What are the responsibilities and job description for the Red Team Engineer - FedRAMP position at Netskope?
About Netskope
Today, there's more data and users outside the enterprise than inside, causing the network perimeter as we know it to dissolve. We realized a new perimeter was needed, one that is built in the cloud and follows and protects data wherever it goes, so we started Netskope to redefine Cloud, Network and Data Security.
Since 2012, we have built the market-leading cloud security company and an award-winning culture powered by hundreds of employees spread across offices in Santa Clara, St. Louis, Bangalore, London, Paris, Melbourne, Taipei, and Tokyo. Our core values are openness, honesty, and transparency, and we purposely developed our open desk layouts and large meeting spaces to support and promote partnerships, collaboration, and teamwork. From catered lunches and office celebrations to employee recognition events and social professional groups such as the Awesome Women of Netskope (AWON), we strive to keep work fun, supportive and interactive. Visit us at Netskope Careers. Please follow us on LinkedIn and Twitter@Netskope.
About the position:
Netskope Global Information Security organization is looking for a security engineer to be part of the application security assurance team. This position will be responsible for partnering with multiple stakeholders to build, deploy and manage security solutions as part of FedRAMP controls. Also, assessing the Netskope products and cloud services from a holistic security perspective. A strong candidate for this role is someone who can build innovative ways to deploy different security capabilities in an automated manner and can manage them operationally.
Responsibilities:
Netskope respects your privacy and is committed to protecting the personal information you share with us, please refer to Netskope's Privacy Policy for more details.
Today, there's more data and users outside the enterprise than inside, causing the network perimeter as we know it to dissolve. We realized a new perimeter was needed, one that is built in the cloud and follows and protects data wherever it goes, so we started Netskope to redefine Cloud, Network and Data Security.
Since 2012, we have built the market-leading cloud security company and an award-winning culture powered by hundreds of employees spread across offices in Santa Clara, St. Louis, Bangalore, London, Paris, Melbourne, Taipei, and Tokyo. Our core values are openness, honesty, and transparency, and we purposely developed our open desk layouts and large meeting spaces to support and promote partnerships, collaboration, and teamwork. From catered lunches and office celebrations to employee recognition events and social professional groups such as the Awesome Women of Netskope (AWON), we strive to keep work fun, supportive and interactive. Visit us at Netskope Careers. Please follow us on LinkedIn and Twitter@Netskope.
About the position:
Netskope Global Information Security organization is looking for a security engineer to be part of the application security assurance team. This position will be responsible for partnering with multiple stakeholders to build, deploy and manage security solutions as part of FedRAMP controls. Also, assessing the Netskope products and cloud services from a holistic security perspective. A strong candidate for this role is someone who can build innovative ways to deploy different security capabilities in an automated manner and can manage them operationally.
Responsibilities:
- Leading and managing requirements per FedRAMP controls and turning them into operational models and implementations for the InfoSec organization - DAST, SAST, SCA
- Support in performing, triaging and automating SAST, DAST and SCA process
- Deploy and operate security solutions and supporting infrastructure in different environments in support of internal customer security needs and FedRAMP requirements
- Develop and automate day-to-day operational tasks and deployment methods
- Perform security assessment of, but not limited to, web & mobile application, containers, k8s, thick client, cloud environments
- Support and recreate proofs of concept from security reports
- Support and be a member of the PSIRT organization
- 4 years of penetration testing, application security, penetration testing experience in highly diversified and high growth organizations.
- Proven experience in security engineering, building and managing security solutions across the stack (on-prem and cloud)
- Understanding in application frameworks and how to approach security as well as security pitfalls with them
- Proven experience & track record in web and mobile application penetration testing (Web, Mobile, API/Web Services) - DAST and SAST
- Should have experience with tools Burp suite professional, Metasploit, Tenable, SQL Map and Nmap
- In-depth knowledge of OWASP Web and Mobile Top 10 vulnerabilities, identifying, exploiting and remediating them
- Good knowledge of TCP/IP and other application and network level protocols
- Exposure to cloud service providers like AWS, GCP and other SaaS applications
- Should possess relevant university degree and/or professional qualifications/certification (e.g. CEH, OSCP, CISSP)
- Prior experience working in environments with NIST 800-53, NIST 800-171 controls or FedRAMP requirements
- Excellent written and verbal communication skills.
- Self-motivated, curious, knowledgeable pertaining to news and current events
- Ability to get and maintain a US security clearance
- Bachelor’s degree preferred
Netskope respects your privacy and is committed to protecting the personal information you share with us, please refer to Netskope's Privacy Policy for more details.