D
Decision Point Security, Inc.
Posted 74 days agoVerified live 15h ago
Cybersecurity Test Engineer
Brief overview
Remote
2+ yrsMinimum
Clearance requiredU.S. government
CybersecurityOffensive Security Web Expert (OSWE)Offensive Security Certified Professional (OSCP)Network penetration testingHost-based penetration testingWeb application penetration testingEncryptionAuthenticationAccess controlSecure coding practicesThreat modelingRisk assessmentVulnerability analysisAutomation of testing toolsApplication SecuritySoftware DevelopmentAgile
About the company
D
Decision Point Security, Inc.dpsec.io
Decision Point team has over 20 years combined experience delivering solutions based on sound research principals and critical thinking.
Job description
Summary
Decision Point Security, Inc. is currently seeking a dedicated and skilled Cybersecurity Test Engineer to join our growing team. The role involves validating the security posture of customer applications and platforms through vulnerability research, analysis, and penetration testing, ensuring clients achieve and maintain cyber resilience.
Responsibilities
- Plan and execute red / purple team activities, including simulated attacks, application penetration testing, and risk assessments
- Lead and participate in threat model development
- Evaluate and analyze identified vulnerabilities to assess risk levels and provide clients with informed recommendations on technical security measures and compliance activities
- Develop and Automate testing tools
- Identify and provide improvements on existing services, including continuous improvement of methodologies, tools and reports
- Ensure quality control measures are adhered to for test execution and the production of delivery artifacts
- Write clear and concise reports detailing findings and recommendations for remediation of identified vulnerabilities
- Review application and systems for compliance with applicable security standards and best practices
- Conduct / contribute to comprehensive risk assessments and vulnerability analyses to identify potential security threats and mitigate risks
Skills
- 2+ years of experience in Cybersecurity
- Relevant technical certifications such as: Offensive Security Web Expert (OSWE), Offensive Security Certified Professional (OSCP) certification
- Experience in network/host-based penetration testing tradecraft and methodologies
- Experience in web application penetration testing
- Ability to work independently and as part of a team
- Strong technical writing skills
- Strong understanding of cybersecurity principles, technologies, and best practices, including encryption, authentication, access control, and secure coding practices
- US Citizenship
- Ability to hold a clearance
- Hold a Bachelor's degree from an accredited college in a relevant discipline, OR equivalent experience
- Experience in a consulting/professional services role
- Experience in Application Security and/or Software Development
- Familiarity with software development methodologies and practices, particularly Agile and DevSecOps
- Experience with DevOps and/or Security Maturity Modelling (e.g. OWASP SAMM)
- Cloud Service penetration testing tradecraft and methodologies across one or more service providers (e.g. AWS, GCP, etc.)
- Proficiency in network/host-based penetration testing tradecraft and methodologies
- Proficiency in web application penetration testing
- Skilled at translating technical implementation (infrastructure as code and configuration as code)
- Experience conducting / contributing to comprehensive risk assessments and vulnerability analyses
- Experience testing against one or more IT security compliance frameworks, such as PCI, FISMA, HIPAA, FEDRAMP, or HITRUST
- Assessment of security controls across modern enterprise services architecture
Qualifications
Must Haves
- 2+ years of experience in Cybersecurity
- Relevant technical certifications such as: Offensive Security Web Expert (OSWE), Offensive Security Certified Professional (OSCP) certification
- Experience in network/host-based penetration testing tradecraft and methodologies
- Experience in web application penetration testing
- Ability to work independently and as part of a team
- Strong technical writing skills
- Strong understanding of cybersecurity principles, technologies, and best practices, including encryption, authentication, access control, and secure coding practices
- US Citizenship
- Ability to hold a clearance
Nice to Haves
- Hold a Bachelor's degree from an accredited college in a relevant discipline, OR equivalent experience
- Experience in a consulting/professional services role
- Experience in Application Security and/or Software Development
- Familiarity with software development methodologies and practices, particularly Agile and DevSecOps
- Experience with DevOps and/or Security Maturity Modelling (e.g. OWASP SAMM)
- Cloud Service penetration testing tradecraft and methodologies across one or more service providers (e.g. AWS, GCP, etc.)
- Proficiency in network/host-based penetration testing tradecraft and methodologies
- Proficiency in web application penetration testing
- Skilled at translating technical implementation (infrastructure as code and configuration as code)
- Experience conducting / contributing to comprehensive risk assessments and vulnerability analyses
- Experience testing against one or more IT security compliance frameworks, such as PCI, FISMA, HIPAA, FEDRAMP, or HITRUST
- Assessment of security controls across modern enterprise services architecture
Benefits
- Generous 401(k) contribution, matching not required
- Company Paid Health Insurance
- Company Paid Dental insurance
- Company Paid Vision Insurance
- Company Paid Life Insurance
- Paid Training
- Home Office Stipend
- 11 Federal Holidays
- Paid Time Off
- Work will be conducted remotely
