Job Description:
- The Company Professional Security Services (PSS) – Security Penetration Testing (SPT) is a key function of providing a thorough and wholistic approach to Cyber Defense.
- SPT proactively seeks out and works to reduce risks of emerging threats within Company PSS customer environments by conducting controlled, real-world attack simulations.
- SPT makes recommendations for reducing attack surfaces, suggesting improvements to defense stacks, practices emergent cyber-attack vectors and techniques, and works to enhance and streamline Company SPT platforms.
- Performs security penetration testing at an intermediate experience level.
- Ability to independently identify and resolve tactical-level problems, develop and implement improvement plans, and work collaboratively within a team environment.
- Maintains an in-depth knowledge of modern hacker tools, methodologies, attack trends, and current intelligence as shared publicly, by our industry partners, and government agencies.
- Utilizes industry standard security penetration and auditing tools to conduct real-world attack simulations.
- Perform deep technical analysis of vulnerabilities within the company customer environments and develop actionable recommendations to reduce associated risks.
- Develops and delivers comprehensive analysis of all technical findings, security attack vectors, control compromise, and debrief the company customers’ technical and executive teams.
- Utilizes malware threat intelligence to develop new / updated attack methods for use in SPT activities.
- Takes initiative and proactively seek out new assignments to improve company SPT delivery platforms, testing methodologies, and customer consumables.
- Proficient in business communication, delivery of internal- and external-facing customer presentations, and the ability to clearly articulate complex security attack and defense topics both written and verbally.
- At least one industry-recognized security penetration testing certification:
- EC-Council (e.g., CEH [current version], etc.) – Entry
- SANS/GIAC (e.g., GPEN, GCPN, etc.) – Entry
- Offensive Security (e.g., OSCP, OSWP, etc.) – Entry
- Other industry-relevant certifications
- Undergraduate degree or equivalent experience in Cybersecurity, Computer Science, Computer Engineering, or related field.
- 8+ years of relevant experience in cyber- and information security field.
- 4+ years of direct experience performing security penetration testing duties.
- Experience or knowledge of lateral movement, footholds, and data exfiltration techniques.
- Experience with current penetration testing tools and techniques.
- Strong verbal and written communication skills.
- Demonstrable experience in technical.
- Strong critical thinking skills, with a demonstrated ability to work independently and with a team.
- Experience operating in a management consulting firm.
- Experience with attack frameworks such as the Cyber Kill Chain and MITRE ATT&CK.
- Experience with one or more programming languages, such as Python or Bash.
- Experience reverse engineering malware and performing malware analysis.
Horizontal is proud to be an Equal Opportunity and Affirmative Action Employer. We seek to provide employment opportunities to talented, qualified candidates regardless of race, color, sex/gender including gender identity and/or expression, national origin, religion, sexual orientation, disability, marital status, citizen status, veteran status, or any other protected classification under federal, state or local law.
In addition, Horizontal will provide reasonable accommodations for qualified individuals with disabilities. If you need to request a reasonable accommodation in order to complete the application or interview process, please contact hr@horizontal.com.
All applicants applying must be legally authorized to work in the country of employment.
Success!
You have saved your first job! To see all your Saved Jobs, click here. Or continue scrolling through jobs and bookmark openings that catch your eye and apply for those jobs later.
We’re sorry!
There are currently no open positions in your location or accepting applications from out of the country
Return to Home