Security Vulnerability and Penetration Testing (VAPT) Engineer Security Vulnerability and Penetration Testing (VAPT) Engineer Job at Baker McKenzie, Washington DC

TUhxeGl6eGkwMTVTeGVTZXJXQi9rYlBM
  • Baker McKenzie
  • Washington DC

Job Description

Description

The Security Vulnerability and Penetration Testing (VAPT) Engineer will oversee and serve as a technical resource for all assessment activity related to the security posture of existing and proposed firm systems, platforms, and processes to protect and continually improve the confidentiality, integrity, and availability of information systems per the firm's business objectives, regulatory requirements, and strategic goals.

Responsibilities:
  • Perform security penetration testing of the Firm’s systems, platforms, and applications
  • Serve as a Subject Matter Expert (SME) for the VAPT function
  • Serve as the system owner for common VAPT toolsets, platforms, and processes
  • Provide technical assessment reports that are easily understandable by the target audience and include practical and reasonable recommendations based upon sound risk management principles

Skills and Experience:

  • Possess a Computer Science bachelor’s degree or substantially equivalent experience
  • CISSP required
  • GIAC GPEN or GWAPT preferred
  • Offensive Security OSCP required
  • Commanding knowledge of VAPT concepts and best practices, including the requirements for WhiteHat/ethical hacking
  • Expert understanding of the difference between a vulnerability assessment and a penetration test in the context of assessment scope, objectives, and deliverables
  • Extensive experience with common automated VAPT tools such as Nessus, Appscan, Burp Suite, Nipper, and Trustwave 
  • Expertise with common attack tools and frameworks such as Wireshark, Kali, Metasploit, etc.    
  • Expertise with mobile platform security technology, including vulnerability identification and exploitation tools, as well as mobile platform security best practices, frameworks, etc.
  • Understands VAPT in the context of risk management and organizational priorities
  • Passionate in the practice and pursuit of VAPT excellence
  • Able to validate the presence of identified vulnerabilities with accuracy
  • Mastery of common application platforms and technologies to effectively understand and evaluate complex application assessments via the use of manual techniques and simple tools such as proxies and browser plugins
  • Authoritative mastery of OWASP, CVE, general security controls, and other foundational topics, such as the latest application and operating system exploits
  • Expert knowledge of common scripting and programming languages is advantageous.      
  • Ongoing commitment to understanding the threat landscape and common adversary motivations/practices.  Ability to quickly adapt practices to evolving circumstances
  • Able to maintain critical thinking and composure under pressure
  • Strong written and oral communication skills.  Ability to convey complex concepts to non-technical constituents.  Proficiency in oral and written English
  • Capable of assisting with the preparation of internal training materials and documentation
  • Able to be productive and maintain focus without direct supervision

This position is bonus-eligible and includes medical, dental, vision, and 401(k)benefits based on the number of hours worked. 

If located in an office in one of the states listed (New York, Illinois, California, or Washington DC), the US base compensation for this position is expected to be in the range of $130,000-$150,000. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.

Job Tags

Similar Jobs

Remote Amazon Writers Needed

Remote Amazon Book Project Coordinator - No Degree or Experience Needed Job at Remote Amazon Writers Needed

 ...books using AI tools and ready-to-use templates. You dont need a degree. You dont need to be a writer. You dont need to buy any...  .... You dont need to enjoy writing, and you dont need to speak English as your first language. As long as you can follow instructions... 

Bowai HiredExpat

Yangpu district, Shanghai//August 2025// High School AP Geography teacher Needed in August 2025 in Yangpu, Shanghai (up to 35k/m before tax or more, housing) Job at Bowai HiredExpat

Starting Date: August 29th, 2024; Location: Yangpu district, Shanghai Near Guoquan roadstation of line 10/18; Positions: 1.High School AP Geography position Details: 1.About 20 classes of 40 minutes a week; 2.Students'aged 15-18 years old; 3. Working...

Community Health Systems

Credentialing Specialist Job at Community Health Systems

**Job Summary**The successful Credentialing Specialist (CS) will be responsible for processing initial and re-credentialing applications of healthcare providers. Reviews applications, processes primary source verifications (PSV), prepares files for review by medical staff... 

CRH

Equipment Operator Job at CRH

 ...sealant technologies. Job Summary As an Oldcastle Loader Operator, you will operate a front-end loader and an excavator in anoutdoor, paved environment. Operators will use equipment to move bulk material throughout a manufacturing facility, while adhering... 

Central Carolina Hospital

RN - Recovery/PACU - PRN Job at Central Carolina Hospital

 ...excitement and activity offering delights to satisfy the foodies, art lovers, history enthusiasts, and more. Why Choose Us: Health (Medical, Dental, Vision) and 401K Benefits for full-time employees Competitive Paid Time Off / Extended Illness Bank package...