Senior Associate - Cyber Security

Black Box•United States,

10d

About The Position

The Senior Associate - Cyber Security identifies and assesses security vulnerabilities across applications, networks, APIs, cloud environments, infrastructure, and other IT assets. The role plans, executes, and reports on penetration tests; analyzes vulnerability scan results; and conducts internal and external network assessments, including exploiting infrastructure weaknesses. It also coordinates vulnerability assessments and scans, tracks assets and configurations, prioritizes findings, and oversees remediation activities. The position communicates security findings, risks, and remediation recommendations to technical and non-technical stakeholders, including developers, administrators, management, executives, risk groups, vendors, and regulators.

Requirements

Proficiency in one or more scripting or programming languages.
Familiarity with penetration testing methodologies and tools such as Burp Suite, Nmap, and Metasploit.
Familiarity with scripting languages such as Python, Bash, and PowerShell.

Responsibilities

Analyze vulnerability scan results from tools such as Tenable, Qualys, or Rapid7 to identify security weaknesses across infrastructure and applications.
Plan, execute, and report on penetration tests of applications, networks, APIs, cloud environments, and other IT assets.
Consult with application developers, systems administrators, and management to explain security testing results, threats, and remediation options.
Communicate security issues to internal and external audiences, including technical teams, executives, risk groups, vendors, and regulators.
Proactively pursue, validate, and report system security loopholes, infringements, and vulnerabilities.
Conduct internal and external network assessments, including exploiting infrastructure weaknesses.
Facilitate and coordinate vulnerability assessments and scans, review results, and oversee remediation activities for network and infrastructure devices.
Manage and maintain current vulnerability, asset, and configuration databases.
Provide detailed findings, risk ratings, and remediation recommendations to technical and non-technical audiences.
Prioritize vulnerabilities based on criticality, exploitability, and potential business impact.