Work from anywhere and shape powerful strategies that drive results! Enjoy the freedom of remote work while making a global impact.
Proclinical is seeking a DEU IT - Information Technology / Infrastructure & Core Technology Specialist to support a project focused on identifying vulnerabilities in web applications, APIs, and cloud infrastructures. This role involves proactive risk reduction through systematic discovery and monitoring of external assets.
Responsibilities:
1. Conduct penetration testing and vulnerability analysis for web applications, APIs, networks, and cloud environments using various methodologies (black-box, gray-box, white-box).
2. Identify and document vulnerabilities, including OWASP Top 10 risks, misconfigurations, and privilege escalation paths.
3. Create detailed penetration test reports with technical risk ratings, attack paths, and remediation recommendations.
4. Verify remediation efforts through structured re-testing procedures.
5. Discover and inventory external attack surface assets, including unmanaged assets and exposed APIs.
6. Analyze attack surface changes and document exposure trends over time.
7. Prioritize findings based on exploitability and threat intelligence data.
8. Provide technical recommendations to engineering and DevOps teams for remediation strategies.
9. Execute threat modeling and security architecture reviews.
10. Develop custom scripts and automation tools for offensive security and attack surface management processes.
Key Skills and Requirements:
11. Expertise in penetration testing and vulnerability analysis across various environments (web, API, network, cloud).
12. Strong understanding of OWASP Top 10 risks and other common vulnerabilities.
13. Proficiency in creating detailed technical reports and documentation.
14. Experience with attack surface discovery, monitoring, and analysis.
15. Ability to prioritize technical findings based on risk and threat intelligence.
16. Knowledge of threat modeling and security architecture best practices.
17. Familiarity with scripting and automation tools for security processes.
18. Excellent communication and consulting skills to collaborate with engineering and DevOps teams.