python, Ruby, Perl, PHP, C/C++, Java, C#</li><li>Experience with cloud service providers and their offerings, preferably AWS and its various technologies and APIs</li><li>Mobile testing on Windows, iOS, and Android</li><li>Experience with various testing tools, such as Netspaker, Kali Linux, Metasploit, Nmap, Nessus, Burp Suite, etc.</li><li>Familiar with offensive TTPs (Tactics, Techniques, and Procedures) including post-exploitation and lateral movement</li><li>Experience with Redhat, AWS Linux, AWS Linux 2, Windows Server 2012, 2016 and 2019</li><li>Understanding of one or more standards: OSWAP Top 10, SANS Top 20, NIST 800-53, CIS, CSC, or other security standards</li></ul>
<h3>Nice to Have </h3>
<ul>
<li>Industry penetration certifications such as OSCP, GPEN, GXPN, GWAPT, etc.</li><li>Industry security certifications such as CISSP, CEH, or others</li><li>Experience in conducting social engineering-focused assessments</li><li>Experience in CTF competitions, CVE research, and/or Bug Bounty recognition</li><li>Knowledge of the MITRE ATT&amp;CK Framework</li><li>Experience in Web and Mobile (Android/iOS) based application/service assessment</li><li>Experience in Wireless and Network assessment in enterprise infrastructure</li><li>Experience in reverse engineering and associated tooling such as IDA</li><li>Experience in Advanced Persistent Threat exploits</li><li>Experience with Web Application Firewalls (WAF), IDS/IPS, or other security platforms</li><li>Knowledge of fuzzing, memory corruption, and exploit development</li><li>Knowledge about hardware hacking</li></ul>#LI-RemoteUS#BI-RemoteVeeva’s headquarters is located in the San Francisco Bay Area with offices in more than 15 countries around the world.   Veeva is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity or expression, religion, national origin or ancestry, age, disability, marital status, pregnancy, protected veteran status, protected genetic information, political affiliation, or any other characteristics protected by local laws, regulations, or ordinances. If you need assistance or accommodation due to a disability or special need when applying for a role or in our recruitment process, please contact us at talent_accommodations@veeva.com.

New York

Security Engineer - Red Team Penetration Testing

<ul>
<li>Design of security test cases based on the requirement defined by Eu-Lisa;</li>
<li>Execution of those test cases;</li>
<li>Reports in Jira and Qtest;</li>
<li>Manage and follow the defects;</li>
</ul>
<p>Tools used :</p>
<ul>
<li>Nessus, Vulnerability Advisor, Qtest, Jira, Metasploit Pro, Burp Suite Pro, Owasp Zap;</li>
<li>Python scripts;</li>
</ul>
<p>Desirable security certifications : CEH, ECSA. And Also firewall certifications.</p>
<p><strong>WHO WE ARE?</strong></p>
<p>CRI company part of VASS Group, leads the digital transformation and cyber security in the European Union.</p>
<p>CRI operates serving the European Union Institutions, telecom operators, financial institutions and governmental bodies through a comprehensive offering of services and technologies.</p>
<p>Please visit our website and let's get in touch: <a href="https://cri-group.eu/" rel="noopener noreferrer nofollow ugc" target="_blank">www.cri-group.eu</a></p>

IT Security Test Designer &amp; Executioner

Dragos, Inc.

Our Mission at Dragos is to protect the world’s most critical infrastructure from adversaries who wish to do it harm. We help defend industrial organizations that provide us with the tenets of modern civilization: running water, functioning electricity, and safe industrial working environments.Our Engineering Department is seeking a Principal Reverse Engineer to join its Protocols Team. This position works closely with partner teams to drive insights in industrial protocol analysis, network situational awareness, and threat behavioral analytics. 
<h3>Responsibilities</h3>
<ul>
<li>Analyze, reverse-engineer, and document industrial network protocols and functions related to system modification, command, and control, encryption/encoding, etc.</li><li>Coordinate and manage projects among team members, and across teams</li><li>Create excellent technical documentation</li><li>Generate innovative asset identification capabilities, protocol parsers, and threat behavior analytics for the Dragos Platform</li><li>Conduct in-depth reverse engineering of hardware and software to support designing and building detection logic</li><li>Work with customers and industry partners to collect and analyze host and network analytic opportunities in production environments</li><li>Improve the team’s tools and processes</li></ul>
<h3>Requirements</h3>
<ul>
<li>10+ years utilizing static and dynamic analysis tools to conduct in-depth reverse engineering of hardware and/or software without source</li><li>Prior experience reverse-engineering network protocols</li><li>Prior development/scripting experience (e.g., Python, Rust, Ruby, Go, Lua, etc.)</li><li>Proficiency in x86/x86_64 intel assembly and disassemblers including IDA Pro and Ghidra</li><li>Awareness of common operating system internals and the ability to identify analytic opportunities</li><li>Comfort working with multi-terabyte host and network datasets</li><li>Experience with blue and red team security tool plugin development (e.g., Zeek NSM modules, Wireshark dissectors, Metasploit modules, etc.)</li><li>Applied knowledge of communication fundamentals to include network and serial traffic</li></ul>
<h3>Compensation</h3>
<ul>
<li>Salary: $228,000</li><li>Salary + Benefits + Equity = $384,800</li><li>Comprehensive benefits plan (medical, dental, vision, disability, life insurance, 401K with match)</li><li>Equity at Dragos is quickly growing and the total compensation under-represents the future growth and refresh program. This will be discussed on the first call with the Dragos recruiter.</li></ul>Dragos is the Industrial Cybersecurity expert on a relentless mission to safeguard civilization. In a world of rising cybersecurity threats, Dragos protects the most critical infrastructure – those that provide us with the tenets of modern civilization – from increasingly capable adversaries who wish to do it harm. Devoted to codifying and sharing our in-depth industry knowledge of ICS/OT systems, Dragos arms industrial defenders around the world with the knowledge and tools to protect their systems as effectively and efficiently as possible. Founded by world-class industrial intelligence experts, Dragos has the industry’s largest team of ICS/OT practitioners who have been on the front lines of the world’s most significant industrial cyber-attacks. Diversity, Equity, and Inclusion are core values at Dragos, and we are passionate about building and sustaining an inclusive and equitable working environment for all. We know that every member of our team enriches our diversity by exposing us to a broad range of ways to understand and engage with the world, identify challenges, and discover, design, and deliver solutions. Not only does a Diversity, Equity, and Inclusion focus enrich our environment and teams, but it is also critical to our success as we defend against adversaries all over the world. The broad range of ideas, experiences, and perspectives is critical to our success. Dragos is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics, or any other basis forbidden under federal, state, or local laws. All new hires must pass a background check as a condition of employment.#LI-JF1 #LI-REMOTE

United States

Principal Reverse Engineer

Mindera

<p>Here at Mindera, we are building a world class team and would love it for you to join us. As an Information Security Officer, you’ll be able to research, develop, implement, test and review Mindera’s Security policies in order to protect information and prevent unauthorised access to all of our projects, all while making sure you have fun learning, interacting with all the intervenients and building things.</p><p>Expected travelling time (UK and USA):: 0%-15%, varies according to project/client.</p><p><strong>Requirements</strong></p><h3>You are good at</h3><ul> <li>Informing users about Mindera security scope (internal and externally)</li> <li>Performing security testing, reviews, and risk and vulnerability assessments</li> <li>Knowledge of security tools like metasploit, nmap, nessus/openvas, etc.</li> <li>Implementing security measures and tests</li> <li>Working with networking technologies, firewalls, IDS and SIEM</li> <li>Working with auditor partners on security matters</li> <li>Communication skills and teamwork </li> </ul> <h3>You rock at</h3> <ul> <li>Applying the standards in the ISO/IEC 27000-series, GDPR and a bit of PCI/DSS </li> <li>Creating security analysis reports and other relevant customer-faced documentation</li> <li>Automating tasks on managing, assessing and configuring security-related services</li> <li>Providing direct support to each team regarding implementation of security best practices</li> <li>Providing full technical feedback to teams based on deficiencies identified during audits</li> <li>Feeling humble and motivated by being able to learn with and teach others</li> <li>Being self-driven and working with little supervision towards a common team or company purpose</li> </ul><p><strong>Benefits</strong></p><p>The Things We Really Care About:</p><ul> <li>Health Insurance, because health comes first</li> <li>Flexible working hours</li> <li>Open holidays, take the time you need for yourself</li> <li>Profit distribution for everyone</li> <li>Mindera Annual Trip, Sports, and sharing groups to connect and have fun!</li> <li>Training &amp; conferences, create your own training plan</li> <li>Child Care vouchers </li> </ul><p>Other Good Things:</p><ul> <li>Choose Laptop &amp; Peripherals that best suit your needs</li> <li>Hotspot with unlimited usage (PT), for work or Netflix ;)</li> <li>We have amazing offices in Porto, Aveiro, and Coimbra if you want to physically connect with minders. Remote is also an option.</li> <li>At the offices, we have a wide range of snacks to keep you fed and healthy</li> <li>Partnerships with local businesses</li> </ul>

Porto

Information Security Officer

Apply to Metasploit Cyber Security Jobs in companies remotely and near you. New Metasploit Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Expert in Secure Development with application security Expertise at CRI Group	Agile Application Security Burpsuite CEH CISM
Security Engineer - Red Team Penetration Testing at Veeva Systems	Android Application Security AWS Burp Suite C
IT Security Test Designer & Executioner at CRI Group	Burp Suite CEH Firewall Metasploit Nessus
Principal Reverse Engineer at Dragos, Inc.	Analytics Encryption Golang ICS Industrial
Information Security Officer at Mindera	Audits GDPR IDS Metasploit Nessus

Metasploit Cyber Security Jobs

0 Metasploit Cyber Security Jobs. Page 1 of 1

5 closed metasploit cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Metasploit Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Metasploit Cyber Security Jobs

0 Metasploit Cyber Security Jobs. Page 1 of 1

5 closed metasploit cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Metasploit Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter