Job Description

Work with the security team and development teams to ensure our webapps and websites are thoroughly scanned before release, and on a continuing basis while in production. Work within the organizations SAFe plans to ensure scanning of new features and products before release. Run vulnerability scanners. Build appropriate automated testing in the provided tools. Identify vulnerabilities that may need further manual review to find vuln chains, or ways to escalate vulnerabilities to more severe exploits. Build POC s. Build useful vulnerability remediation workflows and SLA s. CVSS score assessment/modification. SAST and DAST configuration. Help with vulnerability management and triage process. Prioritization of vulnerabilities across projects. What You Will Bring: Familiarity/experience with OWASP Top 10/ OWASP IoT Top 10 / CWE Top 25 vulnerabilities Extensive experience with automated scanning tools such as TenableWAS, Nessus, Fortify Webinspect Understanding of relevant cybersecurity and privacy standards including ISO21434, ISO24089, EU RED, EU CRA, GDPR, PCI Knowledge and experience with manual and automated testing tools and methods. Industry certifications such as Sec+, CEH, pentest+, CCSLP, GEVA, GPEN, LPT, OSCP A Plus If You Have: Agricultural / Ag-Security background or experience Software development / system design experience Affiliation with a known entity that can publicly vouch for skillset Scrum/Agile experience or training Who You Are: Strong preference for outcome-oriented thinking. Ability to think adversarially.

foundit