Senior Pentester

Synack • New York City, NY

377d • $160,000 - $190,000 • Remote

About The Position

Synack's Penetration Testing as a Service platform manages customers' attack surfaces by discovering new assets, pentesting for critical vulnerabilities and gaining visibility into the root causes of security risks. We are committed to making the world more secure by harnessing a talented, vetted community of security researchers to deliver continuous penetration testing and vulnerability management, with actionable results. Synack's PTaaS platform has uncovered more than 71,000 exploitable vulnerabilities to date, protecting a growing list of Global 2000 customers and U.S. agencies in a FedRAMP Moderate Authorized environment. We are looking for a talented penetration tester with experience in various types of offensive security engagements to help us establish and build a new team within Synack. Since the team is new and will start small, we are seeking candidates with a variety of skills who are looking to collaborate with one another and pick up things that they haven't already mastered on the fly. This is a remote position performing work for customers in the New York City area which requires occasional onsite work. For that reason, we are only considering candidates that are within commuting distance to New York City. We can only hire US Citizens for this role.

Requirements

• 4+ years of experience in offensive security
• Willing to consider less experienced candidates with high technical aptitude
• Experience scoping penetration testing engagements
• Experience performing vulnerability assessments and identifying exploitable vulnerabilities
• Proven ability of identifying OWASP Top 10 vulnerabilities and writing custom payloads to prove exploitation
• Experience briefing engagement results to different customer levels
• Experience classifying vulnerabilities using CVSS
• Excellent written and verbal communication skills
• Experience recommending remediation activities to address findings of a penetration test
• Experience with various scripting languages, i.e. Bash, Batch, Python, PowerShell
• Proven experience developing your own offensive tools (Link to your github)
• At least one advanced industry certification, i.e. OSCP, OSWE, OSEP
• Candidates must be US citizens

Nice To Haves

• Multiple advanced industry certifications
• Experience performing Red Team and Purple Team exercises
• Project Management experience
• Experience coding in programming languages like C++, C, C#

Responsibilities

• Perform web and host penetration tests both onsite and remote as needed
• Participate in discussions with clients to learn about their environment and applications, learn about what they want tested, agree upon scope and Rules of Engagement, and organize test schedules
• Create detailed technical reports describing how vulnerabilities were found, how you exploited them, and how they should be remediated
• Produce executive summary reports that communicate business risk of the vulnerabilities that you identify and the importance of prioritizing remediation
• Assist customers that have questions about remediation
• Mentor junior penetration testers on and off of assessments
• Travel to client sites up to two times per week to perform onsite assessments

Benefits

• $160,000 - $190,000 Salary is determined by a combination of factors including location, level, relevant experience, and skills.
• The compensation package for this position may also include equity, and benefits.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Computer and Electronic Product Manufacturing
• Number of Employees: 251-500 employees