Enterprise Security Engineer (Pen Testing)

Full-time

Onsite

Entry, Mid Level

Informatica is focused on securing its enterprise environment to support a growing workforce. As a Senior Enterprise Security Engineer, you will conduct security assessments, collaborate with business partners, and develop security standards to protect the organization from emerging threats.

Apply Now

Responsibilities

Perform full stack security assessments (such as architecture and design reviews, code reviews, and penetration tests) across a diverse and sophisticated range of environments including:
Web applications/SaaS applications
Operating system and hardware platforms (server and client endpoints, mobile and other embedded devices)
Network infrastructure (switches, routers, wireless access points, load balancers, firewalls, VPN, SDN, cloud)
Authentication and authorization services (SAML, OAuth, Radius, Kerberos)
Public cloud infrastructure platforms and technologies (AWS, GCP, Azure, Terraform)
Middleware and API services
Threat model common attacker methods to develop appropriate mitigation techniques, providing guidance that balances security requirements with functional requirements
Develop automated processes and support improvement of tooling to identify and solve problems at scale
Collaborate with engineering teams and business partners to drive solutions through a secure development lifecycle
Define and develop technical security standards and guidelines with business partners
Research new technologies, emerging threats, and vulnerabilities for strategic planning and process improvements

Qualification

Required

2-4 years of experience in a security role with a focus on application and network security, penetration testing, security engineering, infrastructure engineering, threat modeling, red team operations, firewall/access control technologies, risk management, and/or endpoint security controls
Knowledge of key areas pertaining to security such as common network security models and protocols, application security, methods of resolving integrity and providing confidentiality, operating systems internals and vulnerabilities, public key infrastructure and digital certificates, and exploit mitigation techniques
Hands-on experience performing security assessments with common tools such as BurpSuite, Nexpose, Nessus, Metasploit, and Nmap
Experience performing manual and tool-assisted code reviews (Java, JavaScript, Python, and other languages)
Experience designing solutions and/or performing security assessments in cloud environments (AWS, Azure, Google Cloud)
Excellent communication skills, with the ability to work as a team and collaborate effectively with diverse stakeholders
A related technical degree required

Preferred

Confirmed scripting experience in one or more of these languages: Bash, PowerShell, Python, Java, JavaScript / NodeJS
Security certification such as OSCP, OSEP, GCIH, GCIA, GPEN, GWAPT, GMOB, GPPA, CCNP, CCNP Security, CCIE Security
Knowledge of development and security practices on the Salesforce platform, Heroku, Slack, Mulesoft, and/or Tableau