Penetration Tester - Remote

Overview

Join CSAA Insurance Group as a Penetration Tester, where you will leverage your security expertise to identify and manage threats to our enterprise information assets and applications.

In Short

• Conduct infrastructure, web application, API, and mobile application penetration testing.
• Develop and manage the penetration testing lifecycle.
• Perform breach and attack simulation operations.
• Research and apply threat actor TTPs in simulations.
• Provide expertise on vulnerability remediation.
• Leverage threat intelligence for hunting vulnerabilities.
• Manage breach and attack simulation tools.
• Design and manage red and blue team exercises.
• Mentor team members in security practices.
• Support a culture of security innovation and adaptability.

Requirements

• Bachelor's degree in Information Technology or related field.
• 6+ years of IT and Security experience.
• 5+ years of hands-on penetration testing experience.
• 2+ years with breach and attack simulation tools.
• Proficient in web development technologies.
• Knowledge of OWASP Top 10 and web security risks.
• Experience with MITRE ATT&CK framework.
• Familiarity with IT Security technologies.
• Experience in cloud environments (IaaS, PaaS, SaaS).
• Certifications such as CISSP, CEH, OSCP are desirable.

Benefits

• Performance bonus opportunities.
• 401(k) with company match.
• Commitment to diversity and inclusion.
• Support for employee development.
• Flexible working arrangements (remote, hybrid, in-person).
• Opportunities for community involvement.
• Recognition for leadership and community service.
• Comprehensive health benefits.
• Employee resource groups for support.
• Innovative work culture.