Associate Offensive Cybersecurity Engineer - Application Focused

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Evolve Security, so some details may not match this job. The employer's own page has the real description.

Job Overview

The Associate Offensive Cybersecurity Engineer - Application Focused at Evolve Security is responsible for identifying vulnerabilities and weaknesses within applications to enhance the overall security posture of our clients. This role will involve performing penetration testing, threat modeling, and security assessments, with a focus on application security. The ideal candidate will work closely with developers and other stakeholders to provide guidance on secure coding practices and assist in the remediation of identified security issues, ultimately aiming to safeguard critical infrastructure and sensitive data from potential threats.

Job Responsibilities

• Conduct penetration tests on web and mobile applications to discover and report security vulnerabilities.
• Collaborate with cross-functional teams to understand application architecture and identify potential security risks.
• Develop security assessment reports and communicate findings and recommendations to stakeholders.
• Implement threat modeling exercises to evaluate potential risks in application design and architecture.
• Provide secure coding training and guidance to development teams to foster a security-first mindset.
• Stay updated with the latest security threats, vulnerabilities, and trends within the cybersecurity landscape.
• Assist in incident response activities and contribute to the development of security policies and procedures.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field.
• 1-3 years of experience in cybersecurity, with a focus on application security or penetration testing.
• Strong understanding of web and mobile application architectures and security concepts.
• Familiarity with common security testing tools (e.g., OWASP ZAP, Burp Suite, Nessus).
• Knowledge of programming/scripting languages such as Python, Java, C#, or JavaScript.
• Certifications such as OSCP, CEH, or equivalent are highly desirable.
• Excellent analytical and problem-solving skills with attention to detail.

Technologies & Tools

The Associate Offensive Cybersecurity Engineer will utilize a variety of advanced technologies and software tools in this role. These include penetration testing frameworks, vulnerability assessment tools, and secure coding platforms. Familiarity with network security tools, cloud infrastructure security solutions, and various scripting languages will also play a vital role in effectively executing responsibilities and enhancing the overall security measures for applications under scrutiny.

Ideal Candidates

Ideal candidates for the Associate Offensive Cybersecurity Engineer position will possess a passion for cybersecurity and a proactive approach to identifying risks and vulnerabilities in applications. They should demonstrate strong communication skills to articulate technical security issues to non-technical stakeholders effectively. A collaborative spirit is essential, as this role requires working closely with developers and other teams to implement meaningful security strategies. Furthermore, candidates should exhibit a thirst for knowledge, staying current with industry trends and evolving technologies, as well as a commitment to continuous improvement in both personal and professional capacities.