Actor jobs in Scottsdale, ArizonaCreate job alerts

Job DescriptionOffensive Security Consultant (Pen Tester) Full-Time, Exempt Location: Scottsdale, AZ preferred, remote will be considered Job Description Are you passionate about offensive security and thrive on finding the flaws before the bad actors do? Join Lumifi as a full-time Penetration Tester! You'll be a critical part of our security team, tasked with proactively identifying vulnerabilities across our customers' entire technology stack to secure their systems and protect their assets. This is a role for a self-starter who excels at simulating real-world threats, doesn’t give up at the first sign of failure, and is able to clearly relay testing results to technical and non-technical audiences. Key Roles & Responsibilities • Deliver application, network, systems, and infrastructure penetration tests for customers, • Prepare high quality reports detailing security issues, making recommendations, and identifying solutions, contribute to presentations and discussions with customers around testing performed, key results, recommendations, and the next steps, • Conduct reconnaissance and gather open-source intelligence, • Safely deploy offensive tools and techniques against authorized targets, • Develop custom scripts and tools to enhance red team capabilities, • Communicate findings and strategies to technical and executive stakeholders, • Provide risk-based recommendations and support defensive teams in improving detection and response, • Build and promote strong, long-lasting relationships with a diverse range of customers, and identify and explore opportunities within existing and new customers, • Ensure that KPIs around client expectation management, delivery deadlines, quality of work and deliverables etc are met, including conducting quality management, • Share knowledge and support Professional Services team members to up/cross skill in hard and soft skills, • Certifications such as OSCP, OSCE, OSWE, GPEN, GCIH, GWAPT, GXPN.Required Skills/Abilities, • Bachelor's degree in Computer Science, IT, or related field, or equivalent experience., • 4+ years of hands-on experience in offensive security, including:, • Network and web application penetration testing, • Social engineering (email, phone, physical), • Exploit development or tool customization, • Strong understanding of threat actor tactics, techniques, and procedures., • Experience with red, blue, or purple team exercises., • Willingness to travel for on-site assessments as needed – less than 10% travel, • Effective communication skills, both written and verbal skills, • Ability to adapt and thrive in a fast-paced, evolving technical landscape., • Proven ability to problem-solve and think critically in a fast-paced environment.Benefits Include:, • Health Insurance 80% paid by employer, • Dental Insurance 80% paid by employer, • Vision Insurance 80% paid by employer, • Self-Managed vacation leave, • Paid sick leave Powered by JazzHR xw4QqpomwO

Job Summary Being part of the red team provides you with the opportunity to work on the cutting edge of cybersecurity and help drive the improvement of detection capabilities as well as strengthening of defenses to improve our overall security posture. The role also offers you with the opportunity to lead and mentor junior team members and provide guidance on complex projects. Major Responsibilities • Developing guidelines for the usage, control, maintenance and audit-readiness of information and computer resources that are used in the distributed processing environment., • Analyzing and addressing customer security requirements for all business applications existing on a distributed platform., • Assisting in the evaluation, selection, and installation of security software products for distributed platforms., • Identifying distributed systems security issues as they arise and coordinating with the security architect to ensure that issues are addressed and resolved in a timely basis., • Conduct tactical assessments that require expertise in social engineering, application security (web and mobile), physical methods, lateral movement, threat analysis, internal and external network architecture and a wide array of products, • Document and formally report testing initiatives, along with remediation recommendations and validation, • Maintain tools and scripts used in penetration-testing and red team processes, • Conduct research into real-world threat actor tactics, techniques, and procedures (TTPs) and apply that knowledge to Red Team Exercises, • Assess new technologies, software applications, and devices for potential avenues of exploitation, • Develop exploits based on identified vulnerabilities, • Develop scripts, tools, or methodologies to enhance Red Team processes, • Work with teammates to consistently learn and share advanced skills and foster team excellence Qualification • Bachelor's Degree in Computer Science or related fields; applicable specialized training; or equivalent work experience - equally preferable, • Certified Information Systems Security Professional (CISSP), Global Information Assurance Certification (GIAC), Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), Certified Information Security Manager (CISM), OSCP, OSCE, GWAPT, or other security certifications desired, • Understanding of one or more compliance frameworks: NIST, FFIEC, GLBA, SOX, PCI, etc., • 5-7 year of experience conducting penetration-testing/red team engagements, • Experience in planning and executing advanced attacks that evade network and endpoint security controls to demonstrate the potential adverse impact caused by a threat actor, • Experience with implementing red team assessment methods, tools, and techniques, • Experience identifying and exploiting common web-application vulnerabilities, such as: SQL Injection, DOM Manipulation, Authorization System Bypass, Design Logic issues, bounds checking, role & access validation, and filter evasion., • Experience handcrafting/dissecting HTTP conversations, • Experience in developing, extending, or modifying exploits and offensive security tools (shellcode, implants, reflective loaders, etc.), as well as operational experience exploitation, lateral movement, and persistence on Windows and Linux systems, bypassing preventative and detective endpoint and network security controls, C2 frameworks (Cobalt Strike and Metasploit), using common offensive security tools (nmap, CrackMapExec, Impacket, Responder, etc.) The typical base pay range for this role is between $110K - $135K depending on job-related knowledge, skills, experience and location. This role may also be eligible for certain discretionary performance-based bonus and/or incentive compensation. Additionally, our Total Rewards program provides colleagues with a competitive benefits package (in accordance with the eligibility requirements and respective terms of each) that includes comprehensive health and wellness benefits, retirement plans, educational assistance and training programs, income replacement for qualified employees with disabilities, paid maternity and parental bonding leave, and paid vacation, sick days, and holidays. For more information on our Total Rewards package, please click the link below.