Apply for this Job
Job DetailsJob Location Maryland - Columbia, MD
Position Type Full Time
DescriptionKey Responsibilities: - Conduct comprehensive penetration tests on cloud-based systems, applications, and infrastructure to identify vulnerabilities and security flaws.
- Utilize a variety of tools and techniques to simulate cyber attacks on cloud environments, including AWS, Azure, and Google Cloud Platform.
- Collaborate with the security team to develop and implement effective security measures and countermeasures based on penetration test findings.
- Prepare detailed reports of penetration testing activities, including findings, impact analysis, and recommendations for mitigating identified vulnerabilities.
- Stay current with emerging security threats, technologies, and penetration testing methodologies.
- Assist in developing and refining cloud security policies, procedures, and best practices.
- Participate in security audits and compliance assessments to ensure adherence to industry standards and regulations.
- Provide guidance and support to development teams in the secure design and deployment of cloud applications and infrastructure.
QualificationsRequired Qualifications: - Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent professional experience.
- Professional certifications in cybersecurity (e.g., OSCP, CEH, GWAPT, AWS/Azure/Google Cloud security certifications) are highly desirable.
- Proven experience in penetration testing, particularly in cloud environments.
- Strong understanding of cloud computing technologies and security principles, including IAM, network security, encryption, and secure coding practices.
- Proficient in using penetration testing tools and frameworks (e.g., Metasploit, Burp Suite, Kali Linux).
- Knowledge of programming and scripting languages (e.g., Python, Bash) is a plus.
- Excellent problem-solving skills and the ability to think like both an attacker and a defender.
- Strong communication skills, with the ability to present findings and recommendations effectively to technical and non-technical stakeholders.
Date Posted: 22 February 2025
Apply for this Job