Penetration Testing Engineer III

Walmart•Bentonville, AR

1d•$90,000 - $180,000•Onsite

About The Position

Position Summary... What you'll do... Position: Penetration Engineer III Job Location: 805 Moberly Lane, Bentonville, AR 72716 Duties: Manage a program assessment (scoping) from initial planning, scheduling, communications with systems owners and related stakeholders through to final reporting. Prepare required assessment documentation. Assist in process improvement and automation for the assessment methodology. Conduct assessments of client and contractor hardware, to ensure compliance with security requirement. Analyze and determine compliance with applicable federal and legislative regulations. Partner with other cyber security and development team to identify businesses critical/high-risk assets [Web/mobile application, Servers, Network, Point of Sales machines, Robots]. Perform in-depth security assessment/penetration testing of businesses’ critical and high-risk assets as per OWASP top 10, SANS top 25, HIPPA and PCI DSS standard. Identify and exploit vulnerabilities in commercial, open source, and custom software applications; infrastructure; people; and processes running across one of the world’s largest networks. Compose test reports and record vulnerability data according to Governance, Risk, and Compliance (GRC) processes. Deliver technical debriefs to engineers/developers, which helps them in fixing the identified vulnerability. Evaluate and maintain testing tools, hardware, and equipment, creating new tools where appropriate. Minimum education and experience required: Master’s degree or the equivalent in Computer Science, Information Technology, Engineering, or related field plus 1 year of experience in information technology or related experience; OR Bachelor's degree or the equivalent in Computer Science, Information Technology, Engineering, or related field plus 2 years of experience in information technology or related experience; OR 4 years of experience in information technology or related experience. Skills required: Must have experience with: Performing in-depth security assessment/penetration testing of business critical and high-risk assets as per OWASP Top 10; Managing a program assessment (scoping) from initial planning, scheduling, and communications with systems owners and related stakeholders through to final reporting; Delivering technical debriefs to engineers/developers, which helps them in fixing the identified vulnerability; Manual and automated vulnerability assessment of web applications using Burp Suite, PostMan, MicroFocus Fortify, Nikto, Skipfish, SSLScan, DirBuster, Flagfox, Wappalyzer, Live HTTP Header and Tamper Data, Kali Linux; Evaluating and maintaining testing tools, hardware, and equipment, creating new tools where appropriate. Employer will accept any amount of experience with the required skills. #LI-DNP #LI-DNI Wal-Mart is an Equal Opportunity Employer. At Walmart, we offer competitive pay as well as performance-based bonus awards and other great benefits for a happier mind, body, and wallet. Health benefits include medical, vision and dental coverage. Financial benefits include 401(k), stock purchase and company-paid life insurance. Paid time off benefits include PTO (including sick leave), parental leave, family care leave, bereavement, jury duty, and voting. Other benefits include short-term and long-term disability, company discounts, Military Leave Pay, adoption and surrogacy expense reimbursement, and more. You will also receive PTO and/or PPTO that can be used for vacation, sick leave, holidays, or other purposes. The amount you receive depends on your job classification and length of employment. It will meet or exceed the requirements of paid sick leave laws, where applicable. For information about PTO, see https://one.walmart.com/notices. Live Better U is a Walmart-paid education benefit program for full-time and part-time associates in Walmart and Sam's Club facilities. Programs range from high school completion to bachelor's degrees, including English Language Learning and short-form certificates. Tuition, books, and fees are completely paid for by Walmart. Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to a specific plan or program terms. For information about benefits and eligibility, see One.Walmart. The annual salary range for this position is $90,000.00 - $180,000.00 Additional compensation includes annual or quarterly performance bonuses. Additional compensation for certain positions may also include : - Stock ㅤ ㅤ ㅤ ㅤ ‎ Minimum Qualifications... Outlined below are the required minimum qualifications for this position. If none are listed, there are no minimum qualifications. Option 1: Bachelor's degree in computer science, information technology, engineering, information systems, cybersecurity, or related area and 2 years’ experience in application security, or related area at a technology, retail, or data-driven company. Option 2: 4 years’ experience in application security, or related area at a technology, retail, or data-driven company.

Requirements

Performing in-depth security assessment/penetration testing of business critical and high-risk assets as per OWASP Top 10
Managing a program assessment (scoping) from initial planning, scheduling, and communications with systems owners and related stakeholders through to final reporting
Delivering technical debriefs to engineers/developers, which helps them in fixing the identified vulnerability
Manual and automated vulnerability assessment of web applications using Burp Suite, PostMan, MicroFocus Fortify, Nikto, Skipfish, SSLScan, DirBuster, Flagfox, Wappalyzer, Live HTTP Header and Tamper Data, Kali Linux
Evaluating and maintaining testing tools, hardware, and equipment, creating new tools where appropriate
Master’s degree or the equivalent in Computer Science, Information Technology, Engineering, or related field plus 1 year of experience in information technology or related experience; OR Bachelor's degree or the equivalent in Computer Science, Information Technology, Engineering, or related field plus 2 years of experience in information technology or related experience; OR 4 years of experience in information technology or related experience.

Nice To Haves

Certification in Security+, GISF, CISSP, CSSP, or CASE
Master’s degree in Computer Science, Information Technology, Engineering, Information Systems, Cybersecurity, or related area
We value candidates with a background in creating inclusive digital experiences, demonstrating knowledge in implementing Web Content Accessibility Guidelines (WCAG) 2.2 AA standards, assistive technologies, and integrating digital accessibility seamlessly.
The ideal candidate would have knowledge of accessibility best practices and join us as we continue to create accessible products and services following Walmart’s accessibility standards and guidelines for supporting an inclusive culture.

Responsibilities

Manage a program assessment (scoping) from initial planning, scheduling, communications with systems owners and related stakeholders through to final reporting.
Prepare required assessment documentation.
Assist in process improvement and automation for the assessment methodology.
Conduct assessments of client and contractor hardware, to ensure compliance with security requirement.
Analyze and determine compliance with applicable federal and legislative regulations.
Partner with other cyber security and development team to identify businesses critical/high-risk assets [Web/mobile application, Servers, Network, Point of Sales machines, Robots].
Perform in-depth security assessment/penetration testing of businesses’ critical and high-risk assets as per OWASP top 10, SANS top 25, HIPPA and PCI DSS standard.
Identify and exploit vulnerabilities in commercial, open source, and custom software applications; infrastructure; people; and processes running across one of the world’s largest networks.
Compose test reports and record vulnerability data according to Governance, Risk, and Compliance (GRC) processes.
Deliver technical debriefs to engineers/developers, which helps them in fixing the identified vulnerability.
Evaluate and maintain testing tools, hardware, and equipment, creating new tools where appropriate.

Benefits

competitive pay
performance-based bonus awards
medical, vision and dental coverage
401(k)
stock purchase
company-paid life insurance
PTO (including sick leave)
parental leave
family care leave
bereavement
jury duty
voting
short-term and long-term disability
company discounts
Military Leave Pay
adoption and surrogacy expense reimbursement
Live Better U is a Walmart-paid education benefit program for full-time and part-time associates in Walmart and Sam's Club facilities. Programs range from high school completion to bachelor's degrees, including English Language Learning and short-form certificates. Tuition, books, and fees are completely paid for by Walmart.