Penetration Testing Advisor

Role Summary

The Penetration Testing Advisor supports by applying information security threat intelligence to identify and exploit vulnerabilities within our client’s environments. The focus area for this role is either application security (web application penetration testing, API testing) or network security (vulnerability assessments, external penetration tests, internal penetration tests, etc.). Candidates are not expected to be experienced in both although that would be a plus

What You Will Do

• Conduct application security assessments (web, mobile, API, etc.) using off-the-shelf or internally developed exploitation tools to execute manual testing for advanced attacks OR network penetration testing assessments (external pen test, internal pen test, etc.)
• Produce and deliver vulnerability and exploit information to clients in the form of a professional security assessment report
• Conduct client conference calls to include, but not limited to project kick-off calls, notification of high / critical findings during the testing process, and close out calls to review test findings, evidence, process steps to reproduce, and remediation recommendations
• Perform proactive research to identify and understand new threats, vulnerabilities, and exploits
• Conduct exploitation testing using off-the-shelf or self-developed exploitation tools and document findings for client remediation
• Excel as both a self-directed individual contributor and as a member of a larger team
• Perform other essential duties as assigned

What You Will Bring

Desirable

LI-FC1#B2#LI-Remote Ready to Join Us? At Sophos, we believe in the power of diverse perspectives to fuel innovation. Research shows that candidates sometimes hesitate to apply if they don't check every box in a job description. We challenge that notion. Your unique experiences and skills might be exactly what we need to enhance our team. Don't let a checklist hold you back – we encourage you to apply. What's Great About Sophos?