DirecciónAbout us : At Echelon Risk + Cyber we believe in defending the basic human right to security and privacy. We are looking for an exceptional Senior Offensive Security Consultant to join our team. We believe passion in security is paramount and those who strive to improve their knowledge in this field will grow quickly in our practice. Work will be performed in a consultative manner with clients of various industries, sizes, and makeup.
Our next team member will be ready to roll up their sleeves and identify opportunities for our clients and for Echelon internally with unquestioned integrity. This team member will be passionate about cybersecurity and ready to use their knowledge to be an Entrepreneurial Problem Solver and work alongside their Echelon team members to build creative solutions.
At Echelon, we believe learning never stops. You will have the opportunity to engage with systems that are at the cutting edge of technology and team members that will challenge you with meaningful work. We allow our team members to build from the ground up and make an impact across the organization.
What You Will Do (Responsibilities) :
- Be a technical leader while executing security assessments and audits, including penetration testing (internal, external, web, wireless, physical), adversarial emulation exercises (red teams), social engineering exercises, and other Offensive Security-related exercises to improve a client's overall security posture.
- Build and maintain technical knowledge of adversarial activity to emulate similar TTPs during security assessments.
- Use resourceful thinking to identify and exploit security vulnerabilities usually missed by automated tools
- Contribute detail-oriented documentation on findings, observations, remediation steps, and/or mitigation recommendations in the form of Word and/or PowerPoint reports.
- Find ways to improve your tradecraft and knowledge in the adversarial simulation space
- Assist in developing a team to support client engagements and the firm mission, vision, and values
- Conduct research and develop Offensive Security tools and exploits based on current and emerging TTPs
- Produce thought leadership for the organization's website blog on a regular basis
- Actively be involved in the cybersecurity community, speak at local and national conferences
Requirements :
- 3-5 years of offensive cybersecurity experience
- Demonstrated ability to lead and perform Offensive Security engagements with little to no guidance
- A relevant Offensive Security Certification: GWAPT, eWPTX , eWPT, GCPN, GXPN, OSCP
- Competency in penetration testing technical abilities and capabilities, including preferred practice models PTES, PCI-DSS, etc.
- Experience with cloud security best practices and frameworks
- Ability to mentor, train, and develop others in a team environment, including a remote environment setting
- Considers communication style based on audience- ability to communicate highly technical findings to a non-technical audience clearly
- Strong attention to detail and superior analytical, technical, and problem-solving skills
- Demonstrated experience collaborating with senior business leaders in support of security strategy- influencing and interpersonal skills
- Ability to multitask, prioritize and lead teams in constantly evolving environments
- Proven track record of solving complex and unique problems with no clear solution by use of expertise and unique knowledge
- Ability to effectively communicate with a remote work team
- Advanced level of English, both verbal and written
- Authorized to work in Mexico
Bonus Qualifications :
- A Degree in a relevant IT or Cybersecurity major
- Active engagement in a penetration testing framework
- HTB account with an active rank of "hacker" or above, or similar training platform rank/skill
- Consulting experience
Why Echelon? We are committed to creating an inclusive environment for our team with unquestioned integrity. If you have a special need that requires accommodation, please let your recruiter know. One of our core values is "People with Personality" and we want to allow you the space to bring your full self to work.
We currently offer the following benefits:
- Access to private medical insurance through Axa
- Life insurance policy thru Sura Seguros
- 30-day Christmas bonus and a monthly technology stipend
- Contribution of 8% of the employee's salary to a savings fund
- Flexible vacation policy that allows you to manage your schedule and rest and recharge when you need to
- Family-friendly benefits, including 16 weeks off for Maternity leave, eight weeks off for non-birthing parent leave, and employer-paid short-term and long-term disability
- Support individual development through certifications, continued learning, conferences, and more
We value a diverse workforce and a culture of inclusivity and belonging. All employment decisions shall be made without regard to age, race, creed, color, religion, gender, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law. Echelon Risk + Cyber is an Equal Opportunity Employer.
