Staff Offensive Sec Analyst-Austin or San Antonio, TX

Responsibilities

Job Summary: As a Staff Offensive Security Analyst, you'll provide consultative and hands on services by performing technical planning and testing of Digital assets, systems, processes, and employees.

• Works with Digital Compliance, Internal Audit, business teams, and internal and external penetration testing vendors to scope / configure / validate solutions to support penetration testing.
• Identifies and validates vulnerabilities by performing network penetration, web and mobile app testing, source code reviews, network segmentation testing, and wireless network assessments.
• Validates security control capability effectiveness by performing red and purple team testing using manual and automated capabilities.
• Writes and presents finding reports for both technical and executive audiences to support stakeholder remediation activities.
• Facilitates and supports efforts to identify remediation solutions to security findings.
• Designs / develops / documents / optimizes / automates / implements Windows, Linux, virtual lab environments, virtual, and cloud solutions to support penetration testing.
• Works with business teams to identify remediation solutions to security findings.
• Develops, documents guidelines, and procedures.
• Builds / maintains pen testing vendor partnerships to further H-E-B mission and goals.
• Research / stays up to date on emerging threats and threat emulation methodologies; maintains current knowledge of industry trends and standards; ensures continued personal growth in technology, business knowledge, and H-E-B policies and platforms.
• Coaches / mentors team Partners

The responsibilities and essential functions outlined above describe the general nature and level of work assigned to this position. This is not an exhaustive list of all duties, responsibilities, and skills required. Duties and responsibilities may be modified at any time based on business needs. Employees may be required to perform other job-related tasks as requested by their supervisor, subject to reasonable accommodations.

Qualifications

Work Experience: 7+ years of experience in penetration testing (web application, host, network), exploit development, and fuzzing and designing countermeasures to identified security vulnerabilities and risks.

• Experience assessing APT threats, in penetration testing, vulnerability management, attack methodologies, forensics analysis techniques, malware analysis