Today, there’s more data and users outside the enterprise than inside, causing the network perimeter as we know it to dissolve.
We realized a new perimeter was needed, one that is built in the cloud and follows and protects data wherever it goes, so we started Netskope to redefine Cloud, Network and Data Security.
Since 2012, we have built the market-leading cloud security company and an award-winning culture powered by hundreds of employees spread across offices in Santa Clara, San Francisco, Seattle, Bangalore, London, Melbourne, and Tokyo.
Our core values are openness, honesty, and transparency, and we purposely developed our open desk layouts and large meeting spaces to support and promote partnerships, collaboration, and teamwork.
From catered lunches and office celebrations to employee recognition events and social professional groups such as the Awesome Women of Netskope (AWON), we strive to keep work fun, supportive and interactive.
Visit us at Netskope Careers and follow us on Twitter Netskope and Facebook.
About the position :
The Vulnerability Assessment Analyst will be researching, finding, and exploiting vulnerabilities on our solutions, technologies, and providers.
In this position you will be joining a team of leaders helping to secure and innovate with some of the brightest minds in the industry.
Responsibilities include :
Be able to lead an assessment or penetration test with 1-2 other resources
Be able to lead a red team engagement and participate in purple team engagement.
Support sessions to teach system and network exploitation and security testing methods to resources.
Conduct vulnerability assessment and penetration testing and configuration review for systems and networks.
Recreate proofs of concept from security reports.
Job Requirements :
5+ yr of experience in Cybersecurity
Demonstrate expertise & track record in Web,Mobile, Network, and System application Penetration testing (Web, Mobile, API / Web Services)
Experience using Tools for Firewall Evasion, Abuses to IPSec VPN, Border Gateway Protocol, GRE Tunneling.
Be an expert in penetration testing methodology
Have experience in developing exploits and tooling from vulnerabilities both pre and post-exploitation.
Should have experience with tools Burp Suite, Metasploit, Tenable, SQL Map, NMAP, SCAPY, and other tools.
Knowledge of OWASP Web and Mobile Top 10 vulnerabilities and identifying them.
Be able to author and issue reports on assigned application and system scans.
Participate as a member of the PSIRT organization.
Familiarity with Cloud infrastructure like AWS, Azure, GCP and other SaaS Applications
Should be able to think "Out of the box". Possess the ability to think and implement new attack approaches / vectors.
Should possess the relevant professional qualifications / certification (e.g. CEH, OSCP)
Be able to maintain and contribute to the threat models
Experience in Automating Security tasks using Python or Java Frameworks is a bonus