Red Team Engineer - FedRAMP at Netskope Cloud Support

, Arizona, United States -

Full Time

Start Date

Immediate

Expiry Date

23 Apr, 26

Salary

191500.0

Posted On

23 Jan, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Penetration Testing, Application Security, Security Engineering, Web Application Testing, Mobile Application Testing, Cloud Security, Automation, OWASP, TCP/IP, AWS, GCP, SAST, DAST, Security Assessment, Vulnerability Management, Security Solutions

Industry

Computer and Network Security

Description

About Netskope Today, there's more data and users outside the enterprise than inside, causing the network perimeter as we know it to dissolve. We realized a new perimeter was needed, one that is built in the cloud and follows and protects data wherever it goes, so we started Netskope to redefine Cloud, Network and Data Security. Since 2012, we have built the market-leading cloud security company and an award-winning culture powered by hundreds of employees spread across offices in Santa Clara, St. Louis, Bangalore, London, Paris, Melbourne, Taipei, and Tokyo. Our core values are openness, honesty, and transparency, and we purposely developed our open desk layouts and large meeting spaces to support and promote partnerships, collaboration, and teamwork. From catered lunches and office celebrations to employee recognition events and social professional groups such as the Awesome Women of Netskope (AWON), we strive to keep work fun, supportive and interactive. Visit us at Netskope Careers. Please follow us on LinkedIn and Twitter@Netskope. About the position: Netskope Global Information Security organization is looking for a security engineer to be part of the application security assurance team. This position will be responsible for partnering with multiple stakeholders to build, deploy and manage security solutions as part of FedRAMP controls. Also, assessing the Netskope products and cloud services from a holistic security perspective. A strong candidate for this role is someone who can build innovative ways to deploy different security capabilities in an automated manner and can manage them operationally. Responsibilities: Leading and managing requirements per FedRAMP controls and turning them into operational models and implementations for the InfoSec organization - DAST, SAST, SCA Support in performing, triaging and automating SAST, DAST and SCA process Deploy and operate security solutions and supporting infrastructure in different environments in support of internal customer security needs and FedRAMP requirements Develop and automate day-to-day operational tasks and deployment methods Perform security assessment of, but not limited to, web & mobile application, containers, k8s, thick client, cloud environments Support and recreate proofs of concept from security reports Support and be a member of the PSIRT organization Requirements: 4+ years of penetration testing, application security, penetration testing experience in highly diversified and high growth organizations. Proven experience in security engineering, building and managing security solutions across the stack (on-prem and cloud) Understanding in application frameworks and how to approach security as well as security pitfalls with them Proven experience & track record in web and mobile application penetration testing (Web, Mobile, API/Web Services) - DAST and SAST Should have experience with tools Burp suite professional, Metasploit, Tenable, SQL Map and Nmap In-depth knowledge of OWASP Web and Mobile Top 10 vulnerabilities, identifying, exploiting and remediating them Good knowledge of TCP/IP and other application and network level protocols Exposure to cloud service providers like AWS, GCP and other SaaS applications Should possess relevant university degree and/or professional qualifications/certification (e.g. CEH, OSCP, CISSP) Prior experience working in environments with NIST 800-53, NIST 800-171 controls or FedRAMP requirements Excellent written and verbal communication skills. Self-motivated, curious, knowledgeable pertaining to news and current events Ability to get and maintain a US security clearance Education: Bachelor’s degree preferred #LI-JR1 Compensation: At Netskope, salary is one component of our competitive total rewards package. The salary range for this position is as listed below. This is a national range. For purposes of complying with applicable laws, the range applies to candidates in California, Colorado, Illinois, Maryland, New York, Washington, and other states. The successful candidate’s starting pay will also be determined based on job-related skills, experience, qualifications, location, and market conditions. For all sales roles, the posted salary range is the On Target Earnings (OTE) range for the role, which is the sum of base salary and target commission amount at 100% goal achievement. In addition to salary, candidates may be eligible for other forms of compensation such as participation in a bonus plan (for non-sales roles) and a stock award program. Candidates may also be eligible for a comprehensive health plan and other benefits that can be reviewed at Netskope Benefits site. Salary Range $94,500—$191,500 USD Netskope is committed to implementing equal employment opportunities for all employees and applicants for employment. Netskope does not discriminate in employment opportunities or practices based on religion, race, color, sex, marital or veteran statues, age, national origin, ancestry, physical or mental disability, medical condition, sexual orientation, gender identity/expression, genetic information, pregnancy (including childbirth, lactation and related medical conditions), or any other characteristic protected by the laws or regulations of any jurisdiction in which we operate. Netskope respects your privacy and is committed to protecting the personal information you share with us, please refer to Netskope's Privacy Policy for more details. The application window for this position is expected to close within 50 days. You may apply by filling out the below information, or visiting our Netskope Careers site.

How To Apply:

Incase you would like to apply to this job directly from the source, please click here

Responsibilities

The role involves leading and managing FedRAMP control requirements and implementing operational models for the InfoSec organization. Additionally, the engineer will deploy and operate security solutions and perform security assessments across various environments.