Offensive Security Engineer, Pen Tester
hace 3 días
Splunk is here to build a safer and more resilient digital world. The world's leading enterprises use our unified security and observability platform to keep their digital systems secure and reliable. While customers love our technology, it's our people that make Splunk stand out as an amazing career destination and why we've won so many awards as a best place to work. If you become a Splunker, we want your whole, authentic self, what we call your "million data points". So bring your work experience, problem-solving skills and talent, of course, but also bring your joy, your passion and all the things that make you, you.
**Role Summary**:
We are looking for a smart, passionate, and experienced Penetration Tester with a broad range of experience working in dynamic enterprise environments. Do you want to utilize your hard-won offensive security experience to drive security posture improvements across our organization? As a Penetration Tester, you will do that and more
**What you'll get to do**:
- Guide the team in the development of technical frameworks, tools and execution of pen tests
- Conduct red team assessments and adversary emulation engagements
- Coordinate and execute “Purple teaming” exercises in collaboration with the Security Operations team
- Collaborate with 3rd parties including consulting firms and security researchers on coordinating assessments, validating vulnerability reports/findings and influencing remediation
- Build processes to coordinate pentests and establish remediation cadence cross-functions
- Be a standout colleague who enjoys collaborating with, learning from, mentoring, and teaching other team members to create a positive work environment
- Foster a collaborative environment across a remote team
**Must-have Qualifications**:
- At least 2+ years experience in an IT, penetration testing or security function
- Experience with Python, PowerShell, or similar scripting language
- Experience using industry standard offensive security tools
- You have a proficiency with enterprise operating systems, including Linux and Windows
- You have practical experience with assessing encryption, IAM systems, VPN and authentication technologies
- You have extensive knowledge of TCP/IP networking and packet analysis
- You pride yourself on your proven attention to detail
- Excellent, efficient problem-solving skills
- Strong familiarity with at least one of the following: OWASP Top 10, PTES, or NSA Vulnerability and Penetration Testing Standards
- Experience facilitating penetration testing efforts in one or more of the following Compliance frameworks (FedRAMP, PCI, SOCII, HIPAA)
**Nice-to-have Qualifications**:
We’ve taken special care to separate the must-have qualifications from the nice-to-haves. “Nice-to-have” means just that: Nice. To. Have. So, don’t worry if you can’t check off every box. We’re not hiring a list of bullet points-we’re interested in the whole you.
- You have professional-level certifications (OSCP, GPEN, GWAPT, GXPN)
- Experience with higher-level programming languages (C, C++, etc.)
- Experience with API penetration testing
- Experience with containerization offensive techniques
- Exploit development, vulnerability research, bug bounty submissions
**Splunk is an Equal Opportunity Employer**
At Splunk, we believe creating a culture of belonging isn’t just the right thing to do; it’s also the smart thing. We prioritize diversity, equity, inclusion, and belonging to ensure our employees are supported to bring their best, most authentic selves to work where they can thrive. Qualified applicants receive consideration for employment without regard to race, religion, color, national origin, ancestry, sex, gender, gender identity, gender expression, sexual orientation, marital status, age, physical or mental disability or medical condition, genetic information, veteran status, or any other consideration made unlawful by federal, state, or local laws. We consider qualified applicants with criminal histories, consistent with legal requirements.
-
Penetration Tester
hace 3 días
San José, Costa Rica Splunk A tiempo completo**About Splunk**: Join us as we pursue our disruptive new vision to make machine data accessible, usable and valuable to everyone. Splunk is a company filled with people who are passionate about our product and seek to deliver the best experience for our customers. At Splunk, we’re committed to our work, customers, having fun and most meaningfully, to each...
-
Penetration Tester
hace 4 días
San José, Costa Rica Splunk A tiempo completo**About Splunk**:Join us as we pursue our disruptive new vision to make machine data accessible, usable and valuable to everyone.Splunk is a company filled with people who are passionate about our product and seek to deliver the best experience for our customers.At Splunk, we're committed to our work, customers, having fun and most meaningfully, to each...
-
Security Webapp Pen Tester
hace 4 días
San José, Costa Rica Dxc Technology A tiempo completo**The Penetration Tester will bring the following skills**:- Understanding of current security vulnerabilities and trends- Able to effectively communicate vulnerability findings and remediation strategies to stakeholders- Ability to work with minimum supervision and effectively operate in a dynamic global organization- Prior experience with security...
-
Offensive Security Engineer, Product Security
hace 4 días
San José, Costa Rica Splunk A tiempo completoSplunk is here to build a safer and more resilient digital world.The world's leading enterprises use our unified security and observability platform to keep their digital systems secure and reliable.While customers love our technology, it's our people that make Splunk stand out as an amazing career destination and why we've won so many awards as a best place...
-
Offensive Security Engineer, App Sec Pen Tester
hace 4 días
San José, Costa Rica Splunk A tiempo completoSplunk is here to build a safer and more resilient digital world.The world's leading enterprises use our unified security and observability platform to keep their digital systems secure and reliable.While customers love our technology, it's our people that make Splunk stand out as an amazing career destination and why we've won so many awards as a best place...
-
Product Security Engineer
hace 4 días
San José, Costa Rica Splunk A tiempo completoSplunk is here to build a safer and more resilient digital world.The world's leading enterprises use our unified security and observability platform to keep their digital systems secure and reliable.While customers love our technology, it's our people that make Splunk stand out as an amazing career destination and why we've won so many awards as a best place...
-
Applications Security Engineer
hace 3 días
San José, Costa Rica GSB A tiempo completo**Descripción del puesto** **Responsibilities** - Application security reviews (SAST, DAST, Pen testing) - Secure architecture design - Threat modeling - Security outreach to internal development teams - Security guidance documentation - Security metrics delivery and improvements - Build deep relationships with product teams. - Drive security risk...
-
Devsecops Engineer
hace 4 días
San José, Costa Rica Splunk A tiempo completo**About Splunk**: Join us as we pursue our innovative new vision to make machine data accessible, usable and valuable to everyone. Splunk is a company filled with people who are passionate about our product and seek to deliver the best experience for our customers. At Splunk, we’re committed to our work, customers, having fun and most meaningfully, to each...
-
Devsecops Engineer
hace 4 días
San José, Costa Rica Splunk A tiempo completo**About Splunk**:Join us as we pursue our innovative new vision to make machine data accessible, usable and valuable to everyone.Splunk is a company filled with people who are passionate about our product and seek to deliver the best experience for our customers.At Splunk, we're committed to our work, customers, having fun and most meaningfully, to each...
-
It Quality Assurance
hace 4 días
San José, Costa Rica Airespring A tiempo completoCompany DescriptionFounded in 2001, family owned and operated AireSpring is a leading Provider of Cloud Communications, Managed Connectivity and Managed Security which has earned its stellar reputation by taking service and support to the next level, delivering an award-winning customer experience that far exceeds the industry standards.AireSpring has...
-
Network Operations Center Engineer Specialist
hace 5 días
San José, San José, Costa Rica Nitel A tiempo completo**Overview of the Role**Nitel is seeking a highly skilled Network Operations Center (NOC) Engineer to join our team. As a NOC Engineer, you will play a critical role in ensuring the smooth operation of our network infrastructure.**Key Responsibilities:**Support 24x7 engineer on-call requirements and respond to critical issues in a timely manner.Monitor...
-
Web Application Penetration Tester
hace 4 días
San José, Costa Rica Equifax A tiempo completo**What you'll do**- Document findings, including detailed descriptions of vulnerabilities and recommended remediation steps- Collaborate with development teams to ensure vulnerabilities are addressed effectively**What experience you need**- 3+ years of experience in cyber security.- 1+ years of programming languages experience such as Java, Kotlin,...
-
Security Engineer 3
hace 4 días
San José, Costa Rica Oracle A tiempo completoSecurity Engineer 3-220000TF**Applicants are required to read, write, and speak the following languages**: English**Preferred Qualifications**OTA-RM-LAD-CRWe are seeking a **Senior Security Engineer to join the Oracle+NetSuite Security team** responsible for securing systems, infrastructure, services, and data.We have mid and senior level positions available...
-
Mac Security Engineer
hace 3 días
San José, Costa Rica Crg Solutions A tiempo completoWe are seeking a skilled and knowledgeable Mac Security Engineer to join our dynamic team.As a Mac Security Engineer, you will play a critical role in ensuring the security and integrity of our macOS-based systems and infrastructure.Your expertise in Mac system and security architecture will be instrumental in monitoring, detecting, and responding to...
-
Mac Security Engineer
hace 5 días
San Pedro, Costa Rica CRG Solutions A tiempo completoWe are seeking a skilled and knowledgeable Mac Security Engineer to join our dynamic team. As a Mac Security Engineer, you will play a critical role in ensuring the security and integrity of our macOS-based systems and infrastructure. Your expertise in Mac system and security architecture will be instrumental in monitoring, detecting, and responding to...
-
Security Engineer 3
hace 1 semana
San José, Costa Rica Oracle A tiempo completoSecurity Engineer 3-220004C4 **Applicants are required to read, write, and speak the following languages***: English **Preferred Qualifications** **OTA-IWE-MX**We are seeking a Senior Security Engineer to join the Oracle+NetSuite Security team responsible for securing systems, infrastructure, services, and data. We have mid and senior level positions...
-
Senior Cloud Security Engineer
hace 2 días
San José, Costa Rica GSB A tiempo completoAn important and internationally recognized company is looking for a Cloud Security Engineer, trained to: Advise and follow best practices, ensure cloud environments are configured to meet compliance requirements and prevent the latest security threats, and the continuous vigilance needed to protect against advanced attacks from around the world **Key...
-
Senior Security Engineer
hace 4 días
San José, Costa Rica Oracle A tiempo completoSenior Security Engineer-22000140**Applicants are required to read, write, and speak the following languages**: English**Preferred Qualifications**- Background in securing cloud based services.- Experience with Python scripting.- Create standard operating procedures, security guidelines and processes.- Conduct security risk assessment and evaluate the...
-
Sr. Cyber Security Engineer
hace 4 días
San José, Costa Rica Kimberly-Clark A tiempo completoSr. Cyber Security EngineerThe K-C Cybersecurity team is a trusted adviser to IT and the broader organization, helping to protect our most valuable assets, and continuously working to strengthen our capabilities to identify and mitigate cyber risk.As part of this team, the IT Senior Security Engineer creates security architecture with its own unique...
-
Senior Security Engineer
hace 13 horas
San José, Costa Rica TreviPay A tiempo completoAt TreviPay, we believe loyalty begins at the payment. Thousands of sellers use our global B2B payments and invoicing network to provide choice and convenience to buyers, open new markets and automate accounts receivables. With integrations to top eCommerce and ERP solutions and flexible trade credit options, TreviPay brings 40 years of experience serving...