Open Vulnerability and Penetration Testing

The Vulnerability and Penetration Testing Engineer utilize extensive experience, standardized and custom testing tools, threat intelligence information, and risk management concepts during the assessment process to deliver prioritized findings based on projected business impact.
The role holder will provide extensive post-analysis consulting, both written and verbal, to constituents to ensure all parties adequately understand the findings and how to successfully remediate the vulnerabilities. The role holder will also engage in ongoing industry, technology, and threat research to ensure the Firm maintains an effective assessment program capable of protecting the confidentiality, integrity, availability, and recoverability of information, systems, and facilities in compliance with organizational policies and standards.
The Security Architect, Vulnerability, and Risk Assessment evaluates the security posture of systems, processes, and applications to identify vulnerabilities that expose the Firm to risk as defined and quantified by the Firms Risk Management Framework and ISMS Policy.
The individual will critically analyze proposed and existing solutions for adherence to recognized standards of secure system design, including requirements resulting from the ISMS Policy, client contracts, the regulatory environment, and professional obligation
Architect, implement, and support assessment solutions identified as necessary for the protection of Firm assets
Provide effective oversight and guidance for other VAPT team members
Continually evaluate relevant products, tools, scripts, and techniques that improve existing assessment capabilities
Prioritize assessments to maximize risk reduction efforts relative to business impact and resource availability
Develop comprehensive and understandable assessment reports that effectively summarize findings and recommendations