Netskope
Information Security Engineer Lead (Red Team)
Netskope, Saint Louis, Missouri, United States, 63146
Information Security Engineer Lead (Red Team)
Netskope , a global cybersecurity leader, is redefining cloud, data, and network security to help organizations apply zero trust principles to protect data.Today, there's more data and users outside the enterprise than inside, causing the network perimeter as we know it to dissolve. We realized a new perimeter was needed, one that is built in the cloud and follows and protects data wherever it goes, so we started Netskope to redefine Cloud, Network and Data Security.Since 2012, we have built the market-leading cloud security company and an award-winning culture powered by hundreds of employees spread across offices in Santa Clara, St. Louis, Bangalore, London, Melbourne, Taipei, and Tokyo. Our core values are openness, honesty, and transparency, and we purposely developed our open desk layouts and large meeting spaces to support and promote partnerships, collaboration, and teamwork.Job Overview
Netskope Global Information Security organization is looking for a security engineer to be part of red team and offensive security operations. This position will be responsible for leading the team responsible for assessing the Netskope products and cloud services from a holistic security perspective. A successful candidate should have strong offensive technical skill sets and can identify and provide recommendations for security vulnerabilities pertaining to varying technologies and environments.Key Responsibilities
Act as a SME for offensive security technical areasPerform comprehensive security assessment of, but not limited to, web & mobile application, containers, k8s, thick client, cloud environmentsPerform triage and implement SAST, DAST and SCA processCommunicate and collaborate with multiple stakeholders like engineering, SRE, QA for security initiativesProviding assistance in regulatory compliance like FedRAMP and PBMMSupport junior team members in their authoring of reports and issues and help in day-to-day operationsSupport and recreate proofs of concept from security reports6+ years of penetration testing, application security, red team experience in highly diversified and high growth organizations.Understanding of application frameworks and how to approach security as well as security pitfalls with themProven expertise & track record in web and mobile application penetration testing (Web, Mobile, API/Web Services) - DAST and SASTExperience in leading the team of 3-5 members in security testing domainShould have experience with tools Burp suite professional, Metasploit, Tenable, SQL Map and NmapExperience in regulatory compliance like FedRAMP and PBMMHave experience in developing exploits and tooling from vulnerabilities both pre and post exploitation and lateral movementIn-depth knowledge of OWASP Web and Mobile Top 10 vulnerabilities, identifying, exploiting and remediation of themGood knowledge of TCP/IP and other application and network level protocolsBe able to author and issue reports on assigned application and system scanGood exposure to cloud service providers like AWS, GCP and other SaaS applicationsExperience in automating security tasks using Python or any other scripting languageShould be able to think "Out of the box". Possess ability to think and implement new attack approaches/vectorsShould possess relevant university degree and/or professional qualifications/certification (e.g. CEH, OSCP, CISSP)Excellent written and verbal communication skillsSelf-motivated, curious, knowledgeable pertaining to news and current eventsNetskope is committed to implementing equal employment opportunities for all employees and applicants for employment. Netskope does not discriminate in employment opportunities or practices based on religion, race, color, sex, marital or veteran statues, age, national origin, ancestry, physical or mental disability, medical condition, sexual orientation, gender identity/expression, genetic information, pregnancy (including childbirth, lactation and related medical conditions), or any other characteristic protected by the laws or regulations of any jurisdiction in which we operate.Netskope respects your privacy and is committed to protecting the personal information you share with us, please refer to Netskope's Privacy Policy for more details.
#J-18808-Ljbffr
Netskope , a global cybersecurity leader, is redefining cloud, data, and network security to help organizations apply zero trust principles to protect data.Today, there's more data and users outside the enterprise than inside, causing the network perimeter as we know it to dissolve. We realized a new perimeter was needed, one that is built in the cloud and follows and protects data wherever it goes, so we started Netskope to redefine Cloud, Network and Data Security.Since 2012, we have built the market-leading cloud security company and an award-winning culture powered by hundreds of employees spread across offices in Santa Clara, St. Louis, Bangalore, London, Melbourne, Taipei, and Tokyo. Our core values are openness, honesty, and transparency, and we purposely developed our open desk layouts and large meeting spaces to support and promote partnerships, collaboration, and teamwork.Job Overview
Netskope Global Information Security organization is looking for a security engineer to be part of red team and offensive security operations. This position will be responsible for leading the team responsible for assessing the Netskope products and cloud services from a holistic security perspective. A successful candidate should have strong offensive technical skill sets and can identify and provide recommendations for security vulnerabilities pertaining to varying technologies and environments.Key Responsibilities
Act as a SME for offensive security technical areasPerform comprehensive security assessment of, but not limited to, web & mobile application, containers, k8s, thick client, cloud environmentsPerform triage and implement SAST, DAST and SCA processCommunicate and collaborate with multiple stakeholders like engineering, SRE, QA for security initiativesProviding assistance in regulatory compliance like FedRAMP and PBMMSupport junior team members in their authoring of reports and issues and help in day-to-day operationsSupport and recreate proofs of concept from security reports6+ years of penetration testing, application security, red team experience in highly diversified and high growth organizations.Understanding of application frameworks and how to approach security as well as security pitfalls with themProven expertise & track record in web and mobile application penetration testing (Web, Mobile, API/Web Services) - DAST and SASTExperience in leading the team of 3-5 members in security testing domainShould have experience with tools Burp suite professional, Metasploit, Tenable, SQL Map and NmapExperience in regulatory compliance like FedRAMP and PBMMHave experience in developing exploits and tooling from vulnerabilities both pre and post exploitation and lateral movementIn-depth knowledge of OWASP Web and Mobile Top 10 vulnerabilities, identifying, exploiting and remediation of themGood knowledge of TCP/IP and other application and network level protocolsBe able to author and issue reports on assigned application and system scanGood exposure to cloud service providers like AWS, GCP and other SaaS applicationsExperience in automating security tasks using Python or any other scripting languageShould be able to think "Out of the box". Possess ability to think and implement new attack approaches/vectorsShould possess relevant university degree and/or professional qualifications/certification (e.g. CEH, OSCP, CISSP)Excellent written and verbal communication skillsSelf-motivated, curious, knowledgeable pertaining to news and current eventsNetskope is committed to implementing equal employment opportunities for all employees and applicants for employment. Netskope does not discriminate in employment opportunities or practices based on religion, race, color, sex, marital or veteran statues, age, national origin, ancestry, physical or mental disability, medical condition, sexual orientation, gender identity/expression, genetic information, pregnancy (including childbirth, lactation and related medical conditions), or any other characteristic protected by the laws or regulations of any jurisdiction in which we operate.Netskope respects your privacy and is committed to protecting the personal information you share with us, please refer to Netskope's Privacy Policy for more details.
#J-18808-Ljbffr