Software Pentester

• Secure software applications and infrastructure from potential vulnerabilities and attacks
• Drive product privacy and cybersecurity features and enhancements
• Assess architectures and designs for security vulnerabilities
• Suggest and implement appropriate security alternatives
• Oversee management and remediation of identified security flaws within development platforms
• Build and maintain monitoring, auditing, and reporting frameworks that produce artifacts supporting security and compliance needs
• Drive vulnerability assessment and penetration testing activities for multiple R&D applications
• Implement DevSecOps across the product line
• Integrate SAST and DAST platforms into CI/CD pipelines
• Work in a fast-paced, rapidly changing, Agile, competitive environment

• At least 8 years of expertise in software application penetration testing
• Knowledge of the DevSecOps framework
• Understanding of NIST, OWASP, MITRE, CWE, and related standards/frameworks
• Understanding of programming languages such as C#, Perl, JavaScript, Python, and/or PHP
• Understanding of TCP/IP, common networking ports and protocols, and the OSI model
• Knowledge of threat modelling and risk assessment techniques
• Up-to-date knowledge of cybersecurity threats, current best practices, and latest software
• Understanding of HP Fortify, Puppet, Chef, ThreatModeler, Checkmarx, Aqua, Kubernetes, and/or Docker
• Experience with security assessment tools including NESSUS, NMap, BurpSuite, ZAP, OWASP tools, Kali Linux tools, and fuzzing tools
• Significant knowledge of security best practices for client-server product architectures, predominantly cloud-based server development
• Knowledge of one or more SSO methodologies: SAML, LDAP, or OpenID
• Experience extracting pertinent security data from SIEM solutions and AWS audit logs and reports
• Deep product knowledge to determine product privacy and security risks, including clinical functionality, operating environment, and interoperability
• Bachelor of Technology or Master of Technology in Computer Science, Information Technology, Electrical Engineering, Electronics and Communication, or Electronics and Instrumentation
• CEH or OSCP certification preferred
• Successful applicants must undergo and pass a comprehensive background check
• Proof of work authorization may be required as part of the background check

• Equal Opportunity Employer and inclusive culture
• Comprehensive background check conducted in accordance with local laws
• Workplace environment where employees are treated with dignity and respect
• Diversity and expertise valued