Cyber Penetration Tester III

Hard Rock Hotel & Casino Ottawa

4d

About The Position

SHRSS is seeking a highly motivated and skilled Senior Penetration Tester. This role will be responsible for performing application and infrastructure penetration tests, CVE research, and control and exploit validation. This individual will also actively collaborate with Vulnerability Management and remediation stakeholders to provide SME support. Our team is growing and we’re looking for somebody with the mindset to help our programs continue to evolve.

Requirements

• 3-5 years of experience in application and/or infrastructure penetration testing.
• Strong grasp of the OWASP Top 10 and emerging attack vectors.
• Strong grasp of CVSS Scoring versions 2, 3 or 3.1.
• Previous CVE research experience.
• Working knowledge of Windows, Unix/Linux, Mac OS X, Android, iOS, etc.
• Strong verbal and written communication skills.
• Strong collaboration skills.

Nice To Haves

• Bachelor’s degree or higher in information security, equivalent demonstrated work experience and industry standard certifications.
• Prior experience working on a Penetration Testing Team.
• Information security certifications (e.g. OSCP, OSWA, GPEN, GWAPT, eCPPT, eWPT, CEH, CISSP).
• Software development experience in one or more programming languages (e.g., Java, C#, C++, Python, PowerShell, JavaScript).
• Cloud security experience in one or more of the following (AWS, GCP or Azure).
• Experience in the Casino Gaming industry.

Responsibilities

• Act as the SME and technical lead for all penetration testing engagements.
• Perform hands-on penetration testing and vulnerability assessments on web, mobile and API applications, as well as infrastructure assets.
• Assist in the coordination activities with third-party penetration testing engagements.
• Develop and maintain security testing plans and methodologies.
• Carefully document and report the outcome of all penetration tests.
• Produce actionable, threat-based, reports on security testing results.
• Provide SME support and remediation guidance to the vulnerability team and remediation stakeholders.
• Evaluate the current program and contribute to process discussions.

Benefits

• Our team members are the key to our company’s success, and their health and well-being, as well as that of their families, is very important to us.
• We offer a comprehensive benefits package that allows our team members stay healthy, plan for their future and maintain a healthy work-life balance.
• Benefits may vary with employment status.
• To see our fill list of Team Member Benefits please visit our career site: www.gotoworkhappy.com/benefits

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 501-1,000 employees