Job Post

Senior Security Consultant (Penetration Tester)
Rapid7
Rapid7
100 Summer St 13th Floor
Boston, MA 02110

Do you enjoy attacking networks? How do you feel about attacks against SAML. Do you enjoy hacking custom protocols, implemented in embedded devices? As a penetration tester on the Global Services team at Rapid7, you will help our clients improve their security posture through your technical skills and knowledge of defense strategies.

Our clients often present us with unique security challenges from a testing perspective. Likewise, we work with a wide variety of technology platforms and protocols. Beyond providing services to customers, you are encouraged to perform research and speak at security conferences.

But wait, we're not done yet. You will be working at Rapid7! We have some cool products and ideas and we're enthusiastic about them. Why wouldn't you want to be part of that? Send us your resume and let's talk.

Essential Responsibilities

You will be called on to perform technical testing against a variety of targets. These include:
• Network Penetration Testing (wired and wireless)
• Web Application Testing
• Social Engineering (on-premise and electronic)

Beyond delivering these services, as a consultant you will:
• Grow to support all security practice offerings in a pre- and post-sales role
• Meet professional practice standards and demonstrate exceptional skill in core service areas
• Develop and maintain positive relationships with clients
• Execute delivery work that exceeds expectations
• Understand the client's business and needs
• Participating in industry conferences and professional organizations
• Creating additional value for clients through continual insights and consultative advice based on experience with the client, their industry, established standards and leading practices

Job Requirements

• 5+ years in an active technical security role
• Strong knowledge of the following
• Modern penetration testing tools and methods
• Network security concepts
• Web-based application security concepts
• IEEE 802.11 security concepts
• Windows/Linux/UNIX internals
• Internet protocol suite
• Experience using interpreted languages (Ruby, Python, PHP, etc.)
• Knowledge of compiled languages (Java, C, C++, Assembly, etc.)
• Social engineering techniques and tactics
• Strong written and verbal skills
• Be able to work and interact with clients of various backgrounds
• Maintain positive client relationships and feedback
• Be comfortable explaining findings and recommendations to technical and non-technical audiences
• Knowledge of common regulatory structures and obligations
• Knowledge of common I.T. governance guidance

Job Plusses:

• Previous technical security consulting experience
• Master’s degree or foreign equivalent in Engineering, Computer Science, MIS, CIS or related field
• Certifications such as GWAPT or OSCP

Category: Client Services

See What It's Like To Work Here

Rapid7 is engineering better security to help companies reduce risk of breach, detect and respond to attacks, and build effective cybersecurity programs.

More Jobs From This Company

60 day posting for only $99