Offensive Security Engineer

Company: Teradata
Location: San Diego
Posted on: March 28, 2020

Job Description:

Our TeamThe Offensive Security Team at Teradata drives security improvement through research and education. Teradata offensive assessments range from application penetration tests and research projects to wide scope full-scale adversary simulation. These exercises are supplemented with demonstrations, reports, training, and automated tool development to assist engineering and operation teams in creating safer environments for Teradata's customers and employees.Your OpportunityAs an Offensive Security Engineer, you will be a key contributor to all aspects of the Teradata offensive security program.-- Every day is different as we strive to identify security risks, develop tools, and create training based on findings.-- As a participant in architecture and design meetings, your alternative perspective will ensure robust and hardened products and infrastructure.-- You will design and execute a variety of security assessments, including penetration tests and red team operations to explore and demonstrate potential threats while highlighting risk. As part of a small and diverse team of experts in their field, you will be learning and growing on a daily basis. You will provide valuable insight to senior members of teams across Teradata, helping them to develop a security-first mindset.ResponsibilitiesConduct a wide range of offensive security assessments (White, Grey, Black Box), utilizing architecture diagrams, threat models, and code repositories to identify and exploit security flawsWrite and present detailed reports with findings and remediation recommendations, for both technical and non-technical audiencesAssist teams in remediation efforts by clarifying finding details and identifying best practice fixes or mitigationsDesign and present developer security educationEvaluate existing automated security tools, or develop when practical, to assist in identifying and exploiting activitiesParticipate in working groups to evaluate and refine secure lifecycle strategies and proceduresContribute to and support the effort to build intellectual property via patents--QualificationsAbility to communicate effectively with business representatives in explaining findings clearly and where necessary, in non-technical termsIn-depth knowledge of at least one technical area of expertise (e.g. Active Directory administration, web application development, network engineering, etc)Ability to automate tasks using a scripting language (Python, Ruby, etc)Familiarity with common reconnaissance, exploitation, and post-exploitation frameworksUnderstanding of common vulnerability projects (OWASP Top 10, SANS Top 20, etc)Ability to perform targeted penetration tests without the use of automated toolsAbility to read multiple programming and scripting languagesStrong attention to detail in conducting analysis combined with an ability to accurately record full documentation in support of their work1+--years in an offensive security position or 0-3--years in information securityPenetration testing focused certification preferred (OSCP, GPEN, GXPN, GWAPT, EWPT, etc)

Keywords: Teradata, San Diego , Offensive Security Engineer, Engineering , San Diego, California