Cloud Security/Penetration Test Engineer

Appspace is dedicated to improving work experiences globally and is looking for a skilled Cloud Security/Penetration Test Engineer. In this role, you will design and implement secure cloud configurations, perform manual penetration testing, and provide strategic guidance to ensure robust and compliant cloud infrastructures for clients.

Responsibilities:

• Perform manual penetration testing activities on Web Applications and Mobile Applications using black-box testing tools, in-depth penetration test (using shell scripts and manual testing) techniques, DAST & SAST tools. The candidate should be highly experienced with black box, gray box and white box testing techniques along with red teaming skills
• Understand the application architectural components, business purpose of the application and code at high level. The resource will be responsible for assisting in architecting secure coding practices
• Web Application: Highly familiar with OWASP Top 10 and the ASVS. You will be the Subject Matter Expert within the organization to demonstrate OWASP Top 10 findings and provide resolution recommendations
• Cloud Security Operations: Design, implement, and optimize robust cloud security architectures to enhance, build, monitor and address all security alerts from our SIEM and other security systems. This is an operational role whereby you will be available M-F 8am-5pm EDT and on-call shifts on evenings and weekends
• Network Security Expertise: Your network security and cloud security expertise will be required to respond to customer questionnaires, customer calls and create artifacts including network diagrams, architecture diagram, data flow diagrams and other artifacts to support customer requests. Strong written skills will be required here and attention to detail
• Firewall & WAF Management: Configure, manage, and troubleshoot cloud-native firewalls (e.g., GCP Cloud Firewall, Azure Firewall, AWS Security Groups/NACLs) and Web Application Firewalls (WAFs) to protect web applications from common vulnerabilities and attacks. The candidate will demonstrate past hands-on network experience in managing complex layer-4 to layer-7 rules
• SIEM Integration & Optimization: As a Level-2 Security Operations support team member, you will review all security alerts and resolve these alerts in a timely manner. You will work with our current Security Operations team to expand on our current alerting and reporting capabilities to enhance visibility across our attack surface. Powershell or similar scripting skills will be required
• SaaS Security Best Practices: Provide expert guidance on securing SaaS applications, including identity and access management (IAM), data encryption, API security, and secure configuration baselines. You will be responsible for leading and managing all firewall reviews, access reviews, system reviews and risk assessments
• Compliance & Governance: Lead and contribute to compliance initiatives, ensuring cloud environments adhere to industry regulations and frameworks such as GDPR, SOC 2, ISO 27001, CMMC and CSA STAR. Conduct security assessments and gap analyses
• Customer Engagement & Presentation: Act as a trusted advisor to clients, effectively communicating complex technical security concepts to both technical and non-technical stakeholders. Deliver engaging presentations, attend client workshops, and build strong client relationships
• Incident Response & Remediation: Support incident response activities by providing expert analysis and remediation strategies for cloud security incidents. This will extend to leading Incident Response Plan initiatives and creating documentation for all parties to follow specific plans
• Vulnerability Management and Penetration Testing: Responsible for running the comprehensive vulnerability management and penetration testing program. The candidate will be responsible for reviewing, interpreting and advising operations teams on how best to remediate identified vulnerabilities and work with the operations to bring all findings to a close. The candidate will be responsible for working with our software development teams to review, manage and collaborate on the remediation of open OWASP findings
• Stay Ahead of the Curve: Continuously research and evaluate emerging cloud security threats, technologies, and best practices

Requirements:

• Bachelor's Degree in Statistics, Computer Science, Risk Management, Cyber Security, or related field
• 5+ years of experience in web application penetration testing
• 5+ years in cloud or network penetration testing
• 4+ years of experience managing, tracking and supporting a security program including compliance, risk management, security operations, security engineering and cloud security initiatives
• 4+ years of experience securing, configuring and supporting cloud environments (Azure and GCP)
• 4+ years of experience supporting a security operations center, managing security alerts, configuring SIEMs and, creating custom alerts using PowerShell, Python or Bash scripts
• Provide guidance on security vulnerabilities, responding to security questionnaires, working with software engineering teams on OWASP Top 10 vulnerabilities, secure coding practices, and threat modeling
• CISSP is required
• Security Certifications: CISSP, GWAPT, OSWA or OSCP are required, CISM desirable and other certifications would be a plus
• Microsoft certifications a plus
• Relevant industry certifications like OSWE or Cloud Provider Certifications (e.g., Google Cloud Professional Cloud Security Engineer, Azure Security Engineer Associate, AWS Certified Security – Specialty, CCSP)
• Experience with Infrastructure as Code (IaC) tools (e.g., Terraform, CloudFormation, ARM templates) for security automation
• Scripting skills (e.g., Python, PowerShell, Bash)
• Experience with container security (Docker, Kubernetes)
• Knowledge of DevSecOps principles and practices