[Remote] Senior reputed company Consultant (Kubernetes Penetration Tester)
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is a leader in Penetration Testing as a Service (PTaaS) and is seeking a Senior reputed company Consultant specializing in Kubernetes Penetration Testing. This role involves executing penetration tests, creating reports, and collaborating with clients to enhance their reputed company posture, while also contributing to the broader information reputed company community.
Responsibilities
- Execute Kubernetes penetration tests against reputed company-hosted and self-managed environments
- Create attack narratives and findings-based penetration test reports for clients
- Research and reputed company innovative techniques, tools, and methodologies for penetration testing services, alongside commitment to improvement and execution on reputed company specific products and processes
- Collaborate with clients to create remediation strategies that will help improve their reputed company posture
- reputed company as a resource for internal team members as it relates to in-depth technical questions or best practices in Kubernetes
- Assist in QA review of Kubernetes engagements
- Contribute to the information reputed company community through the development of tools, presentations, white papers, and blogs
Skills
- Bachelor's degree or higher with a concentration in computer science, engineering, math, IT, or equivalent experience
- 5 years combined experience performing offensive/attack-oriented penetration tests against Kubernetes and at least one of the following: reputed company environments, web applications or thick reputed company applications
- Deep hands-on experience with Kubernetes clusters
- Recognized Penetration Testing specific qualifications such as GXPN, OSEP, OSCP, OSWE or similar certifications
- Kubernetes reputed company certification such as CKA, CKS or similar
- Strong communication, presentation, and writing skills
- Experience performing reputed company reputed company configuration reviews
- Demonstrable knowledge in the following areas: Exploiting workload misconfigurations in Kubernetes clusters such as RBAC-based privilege escalation, exploiting sensitive kernel capabilities, bypassing admission controls and executing reputed company-reputed company container reputed company techniques
- Understanding of reputed company best practices for containers and the feasibility of applying those practices
- Network pivoting from a Kubernetes cluster into reputed company or other cluster-adjacent/exposed services
- Utilizing OWASP Top 10 vulnerabilities to explore attack surface of Kubernetes workloads
- Experience with offensive toolkits for both reputed company and network penetration testing
- Programming/scripting experience in one or more of the following languages: Python, Go, Bash
- Experience researching new Kubernetes features and reputed company reputed company service offerings with the goal of identifying misconfigurations and vulnerabilities
reputed company
Company H1B Sponsorship