Note: The job is a remote job and is open to candidates in USA. Bitdefender is a cybersecurity leader delivering threat prevention, detection, and response solutions worldwide. The Cyber Security Consultant - Penetration Testing will lead offensive security engagements, collaborate with clients and internal teams, provide technical expertise and sales support, and mentor team members while delivering high-quality security assessments.
Responsibilities
- Engagement Management: Lead the planning, execution, and reporting of offensive security engagements, ensuring objectives are met within scope, budget, and timeline constraints
- Technical Expertise: Demonstrate advanced knowledge and proficiency in various offensive security techniques, tools, and methodologies
- Client Interaction: Interface directly with clients to understand their security objectives, communicate findings, and provide actionable recommendations for improvement
- Sales Support: Interface directly with Sales to support on client scoping to understand their security objectives and tailor an impactful and valuable solutions
- Team Development: Mentor and develop team members, supporting their growth and skill enhancement in the field of offensive security
- Continuous Improvement: Stay abreast of emerging threats, vulnerabilities, and industry best practices, integrating new techniques and tools
- Collaboration: Collaborate with other teams within the firm, such as Sales, Delivery Management, and Research, to ensure alignment and maximize client value
- Quality Assurance: Maintain high standards of quality and professionalism in all deliverables across the team, adhering to the firm's methodologies and standards
- Travel: Willing to travel around and within South-east Asia and enjoy being out of their comfort zone
Skills
- Fluent in English (other languages are welcome)
- Minimum of 5 years of experience in cybersecurity
- OSCP (Required)
- Bachelor degree is computer science, information security or any related field
- OSCE, OSWE, CREST CRT, CRTP, CCT INF, Cloud security experience
- Proven track record of leading and managing teams, with excellent communication, interpersonal, and conflict resolution skills
- Strong communication, writing and interpersonal skills to collaborate with external and internal stakeholders
- Deep understanding of offensive security principles, techniques (e.g. those in the MITRE ATT&CK), and tools ( such as Cobalt Strike, Burp Suite, Fortify, etc ) with hands-on experience in areas such as penetration testing, exploit development, and social engineering. Good competency in using scripting languages such as, Python, PowerShell, C#, C/C++, Go Lang
- Strong client-facing skills, with the ability to build and maintain relationships, understand client needs, deliver impactful solutions in a clear manner and providing support to pre sales
- Strong analytical and problem-solving skills, with the ability to think creatively and work independently with minimal supervision
- Collaborative mindset, with the ability to work effectively in cross- functional teams and contribute to a positive work environment whilst training and mentoring others in a leadership capacity
- Commitment to ethical hacking principles, with a dedication to upholding client confidentiality and integrity in all engagements
- Ability to thrive in a fast-paced, dynamic environment, with a willingness to adapt to changing priorities and challenges
- Demonstrated passion for cybersecurity, evidenced by involvement in security initiatives outside of work, such as public disclosure of vulnerabilities or relevant awards from bug bounty programs
- Willing to travel around and within South-east Asia and enjoy being out of their comfort zone
Benefits
- There is an annual training budget allocated for each consultant to take up cybersecurity related courses/certifications.
- Dedicated research time to ensure you stay on the top of your game for the next client project.
- Opportunities to learn and perform a variety of security assessments beyond pen testing and red teaming/adversary simulations such as; cloud security assessments, blockchain security and IoT testing.
- We have an awesome delivery team that will help minimize distractions and allow you, our consultant, to focus your efforts on the assessment.
- Work with and learn from fellow similar-minded colleagues from countries such as Singapore, Indonesia, Europe, United States with our HQ in Romania.
Company Overview