Consultant - Penetration Testing

Consultant - Penetration TestingThe Dell Security & Resiliency organization manages the security risk across all aspects of Dell’s business. We are currently experiencing incredible growth in order to meet the security needs of the world’s largest technology company. With team members located in over 15 countries, you will have an excellent opportunity to influence the security culture at Dell and further develop your career.Join us as a Consultant on our Penetration Testing team in Mexico - Remote to do the best work of your career and make a profound social impact.What you’ll achieveYou will:- Conduct and participate in authorized penetration testing exercises.- Report on and prioritize issues to vendors, security team, and engineering through standard escalation processes.- Develop and maintain tools and techniques for adversarial simulation, vulnerability research, and exploit development and support the continuous development and maintenance of team frameworks and operating procedures.- Communicate new developments, breakthroughs, challenges and lessons learned to team members and leadership.- Contribute to the development of cybersecurity strategy, policy, standards, and procedures.- Provide technical expertise on how to integrate information security controls into enterprise environments to comply with established security standards and policies.- Continuously upgrade knowledge, skills & awareness in cybersecurity technologies by way of independent research, training or any other self -improvement methods e.g.; (Reading, HTB, CTF competitions)- Mentor team members and support their technical development by sharing own expertise and knowledge.- Lead or collaborate on additional projects, assignments, and initiatives as required.Take the first step towards your dream careerEvery Dell Technologies team member brings something unique to the table. Here’s what we are looking for with this role:Essential Requirements:- Expert-level knowledge and experienced in:- Penetration testing principles, tools, techniques and cyberattack stages- Computer networking and network security methodologies- Operating systems internals- Web Application, Web API and Network/Infrastructure Testing- At least 1 of the following testing areas - Cloud Security, Mobile Application, Binary/Client Application, Red Teaming and Purple Teaming- Advanced-level knowledge of:- Cryptography and cryptographic key management concepts- Payment Card Industry Data Security Standards- Low-level computer languages and software debugging principles- Competency with any of the following tools: User and kernel-mode debuggers (WinDbg,x64dbg), IDA Pro, Hex-Rays, Visual Studio, Driver Verifier- Experienced with the Metasploit Framework- Experience in security-focused source code reviews (C, C++, Java,.NET, Python, etc.)- Scripting experience with the ability to develop custom scripts, exploits, and tools- Excellent problem-solving skills with the ability to diagnose and troubleshoot technical issues- Works with a great deal of independence- Possess excellent written and verbal communication skills in English- Create professional reports and present security findings to development teams and stakeholders- Customer-oriented with a strong interest in customer satisfactionEssential Requirements:- 12+ years of Information Security experience- 8+ years direct or equivalent experience in areas of penetration testing, exploit development, vulnerability research and fuzzing- Bachelor of Science in Computer Science, Computer Engineering, or Electrical Engineering or a related technical field or equivalent professional experience- Relevant Cybersecurity Certifications- Offensive Security:- Offensive Security Certified Professional (OSCP)- Offensive Security Certified Expert (OSCE)- Security Wireless Professional (OSWP)- Offensive Security Experienced Penetration Tester (OSEP)- Offensive Security Web Expert (OSWE)- Offensive Security Exploit Developer (OSED)- Offensive Security Exploitation Expert (OSEE)- Global Information Assurance Certification (GIAC):- GIAC Penetration Tester (GPEN)- GIAC Web Application Penetration Tester (GWAPT)- GIAC Exploit Researcher and Advanced Penetration Tester (GXPN)- Published or presented security research or security advisories- Public track record of finding impactful vulnerabilitiesHere’s our story; now tell us yoursDell Technologies helps organizations and individuals build a brighter digital tomorrow. Our company is made up of more than 150,000 people, located in over 180 locations around the world. We’re proud to be a diverse and inclusive team and have an endless passion for our mission to drive human progress.What’s most important to us is that you are respected, feel like you can be yourself and have the opportunity to do the best work of your life - while still having a life. We offer excellent benefits, bonus programs, flexible work ar