We have other current jobs related to this field that you can find below

  • Cloud-Based Web APIs Penetration Testing Support Consultant

    2 weeks ago

    San Francisco, California, United States Hybrid Pathways Full time

    About the opportunity:New Era Technology is seeking a a Penetration Testing Support Consulting Resident to conduct testing for web APIs for indirect object access permissions and controls on AWS. This is a 5-month remote opportunity.Write RSpec tests in Ruby to ensure code quality. Set up API endpoint calls using Postman or a similar tool for testing...

  • Cloud-Based Web APIs Penetration Testing Support Consultant

    2 weeks ago

    San Francisco, United States New Era Technology Full time

    Job DescriptionJob DescriptionAbout the opportunity:New Era Technology is seeking a a Penetration Testing Support Consulting Resident to conduct testing for web APIs for indirect object access permissions and controls on AWS. This is a 5-month remote opportunity.Key ResponsibilitiesWrite RSpec tests in Ruby to ensure code quality. Set up API endpoint calls...

  • Penetration Tester Consultant

    3 weeks ago

    San Diego, California, United States RSI Security Full time

    THIS IS A REMOTE POSITIONRSI Security is a small organization where collaboration is not only encouraged, but expected. We value relationships within our team and are intentional to build and maintain a strong team camaraderie through virtual happy hours, daily morning meetings to help us start off on the right foot, and meetings dedicated solely to...

  • Penetration Tester Consultant

    2 weeks ago

    San Diego, United States RSI Security Full time

    THIS IS A REMOTE POSITION RSI Security is a small organization where collaboration is not only encouraged, but expected. We value relationships within our team and are intentional to build and maintain a strong team camaraderie through virtual happy hours, daily morning meetings to help us start off on the right foot, and meetings dedicated solely to...

  • Penetration Tester Consultant

    1 month ago

    San Diego, United States RSI Security Full time

    Job DescriptionJob DescriptionTHIS IS A REMOTE POSITIONRSI Security is a small organization where collaboration is not only encouraged, but expected. We value relationships within our team and are intentional to build and maintain a strong team camaraderie through virtual happy hours, daily morning meetings to help us start off on the right foot, and...

  • Penetration Tester

    4 weeks ago

    San Diego, United States Deep Seas, LLC Full time

    Job DescriptionJob DescriptionDescription:Company BackgroundWith close to 30 years of experience in cyber defense, DeepSeas is trusted by nearly 1,000 clients around the world, including Fortune 100 enterprises and mid-market organizations, municipality and local governments, higher education, and federal agencies. DeepSeas partners with clients to prepare...

  • NDT Trainee Penetrant

    1 month ago

    San Leandro, United States Precision Castparts Corp Full time

    GENERAL PURPOSE Under general supervision, inspects the surface condition of castings using specialized equipment and a liquid Penetrant, using predetermined inspection methods approved by Quality Assurance, to ensure conformance to customer requirements in accordance with quality standards. Ensures that documentation, tooling and parts are correctly matched...

  • NDT Trainee Penetrant

    3 months ago

    San Leandro, United States Precision Castparts Corp. Full time

    Country United States of America State / County California City San Leandro Division Structurals Company San Leandro Function Quality Workplace Type On-Site Position type Full Time Opportunity ID 13563 Company Profile With more than 120 operations and approximately 20,000 employees worldwide, Precision Castparts Corp. is the market...

  • Construction Materials Testing Laboratory Operation Manager

    3 months ago

    San Francisco, United States Apex Testing Laboratories Full time

    Job DescriptionJob DescriptionPosition: CONSTRUCTION MATERIALS TESTING OPERATIONS MANAGERJob Description:Responsible for coordinating or managing the activities of a Construction or Geotechnical materials laboratory (testing includes materials such as soils, aggregates, concrete, and asphalt). This includes ensuring that the laboratory testing services are...

  • Cloud Security Penetration Tester

    1 month ago

    San Antonio, United States Sandoval Technology Solutions LLC Full time

    Job DescriptionJob DescriptionJob Summary:At SandTech Solutions we are committed to “Enabling Success” of our client’s missions. As such, we are searching for a highly skilled and motivated person who has:Minimum Clearance RequiredActive DOD Top Secret ClearanceEducation/Certification Requirements:Bachelor's degree in Computer Science,...

  • NDT Penetrant Inspection Trainee

    2 days ago

    San Leandro, California, United States Precision Castparts Corp. Full time

    Position OverviewWe are seeking a dedicated NDT Trainee Penetrant to become an integral part of our operations at Precision Castparts Corp. This role involves evaluating the surface integrity of castings through the application of specialized techniques and liquid penetrant materials. The selected candidate will play a crucial role in upholding quality...

  • PRESALES SOLUTION CONSULTANTS

    2 months ago

    San Francisco, United States Chronos Consulting Full time

    PRESALES SOLUTION CONSULTANTS – ALM and Testing Automation (CA) PRESALES SOLUTION CONSULTANTS – ALM and Testing Automation (CA) Our client is a global leader in software testing automation solutions. They are looking for experienced Presales Solution Consultants ( full time, direct hire) in the San Francisco areas. Please note that no relocation...

  • Web Security Application Specialist

    3 days ago

    San Francisco, California, United States Direct Staffing Inc Full time

    Visa candidates are welcome to apply.In the evolving landscape of retail, where shopping dynamics have transformed significantly, it is essential for technology to play a pivotal role in driving our company forward. The Web Application Security Engineer is a vital member of the Information Security team, ensuring that our technological frameworks are robust...

  • Web Security Application Specialist

    3 days ago

    San Francisco, California, United States Direct Staffing Inc Full time

    Visa candidates are encouraged to apply.The landscape of retail has transformed significantly in recent years, necessitating a greater emphasis on both personnel and technological advancements. As we navigate these rapid shifts, it is essential for technology to serve as a strategic facilitator, enabling our organization to enhance delivery, adapt to market...

  • Senior Offensive Security Manager

    3 days ago

    San Francisco, California, United States Early Warning Services Full time

    Company Overview: Early Warning Services has been a cornerstone of the U.S. financial landscape for over three decades, delivering innovative solutions such as Zelle and Paze?. We collaborate with numerous institutions to enhance access to financial services and safeguard transactions for millions of consumers and small enterprises.Position Summary: The...

  • Laboratory Operations Manager for Construction Materials

    3 days ago

    San Francisco, California, United States Apex Testing Laboratories Full time

    Job OverviewPosition: Laboratory Operations Manager for Construction MaterialsRole Summary:The Laboratory Operations Manager is accountable for overseeing the functions of a construction or geotechnical materials testing facility. This role involves ensuring that all testing procedures are performed safely, adhering to the company's quality standards,...

  • Test Automation Engineering Manager

    2 weeks ago

    San Francisco, United States Hispanic Technology Executive Council Full time

    Test Automation Engineering Manager (Accenture LLP; San Francisco, CA): Accenture LLP has multiple openings for the position of Test Automation Engineering Manager in San Francisco, CA, and the job duties are as follows: Drive quality testing solutions by planning and constructing test scripts through the use of quality processes and methodologies for...

  • Lead test engineer

    5 months ago

    San Francisco, United States Atechstar Full time

    Job DescriptionJoin our atechstar family and you’ll grow your expertise and become the best version of you. As you embark on a new journey you’ll seek challenges with flexibility and patience learning new skills and advancing your career while having the time of your life.The Lead Test Engineer is responsible for leading Test Engineering teams and is...

  • Client Consulting Director, Visa Consulting

    4 weeks ago

    San Francisco, United States Visa Full time

    Company DescriptionVisa is a world leader in payments and technology, with over 259 billion payments transactions flowing safely between consumers, merchants, financial institutions, and government entities in more than 200 countries and territories each year. Our mission is to connect the world through the most innovative, convenient, reliable, and secure...

  • Lead test engineer

    4 months ago

    San Francisco, California, United States Atechstar Full time

    Job DescriptionJoin our atechstar family and you'll grow your expertise and become the best version of you. As you embark on a new journey you'll seek challenges with flexibility and patience learning new skills and advancing your career while having the time of your life.The Lead Test Engineer is responsible for leading Test Engineering teams and is...

Penetration Testing Support Consultant

2 months ago

San Francisco, United States Hybrid Pathways Full time
Job DescriptionJob DescriptionAbout the opportunity:
Hybrid Pathways, a New Era company, is seeking a Penetration Testing Support Consulting Resident to conduct testing for web APIs for indirect object access permissions and controls on AWS. This is a 6-month remote opportunity.

Responsibilities:
  • Write RSpec tests in Ruby to ensure code quality.
  • Set up API endpoint calls using Postman or a similar tool for testing purposes.
  • Create Python scripts for reporting and for triaging issues.
  • Establish a test environment to confirm test case validity.
  • Research API endpoint functionality to clarify desired behaviors.
  • Verify that each API endpoint functions as intended and meets the specified requirements.
  • Identify the owner of each endpoint by reviewing code and documentation.
  • Troubleshoot any issues that arise to maintain smooth testing operations.
  • Analyze test results and diligently report any defects discovered.
  • Continuously enhance test automation by updating and maintaining the test framework.
  • Communicate progress and address any issues through regular status reports.
  • Collaborate with API developers to tailor testing and analysis.
  • Conduct penetration testing for web APIs for indirect object access permissions and controls on AWS.
  • Document and report detailed penetration testing results, findings and gaps.
  • Support analysis, recommendations and potential remediation of identified vulnerabilities.
  • Collaborate with related Information Security Trust Assurance and Threat Detection teams to characterize potential security vulnerabilities.
  • Validate and/or enhance testing protocols, tools or scripts to optimize penetration testing processes.
  • Independently handle complex issues with minimal supervision, while escalating only the most complex issues to appropriate staff.
  • Provide guidance and recommendations to stakeholders responsible for security remediation actions to close identified gaps and remediation validation testing.
  • Develop comprehensive and accurate reports and presentations for various consumers of penetration testing results.
  • Developing, extending, or modifying exploits, shellcode or exploit tools.
Required Skills                                                                  
  • 5+ years experience conducting penetration testing.
  • 3+ years experience conducting vulnerability analysis.
  • Test Automation and Frameworks: Proficiency in writing automated tests using RSpec, a testing tool for Ruby. Understanding of test automation frameworks and principles is crucial.
  • Programming Knowledge: Strong knowledge of Ruby programming language to write tests. Working knowledge of Python and possibly some familiarity with other languages used in the codebase.
  • API Testing: Experience with API testing tools such as Postman or similar software to create and send requests to API endpoints and analyze responses.
  • Environment Setup: Ability to set up and maintain test environments, including configuration of databases, servers, and other services that tests depend on.
  • Troubleshooting: Skills in identifying, diagnosing, and resolving issues that arise during testing. This often requires a good understanding of the system being tested and problem-solving skills.
  • Version Control Systems: Familiarity with version control systems like Git for searching through code and documentation to identify endpoint owners.
  • Defect Tracking: Experience with defect tracking and reporting tools to log and manage issues discovered during testing.
  • Continuous Integration/Continuous Deployment (CI/CD): Understanding of CI/CD principles to integrate automated tests with build pipelines.
  • Hands on experience with the following:
    • Scripting Languages (e.g., Python, PowerShell, etc.)
    • Linux Operating Systems
    • AWS Security Services
    • AWS Infrastructure Services
    • Network protocols (e.g., TCP/IP, UDP, ARP, DNS, and DHCP)
    • Ability to identify and exploit web vulnerabilities (XSS, CSRF, SQLi, SSRF, arbitrary file upload, etc.)
    • Ability to identify and exploit mobile vulnerabilities (API issues, insecure storage, memory corruption, deep links, etc.)
    • Cryptography (e.g., PKI, TLS, etc.)
    • Web Application penetration testing
    • Working knowledge of Identity and Access Management and Authentication Protocols including Active Directory and Entra ID
  • Familiarity with the following:
    • Windows Operating Systems
  • Source code vulnerability analysis

Preferred Skills
  • Taking initiative and being proactive
  • Excellent interpersonal communication skills with strong spoken and written English.
  • Collaborative team worker – both in person and virtually using MS Teams or similar.
  • Excellent analytical skills.
  • Organizational skills with attention to detail.
  • Ability to leverage existing documentation.
  • Excellent documentation skills; demonstrated proficiency in Microsoft Office including Word, Excel and PowerPoint.
  • Business outcomes mindset.
  • Solid balance of strategic thinking with detailed orientation.
  • Self-starter, ability to take initiative.
  • Flexibility to accommodate working across different time-zones.

Preferred Education
  • Bachelor's degree (BA/BS) from four-year college or university; or equivalent training, education, and work experience.

About Us:       
Hybrid Pathways is a New England-based IT professional services company that assists mid-to-large enterprises with the implementation of secure IT environments that span on-premises and public cloud platforms. Be a part of a fast-paced, growing organization focused on doing great projects for great people.    

EEO Statement:
Hybrid Pathways is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, marital status, national origin, genetics, disability, age, or veteran status. 
 

Powered by JazzHR

lijs6s7WqK