Security Consultant - Penetration Tester

About Trustwave Government Solutions

Trustwave Government Solutions is a leading provider of data security and compliance services to the U.S. Federal government. Our team of security experts, ethical hackers and researchers, enables our government partners to transform the way they manage their information security and compliance programs results to ensure each customer receives valuable outcomes at the best value. The agencies we work with benefit from our collaborative, innovative approach to meeting their unique needs. We listen carefully and respond nimbly. Our solutions combine industry best practices with customized technology to ensure quality and integrity.

Security Consultant

The Security Consultant role offers an exciting opportunity to work within the world renowned and truly global SpiderLabs team. The team currently has security consultants throughout North America, Latin and Central America, Europe, Africa, Australia, and Asia.

Candidates should be well versed in penetration testing, application security of web applications and thick clients as well as the softer side of consultancy. Consultants must be able to effectively balance workload, work effectively and closely with colleagues within the ever growing team worldwide.

Specific Responsibilities:

• The consultant is expected to own and run key customer engagements as directed by their manager
• As an industry leader, the consultant will maintain Trustwave's reputation within their center of excellence by participating in industry events and from time to time, supporting pre‐sales activities as required by their manager
• Perform deep, detailed and advanced security assessments and penetration tests
• Interact with customers to provide excellent service via pre-engagement meetings, post-test debriefs as well as interaction during engagements
• Creates organizational knowledge about key technologies, tools and methodologies
• Candidates will have the opportunity to perform security research involving bug hunting, exploit development, reverse engineering and cryptography.

Qualifications:

• Candidate must be experienced and strong in application and network penetration testing.
• Candidate must be experienced in one of: Code Review, Cloud, Red Teaming, Mobile Application Security
• Software development and scripting experience required.
• Excellent English language communication skills.
• Ability to present at conferences.
• Is a highly autonomous worker, able to operate with little to no supervision
• Strong team player and technical innovator with an ability to build and leverage relationships on an inter and intra departmental basis
• Ability to create and maintain methodologies and process definitions
• Defined professional experience performing security testing of application and network targets; preferably some of that experience will be in a consulting environment.
• Knowledge of security in both Linux and Windows environments as it pertains to web application, middleware, database, and identify management platforms.
• Certifications such as OSCP or OSCE are desirable.
• Knowledge of modern web application technologies and architectures.
• Experience developing, delivering and managing large consulting engagements
• This is a remote/work from home position, candidate must be in and authorized to work in the USA
• Ability to maintain Secret clearance required.
• Active Secret Clearance strongly preferred.
• Travel 25 percent with potential to surge to 50 percent to support the mission.

Education:

• A high school diploma or equivalent is required; a college or university degree is a plus.

This is a remote opportunity open to anyone legally authorized to work in the United States. Guided by our flexible workplace philosophy, Moments That Matter, people gather in the office when in-person interaction is most impactful; full-time remote employees may be asked to travel occasionally based on the needs of the team and the business.

Trustwave is an Equal Opportunity Employer of Minorities, Females, Protected Veterans, and Individuals with Disabilities.

Per Federal government contracting requirements, candidate must be a US citizen, as well as potentially pass and maintain a National Agency Check with Local Agency and Credit Checks (NACLC).

To All Agencies:

• Please, no phone calls or emails to any employee of Trustwave outside of the Talent Acquisition team. Trustwave’s policy is to only accept resumes from agencies via the Trustwave Agency Portal. Agencies must have a valid fee agreement in place and they must have been assigned the specific requisition to which they submit resumes, by the Talent Acquisition team. Any resume submitted outside of this process will be deemed the sole property of Trustwave and in the event a candidate is submitted outside of this policy is hired, no fee or payment of any kind will be paid.