Senior Associate - Penetration Testing - Chicago, IL or Remote

Back to All Open Roles

Senior Associate
- Penetration Testing

Consulting Services
- Offensive Security
- Chicago, Illinois

$125,000 - $195,000/year (depending on knowledge, experience, and location)

Description

Do you love what you do for a career? Do you want to?

Urbane is seeking the most talented, driven, and intelligent in offensive and defensive security to join our Security Services teams to help secure the largest and most interesting organizations, platforms, and products in the world. From large-scale cloud platforms to the newest mobile applications; global financial processing to regional healthcare providers; cutting edge devops environments to traditional corporate enterprises
- Urbane is called on to help organizations face unique, highly technical, and critical challenges.

In this role you’ll assess real-life risks to diverse technical environments by identifying security weaknesses, actively exploit their findings, and determine additional impact through post exploitation. Given your expertise and drive, you’ll face diverse challenges including black box network testing, insider threat assessments, credentialed application exploitation, and testing the effectiveness of human and physical controls. You’ll have the opportunity to excel independently while having an expert team drive you to achieve your best and back you up with the diverse challenges you’ll face.

Occasionally, and to keep things interesting, you’ll switch sides to maintain a full perspective of the security landscape by providing guidance on defensive designs or assisting compliance associates on difficult technical choices.

With Urbane you ll have the power to make a difference and face real challenges: improving environments security, advising teams on the most effective ways to address the core security problems, and address real security problems. Challenges vary week to week and provide a wealth of experience.

Sound like an exciting challenge and a cause you can get behind? Read on.

You Should Possess The Following Key Character Traits

• Creative, out-of-the-box thinker who can leverage various domains of knowledge to create uniquely tailored tests and solutions for complex problems.
• You're curious by nature, intrigued by how things work, and have an appetite to find weaknesses in their design and implementation.
• You prefer building, contributing, and leading over falling in line.
• You're happy to put in the extra effort building a tool that makes everyone s lives easier.
• Urbane team members value developing long-term client relationships over “drop the mic” moments. You want to provide remediation suggestions that address the core issues, are sustainable, and work within the confines of the target environment.
• You're passionate about technology and find entertainment in crazy personal projects (i.e., programming a USB Nerf gun and webcam to mess with your cat while you aren’t at home, building an enterprise-grade virtualization environment in your bedroom closet, or seeing how many neighbors think your “free” wifi is actually “free”).
• A desire to stay current with the latest technologies, attacks, and hardening strategies. You're a regular online reader of blogs and social media for the latest in security, enjoy good conference talks, and/or contribute to interesting projects.
• Driven personality, with a desire to continuously improve, put in the hours, and deliver. You take pride in your work, and you want it to be the best you can do.
• Not opposed to traveling and can survive occasions requiring Domestic/International travel (currently less than 25%, but subject to fluctuate).
• Highly organized and detail-oriented with the ability to independently prioritize multiple projects while still balancing personal goals. You recognize when you need help, and aren t afraid to ask for it.
• Have a strong ethical compass and an understanding of ethics in business and information security. You ll respect scope limitations, clean up after your attacks, and never access or retain data that isn t pertinent to the testing.
• Equally comfortable holding your own with a technical audience (especially the Unix-Beards) as well as communicating to a…