Requirement for Sr Penetration Tester Job at Kairos Technologies, Plano, TX

RXV4cVkyTVVDM1V0VmJxbHpHMWMvZVpwelE9PQ==
  • Kairos Technologies
  • Plano, TX

Job Description

Hi ,

Please let me know if you're comfortable with the position detailed below. This position is an urgent hire.

Job Title: Sr Penetration Tester

Location: Plano, TX---Hybrid 3 days

Duration : 6-12 months Contract to hire

Only Locals

• Experience conducting manual API and mobile PenTest using burp suite. Proficient in understanding application-level vulnerabilities like XSS, SQL Injection, CSRF, authentication bypass, weak cryptography, authentication flaws etc.

Skilled in performing penetration tests on web APIs and mobile apps before release. MITRE ATT&CK working on Red Teaming TTPs and Threat Modelling.

Leveraging Bash, PowerShell and Python automation.

• API testing: Postman, SoapUI, Crackmapexec, Hash cat, Responder, Bloodhound, Impacket, Postman

Performing manual testing and identifying vulnerabilities such as Cross-Site Request Forgery (CSRF), Cross-Site Scripting (XSS), SQL Injection, privilege escalations, authentication weaknesses, access control weaknesses, use of insecure cryptographic protocols, security misconfigurations.

Summary

Within the Cyber Fusion Center, the Offensive Security Team continuously evaluates PepsiCo's cyber security posture through penetration tests and red team engagements to proactively identify gaps and drive mitigations to minimize PepsiCo's cyber risk exposure.

Responsibilities

• Conduct penetration tests across Web applications, APIs, Mobile applications, infrastructure, cloud environments, and devices.

• Conduct red team engagements across complex environments (including operational technologies).

• Drive all phases of penetration tests and red team engagements, including Scoping, planning, communications, timelines, and execution of key activities (reconnaissance, vulnerability identification, exploitation, and reporting)

• Develop in-depth reports (issue, severity, impact, remediation recommendations) for penetration tests and red team engagements.

• Develop tools and techniques to automate, scale, and accelerate adversary emulation capabilities and vulnerability discovery.

• Develop exploits and POCs to evade defensive countermeasures and emulate threat actor TTPs.

• Establish and mature team documentation, processes, procedures, and team KPIs.

• Mentor penetration testers, red team members, and other functions where needed to drive unified and holistic outcomes.

• Manage third-party pen test and red team engagements to ensure high-quality products and deliverables

• Support offensive security research, innovation, and testing across emerging capabilities (e.g. AI, LLM, ML, NLP, Smart Contracts, etc.).

Accountabilities

1. Execute on projects, objectives, and deliverables in alignments with team vision, mission, and goals.

2. Routinely develop and update offensive security documentation, processes, and technologies to adapt to emerging threat landscape.

3. Develop automation to scale global offensive capabilities and operational resiliency.

4. Collaborate with partner teams, service owners, and senior leadership to influence, prioritize, and drive the resolution of discovered security findings.

5. Create and deliver trainings; and participate in security reviews, audits, on-site engagements, and support incidents after-hours when required

Years of experience

5+ years of experience in a technical security role (e.g. Penetration Testing, Red Team, Application Security, Infrastructure Security); or master's degree in computer science/engineering or related cyber field, and 2 years of relevant experience.

Mandatory Technical Skills

1. Advanced knowledge of security tools (Burp Suite, Metasploit, Cobalt Strike, Empire, Nmap, bloodhound, etc.) and multiple operating systems (e.g. Windows, Linux).

2. Proficient in at least one scripting language (Python, bash, PowerShell) or one programming language (Java, C#, C++).

3. Experience in multiple security domains (e.g. Network security, Application Security, Infrastructure Security, Cloud Security, Security operations).

4. Experience in aligning threat and vulnerability management efforts to frameworks and control objectives - MITRE ATT&CK, NIST CSF, ISO27001, CIS, OWASP.

5. Familiarity with defensive and monitoring technologies such as Intrusion prevention/detection systems (IPS/IDS), Web application firewalls (WAF), security information and event management systems (SIEMs), and endpoint detection/response (EDR) tools, as well as user and entity behavior analytics (UEBA).

6. Experience in developing offensive security tooling and automation is a plus.

Laxman Andoli | Lead – TAG | Kairos Technologies Inc

M : 972.848.7314 | O: 214.389.5616 Ext 302 | E:  [email protected]

 

Job Tags

Contract work, Local area, Immediate start,

Similar Jobs

Creative Chaos

3D Designer/Animator Job at Creative Chaos

 ...Chaos is seeking a talented 3D Designer/Animator to join our dynamic team. In this role, you will create stunning 3D models and animations that contribute to our gaming and multimedia projects. You will work closely with our artists and game designers to bring characters... 

Merrill-Stevens Yachts

Marine Yacht Brokers Job at Merrill-Stevens Yachts

 ...experiencing rapid growth and needsExperienced Yacht Brokersfor our Sales Team. Our shipyard is under Major Renovation and provides work...  ...social media marketing, and participate in the major regional boat shows.As a Yacht Broker at MS Yachts, you must be professional... 

AnthroMed Education

School Social Worker Job at AnthroMed Education

 ...Job: School Social Worker 2024-2025 Location: Joliet, IL Hours: Full-time Salary : $53,000 - $66,000 / Hourly:$40.15 - $50.00 Grade Level: K-8 th AnthroMed Education is passionate about making a positive impact on the lives of students. We are looking... 

Sato

Work From Home Agent Job at Sato

 ...Guide warm leads through the sales funnel and close deals Maintain accurate records of sales activities What We Offer ~ Work from home and enjoy a personalized workspace ~ Uncapped commission system - your earnings are directly tied to your performance!~... 

First PREMIER Bank PREMIER Bankcard

PREMIER Workforce Management Internship Job at First PREMIER Bank PREMIER Bankcard

 ...00 AM to 5:00 PM Job Status:90-day internship Company: PREMIER Bankcard About the Internship As a Customer Service Workforce...  ...call performance goals are met. Review schedules to ensure employee time is recorded accurately General Forecasting/Scheduling...