Security Vulnerability and Penetration Testing Engineer Job at Baker McKenzie, Chicago, IL

VGFBUTUySEpieG8yakZHRFpIREtPN0RmU1E9PQ==
  • Baker McKenzie
  • Chicago, IL

Job Description

Description

The Security Vulnerability and Penetration Testing Engineer will oversee and serve as a technical resource for all assessment activities related to the security posture of existing and proposed firm systems, platforms, and processes to protect and continually improve the confidentiality, integrity, and availability of information systems per the firm's business objectives, regulatory requirements, and strategic goals.

Main responsibilities:
  • Perform security penetration testing of the Firm’s systems, platforms, and applications
  • Serve as a Subject Matter Expert (SME) for the VAPT function
  • Serve as the system owner for common VAPT toolsets, platforms, and processes
  • Provide technical assessment reports that are easily understandable by the target audience and include practical and reasonable recommendations based upon sound risk management principles

Skills and experience:

  • A Computer Science bachelor’s degree or substantially equivalent experience
  • CISSP is required
  • GIAC GPEN or GWAPT is preferred
  • Offensive Security OSCP is required
  • Commanding knowledge of VAPT concepts and best practices, including the requirements for WhiteHat/ethical hacking
  • Expert understanding of the difference between a vulnerability assessment and a penetration test in the context of assessment scope, objectives, and deliverables
  • Extensive experience with common automated VAPT tools such as Nessus, Appscan, Burp Suite, Nipper, and Trustwave 
  • Expert in common attack tools and frameworks such as Wireshark, Kali, Metasploit, etc.    
  • Expert in mobile platform security technology, including vulnerability identification and exploitation tools, as well as mobile platform security best practices, frameworks, etc.
  • Understand VAPT in the context of risk management and organizational priorities
  • Passionate in the practice and pursuit of VAPT excellence
  • Able to validate the presence of identified vulnerabilities with accuracy
  • Master in common application platforms and technologies to effectively understand and evaluate complex application assessments via the use of manual techniques and simple tools such as proxies and browser plugins
  • Authoritative mastery of OWASP, CVE, general security controls, and other foundational topics, such as the latest application and operating system exploits
  • Expert knowledge of common scripting and programming languages is advantageous.      
  • Ongoing commitment to understanding the threat landscape and common adversary motivations/practices.  Ability to quickly adapt practices to evolving circumstances
  • Able to maintain critical thinking and composure under pressure
  • Strong written and oral communication skills. Ability to convey complex concepts to non-technical constituents. Proficiency in oral and written English
  • Capable of assisting with the preparation of internal training materials and documentation

Location: Belfast, Manila, or Tampa Centers, or the Chicago office

Reports to: Director, Security Engineering 

Travel requirements: Ad hoc travel will be required.

Position Type: Center

Development Framework: Business Support

About us

At Baker McKenzie we are different in the way we think, work and behave. With our team of 13,000 people, including over 6,500 locally admitted lawyers, in over 70 offices worldwide, we have a passionately collaborative community of 60 nationalities and are committed to world-class career development to everyone in every job at every level. Baker McKenzie can offer you both the uncompromising commitment to excellence expected of a top firm paired with a passionately global and genuinely collaborative working environment.

Additional Information

This position is bonus-eligible and offers comprehensive benefits, including medical, dental, vision, and 401(k) plans, based on the number of hours worked. 

The US base compensation for this position is expected to be $75,000 to $110,000 annually if located in an office in the state of Illinois (Chicago). Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.

Baker McKenzie is an Equal Opportunity Employer. We are committed to promoting diversity and inclusion for all. Our unique international culture is reflected in the drawing together of a worldwide family of individuals from diverse cultures and backgrounds in all of our offices. We encourage the best people - regardless of race, religion or belief if any, gender, gender identity, disability, sexual orientation or age - to fulfill their professional aspirations with us.  We are committed to ensuring an inclusive and accessible experience for all candidates. Should candidates require any reasonable adjustments and/or accommodations when applying to or interviewing with our Firm, please notify [email protected]

Job Tags

Work at office, Worldwide,

Similar Jobs

Avatar Managed Services

MSP IT Specialist - Help Desk (Tier 1-2) Job at Avatar Managed Services

 ...professional resolution of user requests for help and other services. They play a crucial...  ...users. Candidates should have some experience with desktop hardware, software applications...  ...manage tracking tickets according to Service Desk standard operating procedures. Triage... 

Estiatorio Milos - Corporate

Event Sales Director Job at Estiatorio Milos - Corporate

 ...meal. It encompasses the time-honored virtue of hospitality or, to put it in Greek, philoxenia. POSITION SUMMARY The Event Sales Director role will be responsible for leading and managing the sales team across the US to achieve revenue targets by selling private... 

Hatch Global Search

Relay Settings Electrical Engineer OOJ - 32861 Job at Hatch Global Search

 ...Job Description Design protective relay and control settings by applying principles and techniques of electrical power engineering. Model power systems and protection schemes and perform analyses and studies. Perform arc-flash studies in accordance with industry standards... 

Wellpath

Mental Health Professional - LCSW, LMHC, LPC Job at Wellpath

 ...Treatment (MAT) preferred Licenses/Certifications~ Licensed or license-eligible in the State of practice e.g. LCSW, LMFT, LPC, LMHC, Psychologist - Must maintain all licensures, certifications, continuing educational requirements, etc. Additional Details... 

ClinSmart

Clinical Research Associate Job at ClinSmart

Clinical Research Associate (CRA)Position: Full TimeLocation: RemoteJob Duties:~Evaluate and train investigators~Attend investigator meetings~Conduct pre-study initiation visits~Orient site personnel to study protocol and procedures~Perform on-site and...