Information Security Analyst (Penetration Testing)

Tevora - Irvine, CA

Full-time - Entry Level

Irvine, CA

Professional, Scientific, and Technical Services

About the position

Tevora is seeking an Information Security Analyst specializing in Penetration Testing to join their Threat, Penetration Testing team. This growth-oriented role involves analyzing and attacking client services, applications, and networks to ensure they are secured against the latest threats. The ideal candidate will have technical proficiency, experience in penetration testing, and a passion for information security.

Responsibilities

• Actively participate in application penetration testing, network penetration testing, wireless network assessments, and social engineering projects.
• Produce high-quality penetration testing reports for client executives and technical personnel.
• Present the results of penetration testing activities, including an explanation of findings and recommended remediations.

Requirements

• Minimum of 1-2 years of professional experience in penetration testing, information security, or other relevant technical roles.
• Preferred Bachelor's Degree or achievement of or in process with at least one industry certification: OSCP, OSCE, GWAPT, GPEN, and GXPN.
• Knowledge and understanding of security engineering, system and network security, authentication and security protocols, cryptography, mobile, and web application security.
• Experience using various penetration testing tools (such as NMAP, Nessus, Cobalt Strike, Burp Suite, Metasploit, etc.) on Windows and Linux.
• Knowledge of scripting languages (such as Python, Ruby, Perl, Bash, VB/WScript, PowerShell, etc.).
• Experience with the theory and usage of penetration testing frameworks like SANS, OWASP Testing Guide v4, NIST or PTES.
• Excellent written and verbal communication, multi-tasking, time management, and analytical abilities.

Nice-to-haves

• Experience and proficiency in one or more application programming languages and frameworks.
• Computer Science or Electrical Engineering or related degree.
• T. and network administration experience.
• Open-source contributions.
• Proficiency in reverse engineering x86 and/or ARM binaries.
• iOS and/or Android Application testing experience.
• Desktop Application testing experience.
• Hardware hacking skills: Soldering, reflow, dumping ROMs, firmware analysis, board protocol fuzzing/interaction (JTAG, UART, SPI, etc).

Benefits

• Comprehensive benefits offering
• Paid time off and holidays
• 401k with Company match
• Vibrant work culture