DirectJobHub
Jobs · Information Technology

Security Analyst, Part-Time (Temporary)

Synack · San Mateo, CA · 1 mo ago
RemoteRemoteInformation Technology$25/hrFull-time

Synack’s Penetration Testing as a Service platform manages customers’ attack surfaces by discovering new assets, pentesting for critical vulnerabilities and gaining visibility into the root causes of security risks. We are committed to making the world more secure by harnessing a talented, vetted community of security researchers to deliver continuous penetration testing and vulnerability management, with actionable results. Synack's PTaaS platform has uncovered more than 71,000 exploitable vulnerabilities to date, protecting a growing list of Global 2000 customers and U.S. agencies in a FedRAMP Moderate Authorized environment.

About the role

This is a part-time, temporary internship position lasting 6 months focused on offensive security within our Vulnerability Operations team.

Responsibilities

  • Assist the Vulnerability Operations team with the review and acceptance of Missions, Patch Verifications, and vulnerability reports
  • Bypass customer patch attempts, create suspected vulnerability reports, and exploit real-world vulnerabilities
  • Work remotely with seasoned Computer Security Analysts
  • Learn what it's like to review complex vulnerability reports

Requirements

  • Strong written and verbal communication skills
  • Basic understanding of various Computer Security topics, particularly offensive cyber subjects
  • Course work in offensive security (not necessarily at a University), hackathons, CTF participation, and experience with any of the following lab/live testing platforms:
    • Portswigger Academy
    • HackTheBox.eu
    • TryHackMe
    • Or any other Offensive Security Lab platform
  • Operational, hands-on knowledge of web application vulnerabilities and how to exploit them via Labs, CTFs, certifications, or prior work experience is highly recommended
  • A clear understanding of the OSI model, TCP/IP, and CVSS Scoring
  • Coursework and/or lab work towards obtaining CEH, GPEN, EJPT, OSCP is a plus
  • Basic understanding of OWASP top ten
  • Creative problem-solving acumen
  • Enthusiasm to build an offensive cyber career, and a positive can-do attitude
  • Due to Federal Government contract requirements, candidates must be a citizen of the United States

Technical Assessment

All candidates that advance to the technical portion of the interview process must be prepared to take a basic technical assessment to demonstrate practical application of required skills. The technical portion will be conducted after the verbal technical interview.

  • Have Burp Suite (any), or similar proxy tool such as Zap fully working and configured with your browser
  • Browser Inspect and/or debugger ready
  • Be prepared to share your screen
  • Be prepared to describe your methodology and thought process as you work through the challenges in real-time
  • Be able to demonstrate proper enumeration and testing processes
  • Be able to demonstrate a working knowledge of the tools being used

Pay

$25/hr. Salary is determined by a combination of factors including location, level, relevant experience, and skills.

Similar jobs