Security-Vulnerability-Research-Engineer

Job Description:

Primary:

• At least 6+ years’ experience in Information Security or Information Technology field.
• Bachelor’s degree in Computer Science, Information Security, or equivalent combined experience.
• Hands-on experience with a variety of vulnerability management and network scanning tools, such as Qualys, Palo Alto, Tenable Security Center, OpenVAS, Nmap, web scanners, etc. 
• Understanding of the relationship between operating systems, applications, and their dependencies, and how interrelated software vulnerabilities exist – with ability to determine remediation techniques in diverse environments.
• Knowledge of both Windows and UNIX-based operating systems (e.g. Windows Server and Client OS, RHEL, Ubuntu, Amazon Linux, MacOS), and container technologies (e.g. Kubernetes, Docker). 
• Ability to script and program using Python and other scripting and programing languages (i.e. SQL, Python, C, Java, JavaScript), notably for working with RESTful APIs.
• Experience working with REST APIs and integrating API frameworks into wider business intelligence solutions.

Secondary:

• Knowledge of the PCI Data Security Standard (PCI DSS).
• Solid experience in offensive security, adversarial tactics, techniques, and procedures (e.g. using MITRE ATT&CK framework), and common attack patterns such as binary exploitation, memory corruption, race conditions, web attacks, etc.
• In-depth knowledge of security standard methodologies, technologies and products and aim to continuously improve these skills.
• Exposure to Data Science, Data Modelling, data analytics, and Data Visualization tools.
• Knowledge of CI/CD pipelines, GitHub or other version control systems, and cloud hosting environment’s (i.e. AWS) applicable security standard methodologies.
• Experience working in agile project management toolsets, creating tickets which break down work into manageable pieces, tracking capacity, and closing stories in a timely manner, and documenting work (i.e. Jira, Confluence, ServiceNow).

Soft Skills:

• Good experience working with numerous external teams to track and deliver solutions.
• Strong detail-oriented individual able to efficiently analyze and resolve problems.
• Strong verbal, communication, and diplomacy skills with all levels of the business.
• Must be self-motivated, able to work independently, and multi-task effectively.