Red Team Engineer - FedRAMP

Netskope

6d

About The Position

Netskope Global Information Security organization is looking for a security engineer to be part of the application security assurance team. This position will be responsible for partnering with multiple stakeholders to build, deploy and manage security solutions as part of FedRAMP controls. Also, assessing the Netskope products and cloud services from a holistic security perspective. A strong candidate for this role is someone who can build innovative ways to deploy different security capabilities in an automated manner and can manage them operationally.

Requirements

• 4+ years of penetration testing, application security, penetration testing experience in highly diversified and high growth organizations.
• Proven experience in security engineering, building and managing security solutions across the stack (on-prem and cloud)
• Understanding in application frameworks and how to approach security as well as security pitfalls with them
• Proven experience & track record in web and mobile application penetration testing (Web, Mobile, API/Web Services) - DAST and SAST
• Should have experience with tools Burp suite professional, Metasploit, Tenable, SQL Map and Nmap
• In-depth knowledge of OWASP Web and Mobile Top 10 vulnerabilities, identifying, exploiting and remediating them
• Good knowledge of TCP/IP and other application and network level protocols
• Exposure to cloud service providers like AWS, GCP and other SaaS applications
• Should possess relevant university degree and/or professional qualifications/certification (e.g. CEH, OSCP, CISSP)
• Prior experience working in environments with NIST 800-53, NIST 800-171 controls or FedRAMP requirements
• Excellent written and verbal communication skills.
• Self-motivated, curious, knowledgeable pertaining to news and current events
• Ability to get and maintain a US security clearance

Responsibilities

• Leading and managing requirements per FedRAMP controls and turning them into operational models and implementations for the InfoSec organization - DAST, SAST, SCA
• Support in performing, triaging and automating SAST, DAST and SCA process
• Deploy and operate security solutions and supporting infrastructure in different environments in support of internal customer security needs and FedRAMP requirements
• Develop and automate day-to-day operational tasks and deployment methods
• Perform security assessment of, but not limited to, web & mobile application, containers, k8s, thick client, cloud environments
• Support and recreate proofs of concept from security reports
• Support and be a member of the PSIRT organization

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 1,001-5,000 employees