Looking to hire a Penetration Test Engineer to join an exciting team and fulfill a high-demand service. The candidate will perform penetration testing for company infrastructure and in-house developed applications to discover security vulnerabilities and weaknesses and provide remediation recommendations. The team is looking for an experienced tester with a willingness to share knowledge and work with the team to enhance the security posture of Allstate’s applications and systems.
Job Responsibilities
Perform white and black box testing of in-house applications and systems with a variety of commercial and opensource tools
Devise creative and custom exploits, solutions, and techniques to discover vulnerabilities and exploitability of the targets
Knowledge-share with team on techniques and results to continuously improve the service offering
Create detailed report of findings and recommendations after testing is complete and present to stakeholders
Stay up-to-date in current tools, techniques,
and vulnerabilities to incorporate into testing practices
Mentor junior members of the team in techniques and best practices in ethical hacking and vulnerability analysis
Primary Skills
5+ years experience with penetration testing with total 9- 13 years of IT security related experience
Demonstrable Knowledge And Experience Of
Common attack techniques for web, mobile and services.
Common application testing tools including, but not limited to Burp, SQL Map etc
OWASP Top 10 iPhone and Android application pen testing – specifically relating to reverse engineering and instrumentation toolsets
Pen testing in Agile and/or Extreme development environments
Ability to write scripts/tools to assist in testing
Experience testing/analyzing applications and networks
Understanding of encryption technologies.
Understanding of common network protocols
Working knowledge with various operating systems
Ability to relay detailed technic