14 publicaciones de empleo destacadas de developer (secure development) en parla, md (¡Están contratando!)

Penetration Tester
WTW —Madrid, Madrid provincia
- Jornada completa
- Informática
- Inglés
- SQL
1d
Cloud Technical Lead
SAS —Madrid, Madrid provincia
- Teletrabajo
- Azure
- Informática
- Inglés
Quality Assurance Engineer - Automation (m/f/x)
osapiens —Madrid, Madrid provincia
- Jornada completa
- Trabajo híbrido
- Azure
- DevOps
- Inglés
Solicitud rápida
4d
Team Lead Microsoft Dynamics 365 IT Operations (m/f/d)
Liebherr IT Shared Service Centre Ibérica, S.L. —Madrid, Madrid provincia
- Jornada completa
- Trabajo híbrido
- CRM software
- Español
- Azure
Sales Manager - Offtake Origination, Iberia H/F
Worldwide Energy —Madrid, Madrid provincia
- Español
- Ventas
- Oficina
Solicitud rápida
Collibra Platform Engineer
NN Group —Madrid, Madrid provincia
- Jornada completa
- Trabajo híbrido
- Azure
- Informática
- DevOps
- Parking gratuito
- Seguro de vida
HV Project Database Solution Owner
Hitachi —Madrid, Madrid provincia
- Jornada completa
- SQL
- Scripting
- Desarrollo de software
8d
Senior Java Software Engineer
EPAM Systems, Inc. —Madrid, Madrid provincia
- Inglés
- Oficina
- Java
- Vacaciones pagadas
- Programa de recomendación
Expert Manager, Software Engineering (Full Stack)
Bain & Co. —Madrid, Madrid provincia
- Jornada completa
- Español
- Azure
- Informática
Solicitud rápida
Senior Cloud Platform Engineer (Azure)
EPAM Systems, Inc. —Madrid, Madrid provincia
- Azure
- DevOps
- Inglés
- Vacaciones pagadas
- Programa de recomendación
Expert Manager, Software Engineering (Full Stack)
Bain & Company Inc —Lisboa
- Jornada completa
Senior Android Software Engineer (All Genders)
zooplus SE —Madrid, Madrid provincia
- De 45.400 € a 68.000 € al año
- Jornada completa
- Trabajo híbrido
- Inglés
- Oficina
- Java
Solicitud rápida
Franchise Senior Manager Iberia - Minor Hotels Eu&Am - Madrid
Minor Hotels Europe & Americas —Madrid, Madrid provincia
- Español
- Inglés
- Hotel
Solicitud rápida
3d
Finance Consultant X3
Sage —Madrid, Madrid provincia
- Español
- Sistemas ERP
- Inglés
- Seguro dental
1h

More jobs to discover

Find similar jobs that you might be interested in.

Cloud Technical Lead
SAS —Madrid, Madrid provincia
Collaboration with global R&D, Product, Technical Support, and CIS teams will be essential to maintaining high levels of customer satisfaction and service…
Program Manager Lead â€“ IT/Cloud Infrastructure
Reale Group —Madrid, Madrid provincia
The selected candidate will be responsible for the strategic planning, execution, and governance of key infrastructure programs, ensuring alignment with…

Quiero recibir la alerta de empleo más reciente de developer (secure development) en parla, md

Al iniciar sesión en tu cuenta, aceptas las Condiciones del servicio de SimplyHired, nuestra Política sobre cookies y nuestra Política de privacidad.

Penetration Tester

WTW -
Madrid, Madrid provincia

Solicitar ahora

Detalles del empleo

Jornada completa
Hace 1 día

Cualificaciones

Pentest
Informática
CSS
PaaS
Inglés
SQL
CEH
PHP
Grado
JavaScript
Scripting
Burp Suite
Ruby
APIs
Cloud
SaaS
Python
Iaas
HTML

Descripción completa del empleo

Description

A penetration tester is responsible for assessing the security of web applications and its underlying infrastructure to identify vulnerabilities and weaknesses that could be exploited by attackers. Their role involves conducting thorough assessments and penetration tests to uncover potential security risks and provide recommendations for mitigation.
The role will work closely alongside the rest of the Penetration Testing team, Business units and other Cyber team.
We are looking for a collaborative team player, with a good technical knowledge in web application and infrastructure penetration testing. The successful candidate will contribute to and work as part of a global multi-disciplined security community with clear vision and direction, and top-down support across the business.

The Role

Vulnerability Assessment: Conducting comprehensive assessments of web applications and Infrastructure to identify security vulnerabilities, such as cross-site scripting (XSS), SQL injection, authentication flaws, insecure configurations, poor host device and service configurations, and use these to penetrate deeper into the application/server.
Penetration Testing: Performing controlled attacks on web applications. APIs, infrastructure, and simulate real-world hacking attempts and identify potential entry points for attackers. This involves utilizing various techniques, tools, and methodologies to exploit vulnerabilities and gain access.
Security Analysis: Analyzing the results of penetration tests to assess the severity of identified vulnerabilities, their potential impact on the system and the business, and the likelihood of exploitation.
Reporting and Documentation: Preparing detailed reports that document the findings, including identified vulnerabilities, attack vectors, and recommendations for remediation. These reports typically outline the risks associated with each vulnerability and provide guidance on how to mitigate them.
Remediation Support: Collaborating with developers and system administrators to assist in the remediation of identified vulnerabilities. This may involve providing guidance on secure coding practices, recommending security controls, or validating the effectiveness of implemented fixes.
Stay Up to Date: Keeping abreast of the latest web application and infrastructure vulnerabilities, attack techniques, security tools, and industry best practices. This includes staying informed about emerging threats and trends in web applications and infrastructure.
Ethical Approach: Conducting all testing and assessment activities within a legal and ethical framework, ensuring that the organization's systems and data are not compromised or harmed during the process.
Continuous Improvement: Engaging in professional development activities, such as attending conferences, participating in training programs, and obtaining relevant certifications, to enhance knowledge and skills in cyber security.

Qualifications

The Requirements

Education: A bachelor's degree in a related field such as computer science, information security, or cybersecurity is commonly preferred, but not always mandatory. Relevant industry experience can compensate for formal education requirements.
Technical Knowledge: A strong understanding of web technologies, programming languages (e.g., HTML, CSS, JavaScript, PHP, Python), and web application architecture is essential. Knowledge of networking fundamentals, operating systems, and databases is also beneficial.

Skills:

Web Application Security: In-depth knowledge of web application vulnerabilities, common attack techniques, and mitigation strategies. Strong understanding of OWASP Top 10 vulnerabilities is crucial.
Infrastructure security: Working knowledge of different on-prem and cloud builds (IaaS, PaaS, SaaS), in-depth understanding of operating system and its common flaws
Penetration Testing Techniques: Proficiency in various penetration testing methodologies, tools, and frameworks. Experience with manual testing techniques, automated vulnerability scanners, and exploit frameworks is necessary.
Programming and Scripting: Proficiency in at least one programming language (e.g., Python, Ruby, or JavaScript, etc) to write custom scripts and tools. Understanding SQL queries for database testing is also important.
Analytical and Problem-Solving Skills: Ability to analyze complex web application environments, identify vulnerabilities, and exploit them. Strong problem-solving skills to understand attack vectors and recommend appropriate countermeasures.
Very good English skills (C1/C2 level), both spoken and written

Holds relevant industry certification/s or equivalent like the following:

CEH – Certified Ethical Hacker
OSCP – Offensive Security Certified Professional
GPEN – GIAC Penetration Tester
PNPT – Practical Network Penentration Tester
Burp Suite Certified Practitioner
eWAPT/eWAPTx – elearning Web Application Penetration Tester

We’re committed to equal employment opportunity and provide application, interview and workplace adjustments and accommodations to all applicants. If you foresee any barriers, from the application process through to joining WTW, please email [email protected].

Solicitar ahora

Refina tu búsqueda

developer (secure development) empleos en parla, md

Penetration Tester

Cloud Technical Lead

Quality Assurance Engineer - Automation (m/f/x)

Team Lead Microsoft Dynamics 365 IT Operations (m/f/d)

Sales Manager - Offtake Origination, Iberia H/F

Collibra Platform Engineer

HV Project Database Solution Owner

Senior Java Software Engineer

Expert Manager, Software Engineering (Full Stack)

Senior Cloud Platform Engineer (Azure)

Expert Manager, Software Engineering (Full Stack)

Senior Android Software Engineer (All Genders)

Franchise Senior Manager Iberia - Minor Hotels Eu&Am - Madrid

Finance Consultant X3

More jobs to discover

Quiero recibir la alerta de empleo más reciente de developer (secure development) en parla, md

Related Searches

Description

Qualifications

Herramientas para candidatos

Herramientas para empresas

Buscar

Mantener la conexión