Product Security PenTester

The Planet Group • Contract • United States • 1w ago

As a Security Associate Manager, you will evaluate customer applications and products security and advise them how to develop secure solutions. These could include operating systems, mobile frameworks, embedded devices, and cloud-based solutions. Successful Security Associate Manager can apply their security expertise to multiple domains, have experience leading teams, and possess an unending curiosity about technology. Our ideal candidate will be able to influence clients so they can achieve the right balance between their business needs and security requirements.

The Work

- Research and identify customer security vulnerabilities ensuring the highest service quality to the client

- Create and elaborate on security analysis reports and other relevant customer-facing documentation

- Engage in technical problem solving across multiple technologies, helping ensure customers develop secure applications and hardware.

- Use your cybersecurity knowledge to identify vulnerabilities and potential exploits known from your professional experience, security best practices and industry standards.

- Operate industry standard tooling (e.g. SAST) and conduct manual false-positive analysis

- Collaborate with members of the team and with clients on understanding the business need of a product to provide actional feedback and recommendations.

- Be curious and stay up to date with latest security threats impacting our world.

Qualification

Here’s What you Need

Bachelor's degree or equivalent (minimum 12 years) work experience. (If Associate’s Degree, must have minimum 6 years work experience)
Minimum of 3 years of experience penetration testing with security design and implementation
Minimum of 3 years of experience developing embedded firmware in C or Assembly
Minimum of 3 years of experience /knowledge of the Linux command Line interface & development environment.
Minimum of 3 years of experience /deep expertise in reverse engineering hardware, including skills such as firmware extraction, PCB analysis, and manual interfacing with SPI, UART, JTAG, I2C, etc… protocols.
Minimum of 3 years of experience/knowledge of side-channel and fault injection attacks, such as power analysis and glitching techniques.
Minimum of 3 years of experience/ability to communicate security risks and flaws across a wide range of technologies & audiences, both technical and non-technical
Minimum of 3 years of experience mentoring junior employees & help train new hires

Bonus Points if you Have
Industry specialization
Professional consulting experience and background.
History of contributing to open-source projects or speaking at relevant professional conferences.