Epicareer Might not Working Properly
Learn More
R

Senior Infrastructure Penetration Tester

Salary undisclosed

Apply on

Availability Status

This job is expected to be in high demand and may close soon. We’ll remove this job ad once it's closed.


Original
Simplified

Role: Senior Infrastructure Penetration Researcher/Tester

Fort Lauderdale, FL (Remote/Hybrid)
The Role:
The Senior Infrastructure Penetration Tester/Researcher plays a vital role in Citi's Vulnerability Assessments (VA) team and is responsible for providing VA services to all Citi businesses and technology teams globally. The position will be identifying weaknesses and vulnerabilities within the Citi infrastructure and is part of a larger, global team that collectively provide VA support to all of Citi's business groups. Commercial and open source Vulnerability Assessment tools and utilities are leveraged during these assessments.
Qualifications:
5+ years' of relevant experience required in Offensive Security with a history of gradually expanding experience including network and overall infrastructure pentesting
Strong scripting/coding and security tooling experience(Python, Go, Bash, C++/C, Rust) ( willing to discuss if knowledge here is deep and pentesting is light ) @Roy, Rabin [TECH-FS] FYI
Reverse Engineering / Exploit Development
Strong hands-on experience with Vulnerability Assessment/Enumeration tools, e.g., Tenable Nessus, Qualys VM, OSS enumeration tools
Demonstrate hands on experience with penetration testing tools i.e. Kali suite, open-source tooling, Living Off The Land(OS), LOLBINS etc
Deep understanding of TCP/IP, Infrastructure stacks(i.e. 3 tier, segmented environments)
Demonstrable experience working effectively in Enterprise environments
Understanding of defensive security principles with an ability to demonstrate offensive opportunities
OS and Network Security Experience, e.g. Unix, Linux, Windows, Cisco, etc.
Understanding of common protocols, e.g. DNS, SMTP, SNMP, LDAP, Routing Protocols
Threat Mapping experience is a plus
Scripting (Bash, Python, etc.)
Design experience/understanding on infrastructure/systems (enterprise a big plus)
Exceptional interpersonal skills and a proven track record of working effectively with globally diverse teams
Ability to understand new and emerging technologies rapidly to keep up with an ever changing threat landscape
Ability to effectively document and explain exploits/vulnerabilities to technical and non-technical audiences including to senior leadership
Demonstrable proficiency in producing comprehensive penetration testing reports with actionable recommendations.

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
Report this job