Berkadia
Senior Red Team Engineer III
Ambler, Pennsylvania, United States · Senior
Sponsorship not specifiedDetected 15 days ago
PythonBashAWSAzureDockerKubernetesTerraformLinuxCybersecurityPenetration TestingCRMTCP/IPFirewall
About the role
- Provide quarterly updates to our CRM (Cyber Risk Management) team regarding our compliance with NIST (National Institute of Standards and Technology) pen testing frameworks.
- Be a technical subject matter expert to mentor more junior engineers working on vulnerability remediations.
- Remote work available up to 3 days per week at employer discretion.
Responsibilities
- Berkadia Commercial Mortgage, LLC seeks a Senior Red Team Engineer III (Ambler, PA) to manage and conduct internal penetration tests on mission-critical internal web applications including network scanning, foot printing, fingerprinting, process enumeration, exploitation, escalation, and exfiltration.
- Document the results of all findings of internal penetration tests providing evidence/POC (Proof of Concepts) for each finding and how to replicate the results of each finding.
- Build and publish reports showing the following:
- Maintain and update internal penetration testing documentation ensuring that it is up to date with best practices.
- Manage and maintain all WAF (Web Application Firewall) policies and updates.
Requirements
- Bachelor's degree, or foreign equivalent, in Electronics Engineering, Computer Science, Information Technology, or closely related field.
- Must have (4) years of experience conducting internal penetration tests from start to end including documentation and remediations of all findings using Metasploit, BurpSuite, Kali Linux, and nmap.
- Of the (4) years, must have the following:
- (2) years' experience maintaining modern cloud infrastructures in AWS and Azure environments including experience with Terraform
- (2) years experience in Agile development, including Python, and Bash
- You have rights under Federal and State employment laws.
- Lead efforts with development teams to ensure that Berkadia Web Applications are implementing all required HTTP security headers.
Apply directly at Berkadia →Create a free account for alerts like thisView Berkadia immigration profile
This listing is sourced directly from Berkadia's careers page and normalized into a canonical job model.