Security Consultant (Pen Tester/Red Teaming) for CRC - Cloud Application Security, GCC (Google Cloud), and AWC (Amazon Web Services Security)
Location: Remote
Visa: US Citizen
This is more Offensive Security - less of typical pen testing (job description to come) See Red Teaming definition.
Need someone with Google Cloud "chops "
Focus on Application Penetration Testing
Desired Experience
3 years of security penetration testing experience, including areas like web applications, APIs, user interfaces, and embedded devices
3 years of software engineering experience with C, C , or Python/Ruby, or a commonly used programming language, with experience in secure coding/development and code analysis for vulnerabilities. Recent academic experience may qualify.
Skilled in two or more of following areas:
Strong understanding of operating system concepts in the areas of memory management, computer architecture, or binary analysis
3 years of hands-on Unix experience with a solid understanding of security hardening configurations and capabilities
3 years of experience with applied crypto, through implementation or analysis of crypto algorithms
3 years of experience with network protocols, through implementation or analysis
3 years of experience as a DevOps engineer, with a focus on DevOps security OSCP or related industry certifications are a plus.
Other Desired Skills (and/or skills you'll have a chance to develop)
Applied architectural security
Cryptographic algorithm design and review
Operating system fundamentals and secure configuration
Security of virtualization platforms and techniques
Network protocol analysis and debugging
Web protocols and API security
Secure development practices
Software vulnerability assessment, fuzzing, and code analysis
Reverse engineering
Exploit development